CVE-2015-9251

Published: Jan 18, 2018Modified: Nov 21, 2024

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

Vulnerable Software	Affected Versions
Oracle Agile Product Lifecycle Management For Process	Version 6.2.0.0
Oracle Agile Product Lifecycle Management For Process	Version 6.2.1.0
Oracle Agile Product Lifecycle Management For Process	Version 6.2.2.0
Oracle Agile Product Lifecycle Management For Process	Version 6.2.3.0
Oracle Agile Product Lifecycle Management For Process	Version 6.2.3.1
Oracle Banking Platform	Version 2.6.0
Oracle Banking Platform	Version 2.6.1
Oracle Banking Platform	Version 2.6.2
Oracle Business Process Management Suite	Version 11.1.1.9.0
Oracle Business Process Management Suite	Version 12.1.3.0.0
Oracle Business Process Management Suite	Version 12.2.1.3.0
Oracle Communications Converged Application Server	Before 7.0.0.1
Oracle Communications Interactive Session Recorder	Version 6.0
Oracle Communications Interactive Session Recorder	Version 6.1
Oracle Communications Interactive Session Recorder	Version 6.2
Oracle Communications Services Gatekeeper	Before 6.1.0.4.0
Oracle Communications Webrtc Session Controller	Before 7.2
Oracle Endeca Information Discovery Studio	Version 3.1.0
Oracle Endeca Information Discovery Studio	Version 3.2.0
Oracle Enterprise Manager Ops Center	Version 12.2.2
Oracle Enterprise Manager Ops Center	Version 12.3.3
Oracle Enterprise Operations Monitor	Version 3.4
Oracle Enterprise Operations Monitor	Version 4.0
Oracle Financial Services Analytical Applications Infrastructure	From 7.3.3 to 7.3.5
Oracle Financial Services Analytical Applications Infrastructure	From 8.0.0 to 8.0.7
Oracle Financial Services Asset Liability Management	From 8.0.4 to 8.0.7
Oracle Financial Services Data Integration Hub	From 8.0.5 to 8.0.7
Oracle Financial Services Funds Transfer Pricing	From 8.0.4 to 8.0.7
Oracle Financial Services Hedge Management And Ifrs Valuations	From 8.0.4 to 8.0.7
Oracle Financial Services Liquidity Risk Management	From 8.0.2 to 8.0.6
Oracle Financial Services Loan Loss Forecasting And Provisioning	From 8.0.2 to 8.0.7
Oracle Financial Services Market Risk Measurement And Management	Version 8.0.5
Oracle Financial Services Market Risk Measurement And Management	Version 8.0.6
Oracle Financial Services Profitability Management	From 8.0.4 to 8.0.6
Oracle Financial Services Reconciliation Framework	Version 8.0.5
Oracle Financial Services Reconciliation Framework	Version 8.0.6
Oracle Fusion Middleware Mapviewer	Version 12.2.1.3.0
Oracle Healthcare Foundation	Version 7.1
Oracle Healthcare Foundation	Version 7.2
Oracle Healthcare Translational Research	Version 3.1.0
Oracle Hospitality Cruise Fleet Management	Version 9.0.11
Oracle Hospitality Guest Access	Version 4.2.0
Oracle Hospitality Guest Access	Version 4.2.1
Oracle Hospitality Materials Control	Version 18.1
Oracle Hospitality Reporting And Analytics	Version 9.1.0
Oracle Insurance Insbridge Rating And Underwriting	Version 5.2
Oracle Insurance Insbridge Rating And Underwriting	Version 5.4
Oracle Insurance Insbridge Rating And Underwriting	Version 5.5
Oracle Jd Edwards Enterpriseone Tools	Version 9.2
Oracle Jdeveloper	Version 11.1.1.9.0
Oracle Jdeveloper	Version 12.1.3.0.0
Oracle Jdeveloper	Version 12.2.1.3.0
Oracle Oss Support Tools	Version 19.1
Oracle Peoplesoft Enterprise Peopletools	Version 8.55
Oracle Peoplesoft Enterprise Peopletools	Version 8.56
Oracle Peoplesoft Enterprise Peopletools	Version 8.57
Oracle Primavera Gateway	Version 15.2
Oracle Primavera Gateway	Version 16.2
Oracle Primavera Gateway	Version 17.12
Oracle Primavera Unifier	From 17.1 to 17.12
Oracle Primavera Unifier	Version 16.1
Oracle Primavera Unifier	Version 16.2
Oracle Primavera Unifier	Version 18.8
Oracle Real Time Scheduler	Version 2.3.0
Oracle Retail Allocation	Version 15.0.2
Oracle Retail Customer Insights	Version 15.0
Oracle Retail Customer Insights	Version 16.0
Oracle Retail Invoice Matching	Version 15.0
Oracle Retail Sales Audit	Version 15.0
Oracle Retail Workforce Management Software	Version 1.60.9
Oracle Retail Workforce Management Software	Version 1.64.0
Oracle Service Bus	Version 12.1.3.0.0
Oracle Service Bus	Version 12.2.1.3.0
Oracle Siebel Ui Framework	Version 18.10
Oracle Siebel Ui Framework	Version 18.11
Oracle Utilities Framework	From 4.3.0.1 to 4.3.0.4
Oracle Utilities Mobile Workforce Management	Version 2.3.0
Oracle Webcenter Sites	Version 11.1.1.8.0
Oracle Weblogic Server	Version 12.1.3.0
Oracle Weblogic Server	Version 12.2.1.3

CVE-2015-9251

Description

Affected (81)

Related CWEs

References (76)

Timeline