CVE-2019-11358

Published: Apr 20, 2019Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

Affected (218)

Products: Jquery: Jquery · Debian: Debian Linux · Drupal: Drupal · +8 more

Show all products

1 product

1 product

1 product

1 product

1 product

2 products

2 products

Oncommand System Manager

Snapcenter

Redhat

2 products

Cloudforms

Virtualization Manager

Oracle

92 products

Agile Product Lifecycle Management For Process

Application Express

Application Service Level Management

Application Testing Suite

Banking Digital Experience

Banking Enterprise Collections

Banking Platform

Bi Publisher

Big Data Discovery

Business Process Management Suite

Communications Analytics

Communications Application Session Controller

Communications Billing And Revenue Management

Communications Diameter Signaling Router

Communications Eagle Application Processor

Communications Element Manager

Communications Interactive Session Recorder

Communications Operations Monitor

Communications Services Gatekeeper

Communications Session Report Manager

Communications Session Route Manager

Communications Unified Inventory Management

Communications Webrtc Session Controller

Diagnostic Assistant

Enterprise Manager Ops Center

Enterprise Session Border Controller

Financial Services Analytical Applications Infrastructure

Financial Services Analytical Applications Reconciliation Framework

Financial Services Asset Liability Management

Financial Services Balance Sheet Planning

Financial Services Basel Regulatory Capital Basic

Financial Services Basel Regulatory Capital Internal Ratings Based Approach

Financial Services Data Foundation

Financial Services Data Governance For Us Regulatory Reporting

Financial Services Data Integration Hub

Financial Services Enterprise Financial Performance Analytics

Financial Services Funds Transfer Pricing

Financial Services Hedge Management And Ifrs Valuations

Financial Services Institutional Performance Analytics

Financial Services Liquidity Risk Management

Financial Services Liquidity Risk Measurement And Management

Financial Services Loan Loss Forecasting And Provisioning

Financial Services Market Risk Measurement And Management

Financial Services Price Creation And Discovery

Financial Services Profitability Management

Financial Services Regulatory Reporting For De Nederlandsche Bank

Financial Services Regulatory Reporting For European Banking Authority

Financial Services Regulatory Reporting For Us Federal Reserve

Financial Services Retail Customer Analytics

Financial Services Retail Performance Analytics

Financial Services Revenue Management And Billing

Fusion Middleware Mapviewer

Healthcare Foundation

Healthcare Translational Research

Hospitality Guest Access

Hospitality Materials Control

Hospitality Simphony

Identity Manager

Insurance Accounting Analyzer

Insurance Allocation Manager For Enterprise Profitability

Insurance Data Foundation

Insurance Ifrs 17 Analyzer

Insurance Insbridge Rating And Underwriting

Insurance Performance Insight

Jd Edwards Enterpriseone Tools

Jdeveloper

Jdeveloper And Adf

Knowledge

Peoplesoft Enterprise Peopletools

Policy Automation

Policy Automation Connector For Siebel

Policy Automation For Mobile Devices

Retail Central Office

Retail Customer Insights

Retail Customer Management And Segmentation Foundation

Retail Point Of Service

Retail Returns Management

Service Bus

Siebel Mobile Applications

Siebel Ui Framework

Storagetek Tape Analytics Sw Tool

System Utilities

Tape Library Acsls

Transportation Management

Utilities Mobile Workforce Management

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Jquery Jquery	Before 3.4.0

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 8.0
Debian Debian Linux	Version 9.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	From 7.0 to 7.66
Drupal Drupal	From 8.5.0 to 8.5.15
Drupal Drupal	From 8.6.0 to 8.6.15

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Backdropcms Backdrop	From 1.11.0 to 1.11.9
Backdropcms Backdrop	From 1.12.0 to 1.12.6

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Fedoraproject Fedora	Version 28
Fedoraproject Fedora	Version 29
Fedoraproject Fedora	Version 30

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Opensuse Backports Sle	Version 15.0 sp1
Opensuse Leap	Version 15.1

Configuration G

2 vulnerable

Vulnerable Software	Affected Versions
Netapp Oncommand System Manager	From 3.0 to 3.1.3
Netapp Snapcenter	All versions

Configuration H

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Cloudforms	Version 4.7
Redhat Virtualization Manager	Version 4.3

Configuration I

198 vulnerable

Vulnerable Software	Affected Versions
Oracle Agile Product Lifecycle Management For Process	Version 6.1
Oracle Agile Product Lifecycle Management For Process	Version 6.2.0.0
Oracle Agile Product Lifecycle Management For Process	Version 6.2.1.0
Oracle Agile Product Lifecycle Management For Process	Version 6.2.2.0
Oracle Agile Product Lifecycle Management For Process	Version 6.2.3.0
Oracle Application Express	Before 19.1
Oracle Application Service Level Management	Version 13.2.0.0
Oracle Application Service Level Management	Version 13.3.0.0
Oracle Application Testing Suite	Version 12.5.0.3
Oracle Application Testing Suite	Version 13.1.0.1
Oracle Application Testing Suite	Version 13.2.0.1
Oracle Application Testing Suite	Version 13.2
Oracle Application Testing Suite	Version 13.3.0.1
Oracle Application Testing Suite	Version 13.3
Oracle Banking Digital Experience	Version 18.1
Oracle Banking Digital Experience	Version 18.2
Oracle Banking Digital Experience	Version 18.3
Oracle Banking Digital Experience	Version 19.1
Oracle Banking Digital Experience	Version 19.2
Oracle Banking Digital Experience	Version 20.1
Oracle Banking Enterprise Collections	From 2.7.0 to 2.8.0
Oracle Banking Platform	From 2.4.0 to 2.10.0
Oracle Bi Publisher	Version 12.2.1.3.0
Oracle Bi Publisher	Version 12.2.1.4.0
Oracle Bi Publisher	Version 5.5.0.0.0
Oracle Big Data Discovery	Version 1.6
Oracle Business Process Management Suite	Version 12.2.1.3.0
Oracle Business Process Management Suite	Version 12.2.1.4.0
Oracle Communications Analytics	Version 12.1.1
Oracle Communications Application Session Controller	Version 3.8m0
Oracle Communications Billing And Revenue Management	Version 12.0.0.3.0
Oracle Communications Billing And Revenue Management	Version 12.0
Oracle Communications Billing And Revenue Management	Version 7.5.0.23.0
Oracle Communications Billing And Revenue Management	Version 7.5
Oracle Communications Diameter Signaling Router	Version 8.0.0
Oracle Communications Diameter Signaling Router	Version 8.1
Oracle Communications Diameter Signaling Router	Version 8.2.1
Oracle Communications Diameter Signaling Router	Version 8.2
Oracle Communications Eagle Application Processor	From 16.1.0 to 16.4.0
Oracle Communications Element Manager	Version 8.1.1
Oracle Communications Element Manager	Version 8.2.0
Oracle Communications Element Manager	Version 8.2.1
Oracle Communications Interactive Session Recorder	From 6.0 to 6.4
Oracle Communications Operations Monitor	From 4.1 to 4.3
Oracle Communications Operations Monitor	Version 3.4
Oracle Communications Operations Monitor	Version 4.0
Oracle Communications Operations Monitor	Version 4.1.0
Oracle Communications Services Gatekeeper	Version 7.0
Oracle Communications Session Report Manager	Version 8.1.1
Oracle Communications Session Report Manager	Version 8.2.0
Oracle Communications Session Report Manager	Version 8.2.1
Oracle Communications Session Route Manager	Version 8.1.1
Oracle Communications Session Route Manager	Version 8.2.0
Oracle Communications Session Route Manager	Version 8.2.1
Oracle Communications Unified Inventory Management	Version 7.3
Oracle Communications Unified Inventory Management	Version 7.4.0
Oracle Communications Webrtc Session Controller	Version 7.2
Oracle Diagnostic Assistant	Version 2.12.36
Oracle Enterprise Manager Ops Center	Version 12.3.3
Oracle Enterprise Manager Ops Center	Version 12.4.0.0
Oracle Enterprise Manager Ops Center	Version 12.4.0
Oracle Enterprise Session Border Controller	Version 8.4
Oracle Financial Services Analytical Applications Infrastructure	From 7.3.3 to 7.3.5
Oracle Financial Services Analytical Applications Infrastructure	From 8.0.2 to 8.1.0
Oracle Financial Services Analytical Applications Reconciliation Framework	From 8.0.4 to 8.0.7
Oracle Financial Services Analytical Applications Reconciliation Framework	Version 8.1.0
Oracle Financial Services Asset Liability Management	From 8.0.4 to 8.0.7
Oracle Financial Services Asset Liability Management	Version 8.1.0
Oracle Financial Services Balance Sheet Planning	Version 8.0.8
Oracle Financial Services Basel Regulatory Capital Basic	From 8.0.4 to 8.0.7
Oracle Financial Services Basel Regulatory Capital Basic	Version 8.1.0
Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach	From 8.0.4 to 8.0.7
Oracle Financial Services Basel Regulatory Capital Internal Ratings Based Approach	Version 8.1.0
Oracle Financial Services Data Foundation	From 8.0.4 to 8.0.8
Oracle Financial Services Data Governance For Us Regulatory Reporting	From 8.0.6 to 8.0.9
Oracle Financial Services Data Integration Hub	From 8.0.5 to 8.0.7
Oracle Financial Services Data Integration Hub	Version 8.1.0
Oracle Financial Services Enterprise Financial Performance Analytics	Version 8.0.6
Oracle Financial Services Enterprise Financial Performance Analytics	Version 8.0.7
Oracle Financial Services Funds Transfer Pricing	From 8.0.4 to 8.0.7
Oracle Financial Services Funds Transfer Pricing	Version 8.1.0
Oracle Financial Services Hedge Management And Ifrs Valuations	From 8.0.4 to 8.0.7
Oracle Financial Services Hedge Management And Ifrs Valuations	Version 8.1.0
Oracle Financial Services Institutional Performance Analytics	From 8.0.4 to 8.0.7
Oracle Financial Services Institutional Performance Analytics	Version 8.1.0
Oracle Financial Services Liquidity Risk Management	Version 8.0.0.1.0
Oracle Financial Services Liquidity Risk Management	Version 8.0.2
Oracle Financial Services Liquidity Risk Management	Version 8.0.4.0.0
Oracle Financial Services Liquidity Risk Management	Version 8.0.5.0.0
Oracle Financial Services Liquidity Risk Management	Version 8.0.6
Oracle Financial Services Liquidity Risk Measurement And Management	Version 8.0.7
Oracle Financial Services Liquidity Risk Measurement And Management	Version 8.0.8
Oracle Financial Services Liquidity Risk Measurement And Management	Version 8.1.0
Oracle Financial Services Loan Loss Forecasting And Provisioning	From 8.0.2 to 8.0.7
Oracle Financial Services Loan Loss Forecasting And Provisioning	Version 8.1.0
Oracle Financial Services Market Risk Measurement And Management	Version 8.0.5
Oracle Financial Services Market Risk Measurement And Management	Version 8.0.6
Oracle Financial Services Market Risk Measurement And Management	Version 8.0.8
Oracle Financial Services Price Creation And Discovery	From 8.0.4 to 8.0.7
Oracle Financial Services Profitability Management	From 8.0.4 to 8.0.7
Oracle Financial Services Profitability Management	Version 8.1.0
Oracle Financial Services Regulatory Reporting For De Nederlandsche Bank	Version 8.0.4
Oracle Financial Services Regulatory Reporting For European Banking Authority	Version 8.0.6
Oracle Financial Services Regulatory Reporting For European Banking Authority	Version 8.0.7
Oracle Financial Services Regulatory Reporting For Us Federal Reserve	From 8.0.4 to 8.0.7
Oracle Financial Services Retail Customer Analytics	From 8.0.4 to 8.0.6
Oracle Financial Services Retail Performance Analytics	Version 8.0.6
Oracle Financial Services Retail Performance Analytics	Version 8.0.7
Oracle Financial Services Revenue Management And Billing	Version 2.4.0.0
Oracle Financial Services Revenue Management And Billing	Version 2.4.0.1
Oracle Fusion Middleware Mapviewer	Version 12.2.1.3.0
Oracle Healthcare Foundation	Version 7.1.1
Oracle Healthcare Foundation	Version 7.2.0
Oracle Healthcare Foundation	Version 7.2.2
Oracle Healthcare Foundation	Version 7.3.0
Oracle Healthcare Translational Research	Version 3.1.0
Oracle Healthcare Translational Research	Version 3.2.1
Oracle Healthcare Translational Research	Version 3.3.1
Oracle Healthcare Translational Research	Version 3.3.2
Oracle Healthcare Translational Research	Version 3.4.0
Oracle Hospitality Guest Access	Version 4.2.0
Oracle Hospitality Guest Access	Version 4.2.1
Oracle Hospitality Materials Control	Version 18.1
Oracle Hospitality Simphony	From 19.1.0 to 19.1.2
Oracle Hospitality Simphony	Version 18.1
Oracle Hospitality Simphony	Version 18.2
Oracle Identity Manager	Version 12.2.1.3.0
Oracle Insurance Accounting Analyzer	Version 8.0.9
Oracle Insurance Allocation Manager For Enterprise Profitability	Version 8.0.8
Oracle Insurance Allocation Manager For Enterprise Profitability	Version 8.1.0
Oracle Insurance Data Foundation	From 8.0.4 to 8.0.7
Oracle Insurance Ifrs 17 Analyzer	Version 8.0.6
Oracle Insurance Ifrs 17 Analyzer	Version 8.0.7
Oracle Insurance Insbridge Rating And Underwriting	From 5.0.0.0 to 5.6.0.0
Oracle Insurance Insbridge Rating And Underwriting	Version 5.6.1.0
Oracle Insurance Performance Insight	Version 8.0.7
Oracle Jd Edwards Enterpriseone Tools	Version 9.2
Oracle Jdeveloper	Version 11.1.1.9.0
Oracle Jdeveloper	Version 12.2.1.3.0
Oracle Jdeveloper	Version 12.2.1.4.0
Oracle Jdeveloper And Adf	Version 11.1.1.9.0
Oracle Jdeveloper And Adf	Version 12.1.3.0.0
Oracle Jdeveloper And Adf	Version 12.2.1.3.0
Oracle Knowledge	From 8.6.0 to 8.6.3
Oracle Peoplesoft Enterprise Peopletools	Version 8.55
Oracle Peoplesoft Enterprise Peopletools	Version 8.56
Oracle Peoplesoft Enterprise Peopletools	Version 8.57
Oracle Peoplesoft Enterprise Peopletools	Version 8.58
Oracle Policy Automation	From 12.2.0 to 12.2.15
Oracle Policy Automation	Version 10.4.7
Oracle Policy Automation	Version 12.1.0
Oracle Policy Automation	Version 12.1.1
Oracle Policy Automation Connector For Siebel	Version 10.4.6
Oracle Policy Automation For Mobile Devices	From 12.2.0 to 12.2.15
Oracle Primavera Gateway	From 16.2.0 to 16.2.11
Oracle Primavera Gateway	From 17.12.0 to 17.12.7
Oracle Primavera Gateway	From 18.8.0 to 18.8.9
Oracle Primavera Gateway	From 19.12.0 to 19.12.4
Oracle Primavera Gateway	Version 15.2.18
Oracle Primavera Unifier	From 17.7 to 17.12
Oracle Primavera Unifier	Version 16.1
Oracle Primavera Unifier	Version 16.2
Oracle Primavera Unifier	Version 18.8
Oracle Real Time Scheduler	From 2.3.0.1 to 2.3.0.3
Oracle Rest Data Services	Version 11.2.0.4
Oracle Rest Data Services	Version 12.1.0.2
Oracle Rest Data Services	Version 12.2.0.1
Oracle Rest Data Services	Version 18c
Oracle Rest Data Services	Version 19c
Oracle Retail Back Office	Version 14.0
Oracle Retail Back Office	Version 14.1
Oracle Retail Central Office	Version 14.0
Oracle Retail Central Office	Version 14.1
Oracle Retail Customer Insights	Version 15.0
Oracle Retail Customer Insights	Version 16.0
Oracle Retail Customer Management And Segmentation Foundation	Version 18.0
Oracle Retail Customer Management And Segmentation Foundation	Version 19.0
Oracle Retail Point Of Service	Version 14.0
Oracle Retail Point Of Service	Version 14.1
Oracle Retail Returns Management	Version 14.0
Oracle Retail Returns Management	Version 14.1
Oracle Service Bus	Version 11.1.1.9.0
Oracle Service Bus	Version 12.1.3.0.0
Oracle Service Bus	Version 12.2.1.3.0
Oracle Siebel Mobile Applications	Up to 19.8
Oracle Siebel Ui Framework	Version 20.8
Oracle Storagetek Tape Analytics Sw Tool	Version 2.3.0
Oracle System Utilities	Version 19.1
Oracle Tape Library Acsls	Version 8.5.1
Oracle Tape Library Acsls	Version 8.5
Oracle Transportation Management	Version 1.4.3
Oracle Utilities Mobile Workforce Management	From 2.3.0.1 to 2.3.0.3
Oracle Webcenter Sites	Version 12.2.1.3.0
Oracle Weblogic Server	Version 10.3.6.0.0
Oracle Weblogic Server	Version 12.1.3.0.0
Oracle Weblogic Server	Version 12.2.1.3.0
Oracle Weblogic Server	Version 12.2.1.4.0
Oracle Weblogic Server	Version 14.1.1.0.0

Configuration J

1 vulnerable

Vulnerable Software	Affected Versions
Joomla Joomla!	From 3.0.0 to 3.9.4

Configuration K

1 vulnerable

Vulnerable Software	Affected Versions
Juniper Junos	Version 21.2

Related CWEs

CWE-1321

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.

References (146)

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://seclists.org/fulldisclosure/2019/May/10

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://seclists.org/fulldisclosure/2019/May/11

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://seclists.org/fulldisclosure/2019/May/13

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.openwall.com/lists/oss-security/2019/06/03/2

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

http://www.securityfocus.com/bid/108023

Source: cve@mitre.org

Broken LinkThird Party AdvisoryVDB Entry

https://access.redhat.com/errata/RHBA-2019:1570

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:1456

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:2587

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3023

Source: cve@mitre.org

Third Party Advisory

https://access.redhat.com/errata/RHSA-2019:3024

Source: cve@mitre.org

Third Party Advisory

https://backdropcms.org/security/backdrop-sa-core-2019-009

Source: cve@mitre.org

Third Party Advisory

https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/

Source: cve@mitre.org

Release NotesVendor Advisory

https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b

Source: cve@mitre.org

PatchThird Party Advisory

https://github.com/jquery/jquery/pull/4333

Source: cve@mitre.org

PatchThird Party Advisory

https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601

Source: cve@mitre.org

Third Party Advisory

https://lists.apache.org/thread.html/08720ef215ee7ab3386c05a1a90a7d1c852bf0706f176a7816bf65fc%40%3Ccommits.airflow.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/5928aa293e39d248266472210c50f176cac1535220f2486e6a7fa844%40%3Ccommits.airflow.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/6097cdbd6f0a337bedd9bb5cc441b2d525ff002a96531de367e4259f%40%3Ccommits.airflow.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/88fb0362fd40e5b605ea8149f63241537b8b6fb5bfa315391fc5cbb7%40%3Ccommits.airflow.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/b736d0784cf02f5a30fbb4c5902762a15ad6d47e17e2c5a17b7d6205%40%3Ccommits.airflow.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/bcce5a9c532b386c68dab2f6b3ce8b0cc9b950ec551766e76391caa3%40%3Ccommits.nifi.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/r2041a75d3fc09dec55adfd95d598b38d22715303f65c997c054844c9%40%3Cissues.flink.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/r2baacab6e0acb5a2092eb46ae04fd6c3e8277b4fd79b1ffb7f3254fa%40%3Cissues.flink.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/r38f0d1aa3c923c22977fe7376508f030f22e22c1379fbb155bf29766%40%3Cdev.syncope.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/r41b5bfe009c845f67d4f68948cc9419ac2d62e287804aafd72892b08%40%3Cissues.flink.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/r7aac081cbddb6baa24b75e74abf0929bf309b176755a53e3ed810355%40%3Cdev.flink.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/r7d64895cc4dff84d0becfc572b20c0e4bf9bfa7b10c6f5f73e783734%40%3Cdev.storm.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/r7e8ebccb7c022e41295f6fdb7b971209b83702339f872ddd8cf8bf73%40%3Cissues.flink.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/rac25da84ecdcd36f6de5ad0d255f4e967209bbbebddb285e231da37d%40%3Cissues.flink.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.apache.org/thread.html/rca37935d661f4689cb4119f1b3b224413b22be161b678e6e6ce0c69b%40%3Ccommits.nifi.apache.org%3E

Source: cve@mitre.org

Issue Tracking

https://lists.debian.org/debian-lts-announce/2019/05/msg00006.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2019/05/msg00029.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/02/msg00024.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UOAZIFCSZ3ENEFOR5IXX6NFAD3HV7FA/

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5IABSKTYZ5JUGL735UKGXL5YPRYOPUYI/

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KYH3OAGR2RTCHRA5NOKX2TES7SNQMWGO/

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QV3PKZC3PQCO3273HAT76PAQZFBEO4KP/

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLXRX23725JL366CNZGJZ7AQQB7LHQ6F/

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WZW27UCJ5CYFL4KFFFMYMIBNMIU2ALG5/

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Apr/32

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/Jun/12

Source: cve@mitre.org

Issue TrackingMailing ListThird Party Advisory

https://seclists.org/bugtraq/2019/May/18

Source: cve@mitre.org

Mailing ListPatchThird Party Advisory

https://security.netapp.com/advisory/ntap-20190919-0001/

Source: cve@mitre.org

Third Party Advisory

https://snyk.io/vuln/SNYK-JS-JQUERY-174006

Source: cve@mitre.org

ExploitThird Party Advisory

https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2019/dsa-4434

Source: cve@mitre.org

Third Party Advisory

https://www.debian.org/security/2019/dsa-4460

Source: cve@mitre.org

Third Party Advisory

https://www.drupal.org/sa-core-2019-006

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com//security-alerts/cpujul2021.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuApr2021.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuapr2020.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2020.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2021.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujan2022.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpujul2020.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuoct2020.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/security-alerts/cpuoct2021.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html

Source: cve@mitre.org

PatchThird Party Advisory

https://www.privacy-wise.com/mitigating-cve-2019-11358-in-old-versions-of-jquery/

Source: cve@mitre.org

PatchThird Party Advisory

https://www.synology.com/security/advisory/Synology_SA_19_19

Source: cve@mitre.org

Third Party Advisory

https://www.tenable.com/security/tns-2019-08

Source: cve@mitre.org

Third Party Advisory

https://www.tenable.com/security/tns-2020-02

Source: cve@mitre.org

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00006.html