CVE-2016-7103

jquery-ui: cross-site scripting in dialog closeText

Severity Score

6.1

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

Vulnerabilidad de XSS en la interfaz de usuario de jQuery en versiones anteriores a 1.12.0 podría permitir a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro closeText de la función dialog.

It was found that a parameter of the dialog box feature of jQuery UI was vulnerable to cross site scripting. An attacker could use this flaw to execute a malicious script via the dialog box when it was displayed to a user.

Hong Phat Ly discovered that jQuery UI did not properly manage parameters from untrusted sources, which could lead to arbitrary web script or HTML code injection. A remote attacker could possibly use this issue to perform a cross-site scripting attack. This issue only affected Ubuntu 14.04 LTS and Ubuntu 16.04 LTS. Esben Sparre Andreasen discovered that jQuery UI did not properly handle values from untrusted sources in the Datepicker widget. A remote attacker could possibly use this issue to perform a cross-site scripting attack and execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.

*Credits: N/A

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

Partial

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2016-08-27 CVE Reserved
2016-12-09 CVE Published
2024-08-06 CVE Updated
2024-08-06 First Exploit
2025-05-06 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CAPEC

References (30)

URL	Tag	Source
http://www.securityfocus.com/bid/104823	Broken Link
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/ff8dcfe29377088ab655fda9d585dccd5b1f07fabd94ae84fd60a7f8%40%3Ccommits.pulsar.apache.org%3E	Mailing List
https://lists.debian.org/debian-lts-announce/2022/01/msg00014.html	Mailing List
https://nodesecurity.io/advisories/127	Third Party Advisory
https://security.netapp.com/advisory/ntap-20190416-0007	Third Party Advisory
https://www.drupal.org/sa-core-2022-002	Third Party Advisory
https://www.oracle.com//security-alerts/cpujul2021.html	Third Party Advisory
https://www.oracle.com/security-alerts/cpuApr2021.html	Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2020.html	Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html	Third Party Advisory
https://www.tenable.com/security/tns-2016-19	Third Party Advisory

URL	Date	SRC
https://github.com/jquery/api.jqueryui.com/issues/281	2024-08-06

URL	Date	SRC
http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	2023-06-22
https://github.com/jquery/jquery-ui/commit/9644e7bae9116edaf8d37c5b38cb32b892f10ff6	2023-06-22
https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html	2023-06-22
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html	2023-06-22
https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html	2023-06-22

URL	Date	SRC
http://rhn.redhat.com/errata/RHSA-2016-2932.html	2023-06-22
http://rhn.redhat.com/errata/RHSA-2016-2933.html	2023-06-22
http://rhn.redhat.com/errata/RHSA-2017-0161.html	2023-06-22
https://jqueryui.com/changelog/1.12.0	2023-06-22
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E2I4UHPIW26FIALH7GGZ3IYUUA53VOOJ	2023-06-22
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HVKIOWSXL2RF2ULNAP7PHESYCFSZIJE3	2023-06-22
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGSY236PYSFYIEBRGDERLA7OSY6D7XL4	2023-06-22
https://access.redhat.com/security/cve/CVE-2016-7103	2017-01-19
https://bugzilla.redhat.com/show_bug.cgi?id=1360286	2017-01-19

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Jqueryui Search vendor "Jqueryui"		Jquery Ui Search vendor "Jqueryui" for product "Jquery Ui"				>= 1.10.0 <= 1.11.4 Search vendor "Jqueryui" for product "Jquery Ui" and version " >= 1.10.0 <= 1.11.4"		-		Affected
Oracle Search vendor "Oracle"		Application Express Search vendor "Oracle" for product "Application Express"				< 19.1 Search vendor "Oracle" for product "Application Express" and version " < 19.1"		-		Affected
Oracle Search vendor "Oracle"		Business Intelligence Search vendor "Oracle" for product "Business Intelligence"				12.2.1.3.0 Search vendor "Oracle" for product "Business Intelligence" and version "12.2.1.3.0"		enterprise		Affected
Oracle Search vendor "Oracle"		Business Intelligence Search vendor "Oracle" for product "Business Intelligence"				12.2.1.4.0 Search vendor "Oracle" for product "Business Intelligence" and version "12.2.1.4.0"		enterprise		Affected
Oracle Search vendor "Oracle"		Hospitality Cruise Fleet Management Search vendor "Oracle" for product "Hospitality Cruise Fleet Management"				9.0.11 Search vendor "Oracle" for product "Hospitality Cruise Fleet Management" and version "9.0.11"		-		Affected
Oracle Search vendor "Oracle"		Oss Support Tools Search vendor "Oracle" for product "Oss Support Tools"				< 2.12.42 Search vendor "Oracle" for product "Oss Support Tools" and version " < 2.12.42"		-		Affected
Oracle Search vendor "Oracle"		Oss Support Tools Search vendor "Oracle" for product "Oss Support Tools"				2.12.42 Search vendor "Oracle" for product "Oss Support Tools" and version "2.12.42"		-		Affected
Oracle Search vendor "Oracle"		Primavera Unifier Search vendor "Oracle" for product "Primavera Unifier"				>= 16.0 <= 16.2 Search vendor "Oracle" for product "Primavera Unifier" and version " >= 16.0 <= 16.2"		-		Affected
Oracle Search vendor "Oracle"		Primavera Unifier Search vendor "Oracle" for product "Primavera Unifier"				>= 17.0 <= 17.12.4 Search vendor "Oracle" for product "Primavera Unifier" and version " >= 17.0 <= 17.12.4"		-		Affected
Oracle Search vendor "Oracle"		Primavera Unifier Search vendor "Oracle" for product "Primavera Unifier"				>= 18.0 <= 18.8.4 Search vendor "Oracle" for product "Primavera Unifier" and version " >= 18.0 <= 18.8.4"		-		Affected
Oracle Search vendor "Oracle"		Siebel Ui Framework Search vendor "Oracle" for product "Siebel Ui Framework"				<= 21.2 Search vendor "Oracle" for product "Siebel Ui Framework" and version " <= 21.2"		-		Affected
Oracle Search vendor "Oracle"		Weblogic Server Search vendor "Oracle" for product "Weblogic Server"				10.3.6.0.0 Search vendor "Oracle" for product "Weblogic Server" and version "10.3.6.0.0"		-		Affected
Oracle Search vendor "Oracle"		Weblogic Server Search vendor "Oracle" for product "Weblogic Server"				12.1.3.0.0 Search vendor "Oracle" for product "Weblogic Server" and version "12.1.3.0.0"		-		Affected
Oracle Search vendor "Oracle"		Weblogic Server Search vendor "Oracle" for product "Weblogic Server"				12.2.1.3.0 Search vendor "Oracle" for product "Weblogic Server" and version "12.2.1.3.0"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				30 Search vendor "Fedoraproject" for product "Fedora" and version "30"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				35 Search vendor "Fedoraproject" for product "Fedora" and version "35"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				36 Search vendor "Fedoraproject" for product "Fedora" and version "36"		-		Affected
Netapp Search vendor "Netapp"		Snapcenter Search vendor "Netapp" for product "Snapcenter"				-		-		Affected
Redhat Search vendor "Redhat"		Openstack Search vendor "Redhat" for product "Openstack"				7.0 Search vendor "Redhat" for product "Openstack" and version "7.0"		-		Affected
Redhat Search vendor "Redhat"		Openstack Search vendor "Redhat" for product "Openstack"				8 Search vendor "Redhat" for product "Openstack" and version "8"		-		Affected
Redhat Search vendor "Redhat"		Openstack Search vendor "Redhat" for product "Openstack"				9 Search vendor "Redhat" for product "Openstack" and version "9"		-		Affected
Juniper Search vendor "Juniper"		Junos Search vendor "Juniper" for product "Junos"				21.2 Search vendor "Juniper" for product "Junos" and version "21.2"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				9.0 Search vendor "Debian" for product "Debian Linux" and version "9.0"		-		Affected