CVE-2020-11023

JQuery Cross-Site Scripting (XSS) Vulnerability

Severity Score

6.1

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

Yes

*KEV

Decision

Attend

*SSVC

Descriptions

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

En jQuery versiones mayores o iguales a 1.0.3 y anteriores a la versión 3.5.0, passing HTML contiene elementos de fuentes no seguras – incluso después de sanearlo – para uno de los métodos de manipulación de jQuery ´s DOM ( i.e. html t(), adjunto (), y otros ) podrían ejecutar códigos no seguros. Este problema está corregido en JQuery 3.5.0.

A flaw was found in jQuery. HTML containing \<option\> elements from untrusted sources are passed, even after sanitizing, to one of jQuery's DOM manipulation methods, which may execute untrusted code. The highest threat from this vulnerability is to data confidentiality and integrity.

The jQuery Manager for WordPress plugin for WordPress is running a vulnerable version of jQuery in all versions up to, and including, 1.10.4 and the Enable jQuery Migrate Helper for WordPress is running a vulnerable version of jQuery in all versions up to, and including, 1.4.1. This makes it possible for unauthenticated attackers to malicious web scripts, though it is not verified that the plugin is exploitable through CVE-2020-11023.

Fixed two jQuery vulnerabilities Improved Ansible Tower's web service configuration to allow for processing more simultaneous HTTP requests by default Updated several dependencies of Ansible Tower's User Interface to address Updated to the latest version of python-psutil to address CVE-2019-18874 Added several optimizations to improve performance for a variety of high-load simultaneous job launch use cases Fixed workflows to no longer prevent certain users from being able to edit approval nodes Fixed confusing behavior for social auth logins across distinct browser tabs Fixed launching of Job Templates that use prompt-at-launch Ansible Vault credentials. Issues addressed include code execution and cross site scripting vulnerabilities.

JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

None

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Attend

Exploitation

Active

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2020-03-30 CVE Reserved
2020-04-29 CVE Published
2021-04-14 First Exploit
2025-01-23 Exploited in Wild
2025-02-10 CVE Updated
2025-02-13 KEV Due Date
2025-03-30 EPSS Updated

CWE

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-1395: Dependency on Vulnerable Third-Party Component

CAPEC

References (74)

URL	Tag	Source
https://github.com/jquery/jquery/security/advisories/GHSA-jpcq-cgw6-v4j6	Third Party Advisory
https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36%40%3Cissues.flink.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r0593393ca1e97b1e7e098fe69d414d6bd0a467148e9138d07e86ebbb%40%3Cissues.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r07ab379471fb15644bf7a92e4a98cbc7df3cf4e736abae0cc7625fe6%40%3Cdev.felix.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r094f435595582f6b5b24b66fedf80543aa8b1d57a3688fbcc21f06ec%40%3Cissues.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r1fed19c860a0d470f2a3eded12795772c8651ff583ef951ddac4918c%40%3Cgitbox.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r2c85121a47442036c7f8353a3724aa04f8ecdfda1819d311ba4f5330%40%3Cdev.felix.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r3702ede0ff83a29ba3eb418f6f11c473d6e3736baba981a8dbd9c9ef%40%3Cdev.felix.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48%40%3Cissues.flink.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r4aadb98086ca72ed75391f54167522d91489a0d0ae25b12baa8fc7c5%40%3Cissues.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r4dba67be3239b34861f1b9cfdf9dfb3a90272585dcce374112ed6e16%40%3Cdev.felix.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae%40%3Cissues.flink.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r55f5e066cc7301e3630ce90bbbf8d28c82212ae1f2d4871012141494%40%3Cdev.felix.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760%40%3Cissues.flink.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r6c4df3b33e625a44471009a172dabe6865faec8d8f21cac2303463b1%40%3Cissues.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r6e97b37963926f6059ecc1e417721608723a807a76af41d4e9dbed49%40%3Cissues.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d%40%3Cissues.flink.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c%40%3Cissues.flink.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r9006ad2abf81d02a0ef2126bab5177987e59095b7194a487c4ea247c%40%3Ccommits.felix.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r9c5fda81e4bca8daee305b4c03283dddb383ab8428a151d4cb0b3b15%40%3Cissues.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/r9e0bd31b7da9e7403478d22652b8760c946861f8ebd7bd750844898e%40%3Cdev.felix.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/ra32c7103ded9041c7c1cb8c12c8d125a6b2f3f3270e2937ef8417fac%40%3Cgitbox.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/ra374bb0299b4aa3e04edde01ebc03ed6f90cf614dad40dd428ce8f72%40%3Cgitbox.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/ra3c9219fcb0b289e18e9ec5a5ebeaa5c17d6b79a201667675af6721c%40%3Cgitbox.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/ra406b3adfcffcb5ce8707013bdb7c35e3ffc2776a8a99022f15274c6%40%3Cissues.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/rab82dd040f302018c85bd07d33f5604113573514895ada523c3401d9%40%3Ccommits.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/radcb2aa874a79647789f3563fcbbceaf1045a029ee8806b59812a8ea%40%3Cissues.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/rb25c3bc7418ae75cba07988dafe1b6912f76a9dd7d94757878320d61%40%3Cgitbox.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/rb69b7d8217c1a6a2100247a5d06ce610836b31e3f5d73fc113ded8e7%40%3Cissues.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67%40%3Cdev.flink.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/rd38b4185a797b324c8dd940d9213cf99fcdc2dbf1fc5a63ba7dee8c9%40%3Cissues.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/rda99599896c3667f2cc9e9d34c7b6ef5d2bbed1f4801e1d75a2b0679%40%3Ccommits.nifi.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108%40%3Cissues.flink.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4%40%3Cissues.flink.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2%40%3Cissues.flink.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/rf0f8939596081d84be1ae6a91d6248b96a02d8388898c372ac807817%40%3Cdev.felix.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/rf1ba79e564fe7efc56aef7c986106f1cf67a3427d08e997e088e7a93%40%3Cgitbox.hive.apache.org%3E	Mailing List
https://lists.apache.org/thread.html/rf661a90a15da8da5922ba6127b3f5f8194d4ebec8855d60a0dd13248%40%3Cdev.hive.apache.org%3E	Mailing List
https://lists.debian.org/debian-lts-announce/2021/03/msg00033.html	Mailing List
https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html	Mailing List
https://security.netapp.com/advisory/ntap-20200511-0006	Third Party Advisory
https://www.drupal.org/sa-core-2020-002	Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2021.html	Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2020.html	Third Party Advisory
https://www.oracle.com/security-alerts/cpujul2022.html	Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2020.html	Third Party Advisory
https://www.tenable.com/security/tns-2021-02	Third Party Advisory
https://www.tenable.com/security/tns-2021-10	Third Party Advisory

URL	Date	SRC
https://packetstorm.news/files/id/162160	2021-04-14
https://www.exploit-db.com/exploits/49767	2021-04-14
https://github.com/0xAJ2K/CVE-2020-11022-CVE-2020-11023	2022-09-11
https://github.com/Cybernegro/CVE-2020-11023	2024-01-03
https://github.com/Snorlyd/https-nj.gov---CVE-2020-11023	2022-05-23
https://github.com/andreassundstrom/cve-2020-11023-demonstration	2024-04-13
https://github.com/honeyb33z/cve-2020-11023-scanner	2025-02-05
http://packetstormsecurity.com/files/162160/jQuery-1.0.3-Cross-Site-Scripting.html	2025-02-10

URL	Date	SRC
https://www.oracle.com//security-alerts/cpujul2021.html	2023-11-07
https://www.oracle.com/security-alerts/cpuApr2021.html	2023-11-07
https://www.oracle.com/security-alerts/cpuapr2022.html	2023-11-07
https://www.oracle.com/security-alerts/cpujan2022.html	2023-11-07
https://www.oracle.com/security-alerts/cpuoct2021.html	2023-11-07

URL	Date	SRC
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html	2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html	2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html	2023-11-07
https://blog.jquery.com/2020/04/10/jquery-3-5-0-released	2023-11-07
https://jquery.com/upgrade-guide/3.5	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AVKYXLWCLZBV2N7M46KYK4LVA5OXWPBY	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QPN2L2XVQGUA2V5HNQJWHK3APSK3VN7K	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SAPQVX3XDNPGFT26QAQ6AJIXZZBZ4CD4	2023-11-07
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SFP4UK4EGP4AFH2MWYJ5A5Z4I7XVFQ6B	2023-11-07
https://security.gentoo.org/glsa/202007-03	2023-11-07
https://www.debian.org/security/2020/dsa-4693	2023-11-07
https://access.redhat.com/security/cve/CVE-2020-11023	2025-03-06
https://bugzilla.redhat.com/show_bug.cgi?id=1850004	2025-03-06

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Netapp Search vendor "Netapp"	H300s Firmware Search vendor "Netapp" for product "H300s Firmware"	-	-	Affected	in	Netapp Search vendor "Netapp"	H300s Search vendor "Netapp" for product "H300s"	-	-	Safe
Netapp Search vendor "Netapp"	H500s Firmware Search vendor "Netapp" for product "H500s Firmware"	-	-	Affected	in	Netapp Search vendor "Netapp"	H500s Search vendor "Netapp" for product "H500s"	-	-	Safe
Netapp Search vendor "Netapp"	H700s Firmware Search vendor "Netapp" for product "H700s Firmware"	-	-	Affected	in	Netapp Search vendor "Netapp"	H700s Search vendor "Netapp" for product "H700s"	-	-	Safe
Netapp Search vendor "Netapp"	H300e Firmware Search vendor "Netapp" for product "H300e Firmware"	-	-	Affected	in	Netapp Search vendor "Netapp"	H300e Search vendor "Netapp" for product "H300e"	-	-	Safe
Netapp Search vendor "Netapp"	H500e Firmware Search vendor "Netapp" for product "H500e Firmware"	-	-	Affected	in	Netapp Search vendor "Netapp"	H500e Search vendor "Netapp" for product "H500e"	-	-	Safe
Netapp Search vendor "Netapp"	H700e Firmware Search vendor "Netapp" for product "H700e Firmware"	-	-	Affected	in	Netapp Search vendor "Netapp"	H700e Search vendor "Netapp" for product "H700e"	-	-	Safe
Netapp Search vendor "Netapp"	H410s Firmware Search vendor "Netapp" for product "H410s Firmware"	-	-	Affected	in	Netapp Search vendor "Netapp"	H410s Search vendor "Netapp" for product "H410s"	-	-	Safe
Netapp Search vendor "Netapp"	H410c Firmware Search vendor "Netapp" for product "H410c Firmware"	-	-	Affected	in	Netapp Search vendor "Netapp"	H410c Search vendor "Netapp" for product "H410c"	-	-	Safe
Jquery Search vendor "Jquery"		Jquery Search vendor "Jquery" for product "Jquery"				>= 1.0.3 < 3.5.0 Search vendor "Jquery" for product "Jquery" and version " >= 1.0.3 < 3.5.0"		-		Affected
Debian Search vendor "Debian"		Debian Linux Search vendor "Debian" for product "Debian Linux"				9.0 Search vendor "Debian" for product "Debian Linux" and version "9.0"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				31 Search vendor "Fedoraproject" for product "Fedora" and version "31"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				32 Search vendor "Fedoraproject" for product "Fedora" and version "32"		-		Affected
Fedoraproject Search vendor "Fedoraproject"		Fedora Search vendor "Fedoraproject" for product "Fedora"				33 Search vendor "Fedoraproject" for product "Fedora" and version "33"		-		Affected
Drupal Search vendor "Drupal"		Drupal Search vendor "Drupal" for product "Drupal"				>= 7.0 < 7.70 Search vendor "Drupal" for product "Drupal" and version " >= 7.0 < 7.70"		-		Affected
Drupal Search vendor "Drupal"		Drupal Search vendor "Drupal" for product "Drupal"				>= 8.7.0 < 8.7.14 Search vendor "Drupal" for product "Drupal" and version " >= 8.7.0 < 8.7.14"		-		Affected
Drupal Search vendor "Drupal"		Drupal Search vendor "Drupal" for product "Drupal"				>= 8.8.0 < 8.8.6 Search vendor "Drupal" for product "Drupal" and version " >= 8.8.0 < 8.8.6"		-		Affected
Oracle Search vendor "Oracle"		Application Express Search vendor "Oracle" for product "Application Express"				< 20.2 Search vendor "Oracle" for product "Application Express" and version " < 20.2"		-		Affected
Oracle Search vendor "Oracle"		Application Testing Suite Search vendor "Oracle" for product "Application Testing Suite"				13.3.0.1 Search vendor "Oracle" for product "Application Testing Suite" and version "13.3.0.1"		-		Affected
Oracle Search vendor "Oracle"		Banking Enterprise Collections Search vendor "Oracle" for product "Banking Enterprise Collections"				>= 2.7.0 <= 2.8.0 Search vendor "Oracle" for product "Banking Enterprise Collections" and version " >= 2.7.0 <= 2.8.0"		-		Affected
Oracle Search vendor "Oracle"		Banking Platform Search vendor "Oracle" for product "Banking Platform"				>= 2.4.0 <= 2.10.0 Search vendor "Oracle" for product "Banking Platform" and version " >= 2.4.0 <= 2.10.0"		-		Affected
Oracle Search vendor "Oracle"		Business Intelligence Search vendor "Oracle" for product "Business Intelligence"				5.9.0.0.0 Search vendor "Oracle" for product "Business Intelligence" and version "5.9.0.0.0"		enterprise		Affected
Oracle Search vendor "Oracle"		Communications Analytics Search vendor "Oracle" for product "Communications Analytics"				12.1.1 Search vendor "Oracle" for product "Communications Analytics" and version "12.1.1"		-		Affected
Oracle Search vendor "Oracle"		Communications Eagle Application Processor Search vendor "Oracle" for product "Communications Eagle Application Processor"				>= 16.1.0 <= 16.4.0 Search vendor "Oracle" for product "Communications Eagle Application Processor" and version " >= 16.1.0 <= 16.4.0"		-		Affected
Oracle Search vendor "Oracle"		Communications Element Manager Search vendor "Oracle" for product "Communications Element Manager"				8.1.1 Search vendor "Oracle" for product "Communications Element Manager" and version "8.1.1"		-		Affected
Oracle Search vendor "Oracle"		Communications Element Manager Search vendor "Oracle" for product "Communications Element Manager"				8.2.0 Search vendor "Oracle" for product "Communications Element Manager" and version "8.2.0"		-		Affected
Oracle Search vendor "Oracle"		Communications Element Manager Search vendor "Oracle" for product "Communications Element Manager"				8.2.1 Search vendor "Oracle" for product "Communications Element Manager" and version "8.2.1"		-		Affected
Oracle Search vendor "Oracle"		Communications Interactive Session Recorder Search vendor "Oracle" for product "Communications Interactive Session Recorder"				>= 6.1 <= 6.4 Search vendor "Oracle" for product "Communications Interactive Session Recorder" and version " >= 6.1 <= 6.4"		-		Affected
Oracle Search vendor "Oracle"		Communications Operations Monitor Search vendor "Oracle" for product "Communications Operations Monitor"				>= 4.1 <= 4.3 Search vendor "Oracle" for product "Communications Operations Monitor" and version " >= 4.1 <= 4.3"		-		Affected
Oracle Search vendor "Oracle"		Communications Operations Monitor Search vendor "Oracle" for product "Communications Operations Monitor"				3.4 Search vendor "Oracle" for product "Communications Operations Monitor" and version "3.4"		-		Affected
Oracle Search vendor "Oracle"		Communications Services Gatekeeper Search vendor "Oracle" for product "Communications Services Gatekeeper"				7.0 Search vendor "Oracle" for product "Communications Services Gatekeeper" and version "7.0"		-		Affected
Oracle Search vendor "Oracle"		Communications Session Report Manager Search vendor "Oracle" for product "Communications Session Report Manager"				8.1.1 Search vendor "Oracle" for product "Communications Session Report Manager" and version "8.1.1"		-		Affected
Oracle Search vendor "Oracle"		Communications Session Report Manager Search vendor "Oracle" for product "Communications Session Report Manager"				8.2.0 Search vendor "Oracle" for product "Communications Session Report Manager" and version "8.2.0"		-		Affected
Oracle Search vendor "Oracle"		Communications Session Report Manager Search vendor "Oracle" for product "Communications Session Report Manager"				8.2.1 Search vendor "Oracle" for product "Communications Session Report Manager" and version "8.2.1"		-		Affected
Oracle Search vendor "Oracle"		Communications Session Route Manager Search vendor "Oracle" for product "Communications Session Route Manager"				8.1.1 Search vendor "Oracle" for product "Communications Session Route Manager" and version "8.1.1"		-		Affected
Oracle Search vendor "Oracle"		Communications Session Route Manager Search vendor "Oracle" for product "Communications Session Route Manager"				8.2.0 Search vendor "Oracle" for product "Communications Session Route Manager" and version "8.2.0"		-		Affected
Oracle Search vendor "Oracle"		Communications Session Route Manager Search vendor "Oracle" for product "Communications Session Route Manager"				8.2.1 Search vendor "Oracle" for product "Communications Session Route Manager" and version "8.2.1"		-		Affected
Oracle Search vendor "Oracle"		Financial Services Regulatory Reporting For De Nederlandsche Bank Search vendor "Oracle" for product "Financial Services Regulatory Reporting For De Nederlandsche Bank"				8.0.4 Search vendor "Oracle" for product "Financial Services Regulatory Reporting For De Nederlandsche Bank" and version "8.0.4"		-		Affected
Oracle Search vendor "Oracle"		Financial Services Revenue Management And Billing Analytics Search vendor "Oracle" for product "Financial Services Revenue Management And Billing Analytics"				2.7 Search vendor "Oracle" for product "Financial Services Revenue Management And Billing Analytics" and version "2.7"		-		Affected
Oracle Search vendor "Oracle"		Financial Services Revenue Management And Billing Analytics Search vendor "Oracle" for product "Financial Services Revenue Management And Billing Analytics"				2.8 Search vendor "Oracle" for product "Financial Services Revenue Management And Billing Analytics" and version "2.8"		-		Affected
Oracle Search vendor "Oracle"		Health Sciences Inform Search vendor "Oracle" for product "Health Sciences Inform"				6.3.0 Search vendor "Oracle" for product "Health Sciences Inform" and version "6.3.0"		-		Affected
Oracle Search vendor "Oracle"		Healthcare Translational Research Search vendor "Oracle" for product "Healthcare Translational Research"				3.2.1 Search vendor "Oracle" for product "Healthcare Translational Research" and version "3.2.1"		-		Affected
Oracle Search vendor "Oracle"		Healthcare Translational Research Search vendor "Oracle" for product "Healthcare Translational Research"				3.3.1 Search vendor "Oracle" for product "Healthcare Translational Research" and version "3.3.1"		-		Affected
Oracle Search vendor "Oracle"		Healthcare Translational Research Search vendor "Oracle" for product "Healthcare Translational Research"				3.3.2 Search vendor "Oracle" for product "Healthcare Translational Research" and version "3.3.2"		-		Affected
Oracle Search vendor "Oracle"		Healthcare Translational Research Search vendor "Oracle" for product "Healthcare Translational Research"				3.4.0 Search vendor "Oracle" for product "Healthcare Translational Research" and version "3.4.0"		-		Affected
Oracle Search vendor "Oracle"		Hyperion Financial Reporting Search vendor "Oracle" for product "Hyperion Financial Reporting"				11.1.2.4 Search vendor "Oracle" for product "Hyperion Financial Reporting" and version "11.1.2.4"		-		Affected
Oracle Search vendor "Oracle"		Jd Edwards Enterpriseone Orchestrator Search vendor "Oracle" for product "Jd Edwards Enterpriseone Orchestrator"				< 9.2.5.0 Search vendor "Oracle" for product "Jd Edwards Enterpriseone Orchestrator" and version " < 9.2.5.0"		-		Affected
Oracle Search vendor "Oracle"		Jd Edwards Enterpriseone Tools Search vendor "Oracle" for product "Jd Edwards Enterpriseone Tools"				< 9.2.5.0 Search vendor "Oracle" for product "Jd Edwards Enterpriseone Tools" and version " < 9.2.5.0"		-		Affected
Oracle Search vendor "Oracle"		Oss Support Tools Search vendor "Oracle" for product "Oss Support Tools"				< 2.12.41 Search vendor "Oracle" for product "Oss Support Tools" and version " < 2.12.41"		-		Affected
Oracle Search vendor "Oracle"		Peoplesoft Enterprise Human Capital Management Resources Search vendor "Oracle" for product "Peoplesoft Enterprise Human Capital Management Resources"				9.2 Search vendor "Oracle" for product "Peoplesoft Enterprise Human Capital Management Resources" and version "9.2"		-		Affected
Oracle Search vendor "Oracle"		Primavera Gateway Search vendor "Oracle" for product "Primavera Gateway"				>= 16.2 <= 16.2.11 Search vendor "Oracle" for product "Primavera Gateway" and version " >= 16.2 <= 16.2.11"		-		Affected
Oracle Search vendor "Oracle"		Primavera Gateway Search vendor "Oracle" for product "Primavera Gateway"				>= 17.12.0 <= 17.12.7 Search vendor "Oracle" for product "Primavera Gateway" and version " >= 17.12.0 <= 17.12.7"		-		Affected
Oracle Search vendor "Oracle"		Primavera Gateway Search vendor "Oracle" for product "Primavera Gateway"				>= 18.8.0 <= 18.8.9 Search vendor "Oracle" for product "Primavera Gateway" and version " >= 18.8.0 <= 18.8.9"		-		Affected
Oracle Search vendor "Oracle"		Primavera Gateway Search vendor "Oracle" for product "Primavera Gateway"				>= 19.12.0 <= 19.12.4 Search vendor "Oracle" for product "Primavera Gateway" and version " >= 19.12.0 <= 19.12.4"		-		Affected
Oracle Search vendor "Oracle"		Rest Data Services Search vendor "Oracle" for product "Rest Data Services"				11.2.0.4 Search vendor "Oracle" for product "Rest Data Services" and version "11.2.0.4"		-		Affected
Oracle Search vendor "Oracle"		Rest Data Services Search vendor "Oracle" for product "Rest Data Services"				12.1.0.2 Search vendor "Oracle" for product "Rest Data Services" and version "12.1.0.2"		-		Affected
Oracle Search vendor "Oracle"		Rest Data Services Search vendor "Oracle" for product "Rest Data Services"				12.2.0.1 Search vendor "Oracle" for product "Rest Data Services" and version "12.2.0.1"		-		Affected
Oracle Search vendor "Oracle"		Rest Data Services Search vendor "Oracle" for product "Rest Data Services"				18c Search vendor "Oracle" for product "Rest Data Services" and version "18c"		-		Affected
Oracle Search vendor "Oracle"		Rest Data Services Search vendor "Oracle" for product "Rest Data Services"				19c Search vendor "Oracle" for product "Rest Data Services" and version "19c"		-		Affected
Oracle Search vendor "Oracle"		Siebel Mobile Search vendor "Oracle" for product "Siebel Mobile"				<= 20.12 Search vendor "Oracle" for product "Siebel Mobile" and version " <= 20.12"		-		Affected
Oracle Search vendor "Oracle"		Storagetek Acsls Search vendor "Oracle" for product "Storagetek Acsls"				8.5.1 Search vendor "Oracle" for product "Storagetek Acsls" and version "8.5.1"		-		Affected
Oracle Search vendor "Oracle"		Storagetek Tape Analytics Sw Tool Search vendor "Oracle" for product "Storagetek Tape Analytics Sw Tool"				2.3.1 Search vendor "Oracle" for product "Storagetek Tape Analytics Sw Tool" and version "2.3.1"		-		Affected
Oracle Search vendor "Oracle"		Webcenter Sites Search vendor "Oracle" for product "Webcenter Sites"				12.2.1.3.0 Search vendor "Oracle" for product "Webcenter Sites" and version "12.2.1.3.0"		-		Affected
Oracle Search vendor "Oracle"		Webcenter Sites Search vendor "Oracle" for product "Webcenter Sites"				12.2.1.4.0 Search vendor "Oracle" for product "Webcenter Sites" and version "12.2.1.4.0"		-		Affected
Oracle Search vendor "Oracle"		Weblogic Server Search vendor "Oracle" for product "Weblogic Server"				12.1.3.0.0 Search vendor "Oracle" for product "Weblogic Server" and version "12.1.3.0.0"		-		Affected
Oracle Search vendor "Oracle"		Weblogic Server Search vendor "Oracle" for product "Weblogic Server"				12.2.1.3.0 Search vendor "Oracle" for product "Weblogic Server" and version "12.2.1.3.0"		-		Affected
Oracle Search vendor "Oracle"		Weblogic Server Search vendor "Oracle" for product "Weblogic Server"				12.2.1.4.0 Search vendor "Oracle" for product "Weblogic Server" and version "12.2.1.4.0"		-		Affected
Oracle Search vendor "Oracle"		Weblogic Server Search vendor "Oracle" for product "Weblogic Server"				14.1.1.0.0 Search vendor "Oracle" for product "Weblogic Server" and version "14.1.1.0.0"		-		Affected
Netapp Search vendor "Netapp"		Max Data Search vendor "Netapp" for product "Max Data"				-		-		Affected
Netapp Search vendor "Netapp"		Oncommand Insight Search vendor "Netapp" for product "Oncommand Insight"				-		-		Affected
Netapp Search vendor "Netapp"		Oncommand System Manager Search vendor "Netapp" for product "Oncommand System Manager"				>= 3.0 <= 3.1.3 Search vendor "Netapp" for product "Oncommand System Manager" and version " >= 3.0 <= 3.1.3"		-		Affected
Netapp Search vendor "Netapp"		Snap Creator Framework Search vendor "Netapp" for product "Snap Creator Framework"				-		-		Affected
Netapp Search vendor "Netapp"		Snapcenter Server Search vendor "Netapp" for product "Snapcenter Server"				-		-		Affected
Tenable Search vendor "Tenable"		Log Correlation Engine Search vendor "Tenable" for product "Log Correlation Engine"				< 6.0.9 Search vendor "Tenable" for product "Log Correlation Engine" and version " < 6.0.9"		-		Affected