NetSight
IP …
medium6.1

CVE-2015-9251

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text…

Impact

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

Affected products

VendorProductAffected versions
JqueryJquery
before 3.0.0
OracleAgile Product Lifecycle Management For Process
Versions 6.2.0.0, 6.2.1.0, 6.2.2.0, 6.2.3.0, 6.2.3.1
OracleBanking Platform
Versions 2.6.0, 2.6.1, 2.6.2
OracleBusiness Process Management Suite
Versions 11.1.1.9.0, 12.1.3.0.0, 12.2.1.3.0
OracleCommunications Converged Application Server
before 7.0.0.1
OracleCommunications Interactive Session Recorder
Versions 6.0, 6.1, 6.2
OracleCommunications Services Gatekeeper
before 6.1.0.4.0
OracleCommunications Webrtc Session Controller
before 7.2
OracleEndeca Information Discovery Studio
Versions 3.1.0, 3.2.0
OracleEnterprise Manager Ops Center
Versions 12.2.2, 12.3.3
OracleEnterprise Operations Monitor
Versions 3.4, 4.0
OracleFinancial Services Analytical Applications Infrastructure
from 7.3.3 through 7.3.5
from 8.0.0 through 8.0.7

Weakness classification

CWE-79

References