CVE-2015-9251 (CNNVD-201801-798)
MEDIUM
中文标题:
jQuery 跨站脚本漏洞
英文标题:
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax req...
CVSS分数:
6.1
发布时间:
2018-01-18 23:00:00
漏洞类型:
跨站脚本
状态:
PUBLISHED
数据质量分数:
0.30
数据版本:
v3
漏洞描述
中文描述:
jQuery是美国John Resig个人开发者的一套开源、跨浏览器的JavaScript库。该库简化了HTML与JavaScript之间的操作，并具有模块化、插件扩展等特点。 jQuery 3.0.0之前版本中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
英文描述:
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
CWE类型:
CWE-79
标签:
（暂无数据）
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| jquery | jquery | * | - | - |
cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*
|
| oracle | agile_product_lifecycle_management_for_process | 6.2.0.0 | - | - |
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:*
|
| oracle | agile_product_lifecycle_management_for_process | 6.2.1.0 | - | - |
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0:*:*:*:*:*:*:*
|
| oracle | agile_product_lifecycle_management_for_process | 6.2.2.0 | - | - |
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:*
|
| oracle | agile_product_lifecycle_management_for_process | 6.2.3.0 | - | - |
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:*
|
| oracle | agile_product_lifecycle_management_for_process | 6.2.3.1 | - | - |
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.1:*:*:*:*:*:*:*
|
| oracle | banking_platform | 2.6.0 | - | - |
cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:*
|
| oracle | banking_platform | 2.6.1 | - | - |
cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:*
|
| oracle | banking_platform | 2.6.2 | - | - |
cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*
|
| oracle | business_process_management_suite | 11.1.1.9.0 | - | - |
cpe:2.3:a:oracle:business_process_management_suite:11.1.1.9.0:*:*:*:*:*:*:*
|
| oracle | business_process_management_suite | 12.1.3.0.0 | - | - |
cpe:2.3:a:oracle:business_process_management_suite:12.1.3.0.0:*:*:*:*:*:*:*
|
| oracle | business_process_management_suite | 12.2.1.3.0 | - | - |
cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:*
|
| oracle | communications_converged_application_server | * | - | - |
cpe:2.3:a:oracle:communications_converged_application_server:*:*:*:*:*:*:*:*
|
| oracle | communications_interactive_session_recorder | 6.0 | - | - |
cpe:2.3:a:oracle:communications_interactive_session_recorder:6.0:*:*:*:*:*:*:*
|
| oracle | communications_interactive_session_recorder | 6.1 | - | - |
cpe:2.3:a:oracle:communications_interactive_session_recorder:6.1:*:*:*:*:*:*:*
|
| oracle | communications_interactive_session_recorder | 6.2 | - | - |
cpe:2.3:a:oracle:communications_interactive_session_recorder:6.2:*:*:*:*:*:*:*
|
| oracle | communications_services_gatekeeper | * | - | - |
cpe:2.3:a:oracle:communications_services_gatekeeper:*:*:*:*:*:*:*:*
|
| oracle | communications_webrtc_session_controller | * | - | - |
cpe:2.3:a:oracle:communications_webrtc_session_controller:*:*:*:*:*:*:*:*
|
| oracle | endeca_information_discovery_studio | 3.1.0 | - | - |
cpe:2.3:a:oracle:endeca_information_discovery_studio:3.1.0:*:*:*:*:*:*:*
|
| oracle | endeca_information_discovery_studio | 3.2.0 | - | - |
cpe:2.3:a:oracle:endeca_information_discovery_studio:3.2.0:*:*:*:*:*:*:*
|
| oracle | enterprise_manager_ops_center | 12.2.2 | - | - |
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.2.2:*:*:*:*:*:*:*
|
| oracle | enterprise_manager_ops_center | 12.3.3 | - | - |
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:*
|
| oracle | enterprise_operations_monitor | 3.4 | - | - |
cpe:2.3:a:oracle:enterprise_operations_monitor:3.4:*:*:*:*:*:*:*
|
| oracle | enterprise_operations_monitor | 4.0 | - | - |
cpe:2.3:a:oracle:enterprise_operations_monitor:4.0:*:*:*:*:*:*:*
|
| oracle | financial_services_analytical_applications_infrastructure | * | - | - |
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*
|
| oracle | financial_services_asset_liability_management | * | - | - |
cpe:2.3:a:oracle:financial_services_asset_liability_management:*:*:*:*:*:*:*:*
|
| oracle | financial_services_data_integration_hub | * | - | - |
cpe:2.3:a:oracle:financial_services_data_integration_hub:*:*:*:*:*:*:*:*
|
| oracle | financial_services_funds_transfer_pricing | * | - | - |
cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:*:*:*:*:*:*:*:*
|
| oracle | financial_services_hedge_management_and_ifrs_valuations | * | - | - |
cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:*
|
| oracle | financial_services_liquidity_risk_management | * | - | - |
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:*:*:*:*:*:*:*:*
|
| oracle | financial_services_loan_loss_forecasting_and_provisioning | * | - | - |
cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:*
|
| oracle | financial_services_market_risk_measurement_and_management | 8.0.5 | - | - |
cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5:*:*:*:*:*:*:*
|
| oracle | financial_services_market_risk_measurement_and_management | 8.0.6 | - | - |
cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:*
|
| oracle | financial_services_profitability_management | * | - | - |
cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:*
|
| oracle | financial_services_reconciliation_framework | 8.0.5 | - | - |
cpe:2.3:a:oracle:financial_services_reconciliation_framework:8.0.5:*:*:*:*:*:*:*
|
| oracle | financial_services_reconciliation_framework | 8.0.6 | - | - |
cpe:2.3:a:oracle:financial_services_reconciliation_framework:8.0.6:*:*:*:*:*:*:*
|
| oracle | fusion_middleware_mapviewer | 12.2.1.3.0 | - | - |
cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:*
|
| oracle | healthcare_foundation | 7.1 | - | - |
cpe:2.3:a:oracle:healthcare_foundation:7.1:*:*:*:*:*:*:*
|
| oracle | healthcare_foundation | 7.2 | - | - |
cpe:2.3:a:oracle:healthcare_foundation:7.2:*:*:*:*:*:*:*
|
| oracle | healthcare_translational_research | 3.1.0 | - | - |
cpe:2.3:a:oracle:healthcare_translational_research:3.1.0:*:*:*:*:*:*:*
|
| oracle | hospitality_cruise_fleet_management | 9.0.11 | - | - |
cpe:2.3:a:oracle:hospitality_cruise_fleet_management:9.0.11:*:*:*:*:*:*:*
|
| oracle | hospitality_guest_access | 4.2.0 | - | - |
cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:*
|
| oracle | hospitality_guest_access | 4.2.1 | - | - |
cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:*
|
| oracle | hospitality_materials_control | 18.1 | - | - |
cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:*
|
| oracle | hospitality_reporting_and_analytics | 9.1.0 | - | - |
cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.1.0:*:*:*:*:*:*:*
|
| oracle | insurance_insbridge_rating_and_underwriting | 5.2 | - | - |
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.2:*:*:*:*:*:*:*
|
| oracle | insurance_insbridge_rating_and_underwriting | 5.4 | - | - |
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.4:*:*:*:*:*:*:*
|
| oracle | insurance_insbridge_rating_and_underwriting | 5.5 | - | - |
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.5:*:*:*:*:*:*:*
|
| oracle | jd_edwards_enterpriseone_tools | 9.2 | - | - |
cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:*
|
| oracle | jdeveloper | 11.1.1.9.0 | - | - |
cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:*
|
| oracle | jdeveloper | 12.1.3.0.0 | - | - |
cpe:2.3:a:oracle:jdeveloper:12.1.3.0.0:*:*:*:*:*:*:*
|
| oracle | jdeveloper | 12.2.1.3.0 | - | - |
cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:*
|
| oracle | oss_support_tools | 19.1 | - | - |
cpe:2.3:a:oracle:oss_support_tools:19.1:*:*:*:*:*:*:*
|
| oracle | peoplesoft_enterprise_peopletools | 8.55 | - | - |
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:*
|
| oracle | peoplesoft_enterprise_peopletools | 8.56 | - | - |
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*
|
| oracle | peoplesoft_enterprise_peopletools | 8.57 | - | - |
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*
|
| oracle | primavera_gateway | 15.2 | - | - |
cpe:2.3:a:oracle:primavera_gateway:15.2:*:*:*:*:*:*:*
|
| oracle | primavera_gateway | 16.2 | - | - |
cpe:2.3:a:oracle:primavera_gateway:16.2:*:*:*:*:*:*:*
|
| oracle | primavera_gateway | 17.12 | - | - |
cpe:2.3:a:oracle:primavera_gateway:17.12:*:*:*:*:*:*:*
|
| oracle | primavera_unifier | * | - | - |
cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*
|
| oracle | primavera_unifier | 16.1 | - | - |
cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*
|
| oracle | primavera_unifier | 16.2 | - | - |
cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*
|
| oracle | primavera_unifier | 18.8 | - | - |
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*
|
| oracle | real-time_scheduler | 2.3.0 | - | - |
cpe:2.3:a:oracle:real-time_scheduler:2.3.0:*:*:*:*:*:*:*
|
| oracle | retail_allocation | 15.0.2 | - | - |
cpe:2.3:a:oracle:retail_allocation:15.0.2:*:*:*:*:*:*:*
|
| oracle | retail_customer_insights | 15.0 | - | - |
cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:*
|
| oracle | retail_customer_insights | 16.0 | - | - |
cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:*
|
| oracle | retail_invoice_matching | 15.0 | - | - |
cpe:2.3:a:oracle:retail_invoice_matching:15.0:*:*:*:*:*:*:*
|
| oracle | retail_sales_audit | 15.0 | - | - |
cpe:2.3:a:oracle:retail_sales_audit:15.0:*:*:*:*:*:*:*
|
| oracle | retail_workforce_management_software | 1.60.9 | - | - |
cpe:2.3:a:oracle:retail_workforce_management_software:1.60.9:*:*:*:*:*:*:*
|
| oracle | retail_workforce_management_software | 1.64.0 | - | - |
cpe:2.3:a:oracle:retail_workforce_management_software:1.64.0:*:*:*:*:*:*:*
|
| oracle | service_bus | 12.1.3.0.0 | - | - |
cpe:2.3:a:oracle:service_bus:12.1.3.0.0:*:*:*:*:*:*:*
|
| oracle | service_bus | 12.2.1.3.0 | - | - |
cpe:2.3:a:oracle:service_bus:12.2.1.3.0:*:*:*:*:*:*:*
|
| oracle | siebel_ui_framework | 18.10 | - | - |
cpe:2.3:a:oracle:siebel_ui_framework:18.10:*:*:*:*:*:*:*
|
| oracle | siebel_ui_framework | 18.11 | - | - |
cpe:2.3:a:oracle:siebel_ui_framework:18.11:*:*:*:*:*:*:*
|
| oracle | utilities_framework | * | - | - |
cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:*
|
| oracle | utilities_mobile_workforce_management | 2.3.0 | - | - |
cpe:2.3:a:oracle:utilities_mobile_workforce_management:2.3.0:*:*:*:*:*:*:*
|
| oracle | webcenter_sites | 11.1.1.8.0 | - | - |
cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:*
|
| oracle | weblogic_server | 12.1.3.0 | - | - |
cpe:2.3:a:oracle:weblogic_server:12.1.3.0:*:*:*:*:*:*:*
|
| oracle | weblogic_server | 12.2.1.3 | - | - |
cpe:2.3:a:oracle:weblogic_server:12.2.1.3:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
参考链接
105658
vdb-entry
cve.org
访问
cve.org
20190509 dotCMS v5.1.1 Vulnerabilities
mailing-list
cve.org
访问
cve.org
20190510 dotCMS v5.1.1 HTML Injection & XSS Vulnerability
mailing-list
cve.org
访问
cve.org
20190510 dotCMS v5.1.1 Vulnerabilities
mailing-list
cve.org
访问
cve.org
20190510 Re: dotCMS v5.1.1 HTML Injection & XSS Vulnerability
mailing-list
cve.org
访问
cve.org
[flink-user] 20190811 Apache flink 1.7.2 security issues
mailing-list
cve.org
访问
cve.org
[flink-dev] 20190811 Apache flink 1.7.2 security issues
mailing-list
cve.org
访问
cve.org
[flink-user] 20190813 Apache flink 1.7.2 security issues
mailing-list
cve.org
访问
cve.org
[flink-user] 20190813 Re: Apache flink 1.7.2 security issues
mailing-list
cve.org
访问
cve.org
[roller-commits] 20190820 [jira] [Created] (ROL-2150) Fix Js security vulnerabilities detected using retire js
mailing-list
cve.org
访问
cve.org
[drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilities
mailing-list
cve.org
访问
cve.org
[drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities
mailing-list
cve.org
访问
cve.org
[drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities
mailing-list
cve.org
访问
cve.org
RHSA-2020:0481
vendor-advisory
cve.org
访问
cve.org
RHSA-2020:0729
vendor-advisory
cve.org
访问
cve.org
openSUSE-SU-2020:0395
vendor-advisory
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_CONFIRM
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_CONFIRM
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_CONFIRM
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_MISC
cve.org
访问
cve.org
无标题
x_refsource_CONFIRM
cve.org
访问
cve.org
无标题
x_refsource_CONFIRM
cve.org
访问
cve.org
CVSS评分详情
6.1
MEDIUM
CVSS向量:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS版本:
3.0
机密性
LOW
完整性
LOW
可用性
NONE
时间信息
发布时间:
2018-01-18 23:00:00
修改时间:
2024-08-06 08:43:41
创建时间:
2025-11-11 15:34:11
更新时间:
2025-11-11 15:53:32
利用信息
暂无可利用代码信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2015-9251 |
2025-11-11 15:19:02 | 2025-11-11 07:34:11 |
| NVD | nvd_CVE-2015-9251 |
2025-11-11 14:54:55 | 2025-11-11 07:42:51 |
| CNNVD | cnnvd_CNNVD-201801-798 |
2025-11-11 15:09:57 | 2025-11-11 07:53:32 |
版本与语言
当前版本:
v3
主要语言:
EN
支持语言:
EN
ZH
安全公告
暂无安全公告信息
变更历史
v3
CNNVD
2025-11-11 15:53:32
vulnerability_type: 未提取 → 跨站脚本; cnnvd_id: 未提取 → CNNVD-201801-798; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 跨站脚本
- cnnvd_id: 未提取 -> CNNVD-201801-798
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2
NVD
2025-11-11 15:42:51
cvss_score: 未提取 → 6.1; cvss_vector: NOT_EXTRACTED → CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N; cvss_version: NOT_EXTRACTED → 3.0; affected_products_count: 0 → 80; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
- cvss_score: 未提取 -> 6.1
- cvss_vector: NOT_EXTRACTED -> CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- cvss_version: NOT_EXTRACTED -> 3.0
- affected_products_count: 0 -> 80
- data_sources: ['cve'] -> ['cve', 'nvd']