Search for vulnerabilities
Vulnerability details: VCID-q1qe-zr6p-aaap
Vulnerability ID VCID-q1qe-zr6p-aaap
Aliases CVE-2012-6708
GHSA-2pqj-h3vj-pqgw
Summary jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common.
Status Published
Exploitability 2.0
Weighted Severity 8.0
Risk 10.0
Affected and Fixed Packages Package Details
Weaknesses (5)
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-64 Windows Shortcut Following (.LNK)
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
cvssv3.1 6.4 http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html
generic_textual MODERATE http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html
cvssv3.1 6.1 http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html
generic_textual MODERATE http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html
cvssv3.1 6.1 http://packetstormsecurity.com/files/161972/Linksys-EA7500-2.0.8.194281-Cross-Site-Scripting.html
generic_textual MODERATE http://packetstormsecurity.com/files/161972/Linksys-EA7500-2.0.8.194281-Cross-Site-Scripting.html
generic_textual Low http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-6708.html
cvssv3 6.8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json
epss 0.00635 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00635 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00635 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00635 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00823 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00823 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00823 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00823 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00823 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00823 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00823 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00823 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00823 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00823 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.00823 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01354 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.0138 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.0138 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.0138 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01391 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01391 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01391 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01391 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01391 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01391 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01391 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01391 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01391 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01391 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01391 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01442 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01603 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01603 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01603 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.01647 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
epss 0.02728 https://api.first.org/data/v1/epss?cve=CVE-2012-6708
cvssv3.1 6.1 https://bugs.jquery.com/ticket/11290
generic_textual MODERATE https://bugs.jquery.com/ticket/11290
cvssv3.1 6.1 https://bugs.jquery.com/ticket/12531
generic_textual MODERATE https://bugs.jquery.com/ticket/12531
cvssv3.1 6.1 https://bugs.jquery.com/ticket/6429
generic_textual MODERATE https://bugs.jquery.com/ticket/6429
cvssv3.1 6.1 https://bugs.jquery.com/ticket/9521
generic_textual MODERATE https://bugs.jquery.com/ticket/9521
rhbs medium https://bugzilla.redhat.com/show_bug.cgi?id=1591840
generic_textual Low https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6708
cvssv3.1 6.8 https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-2pqj-h3vj-pqgw
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-2pqj-h3vj-pqgw
cvssv3.1 6.1 https://github.com/jquery/jquery
generic_textual MODERATE https://github.com/jquery/jquery
cvssv3.1 6.1 https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d
generic_textual MODERATE https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d
cvssv3.1 6.1 https://github.com/rails/jquery-rails/blob/v2.1.4/vendor/assets/javascripts/jquery.js#L59
generic_textual MODERATE https://github.com/rails/jquery-rails/blob/v2.1.4/vendor/assets/javascripts/jquery.js#L59
cvssv3.1 6.1 https://github.com/rails/jquery-rails/blob/v2.2.0/vendor/assets/javascripts/jquery.js#L67
generic_textual MODERATE https://github.com/rails/jquery-rails/blob/v2.2.0/vendor/assets/javascripts/jquery.js#L67
cvssv3.1 6.1 https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
generic_textual MODERATE https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
cvssv3.1 6.1 https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
cvssv3.1 6.1 https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
cvssv3.1 6.1 https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
cvssv3.1 6.1 https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
cvssv3.1 6.1 https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
cvssv3.1 6.1 https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
generic_textual MODERATE https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
cvssv3 6.1 https://nvd.nist.gov/vuln/detail/cve-2012-6708
cvssv2 4.3 https://nvd.nist.gov/vuln/detail/CVE-2012-6708
cvssv3 6.1 https://nvd.nist.gov/vuln/detail/CVE-2012-6708
cvssv3.1 6.1 https://research.insecurelabs.org/jquery/test
generic_textual MODERATE https://research.insecurelabs.org/jquery/test
archlinux Medium https://security.archlinux.org/AVG-1041
cvssv3.1 6.1 https://security.snyk.io/vuln/SNYK-DOTNET-JQUERY-450223
generic_textual MODERATE https://security.snyk.io/vuln/SNYK-DOTNET-JQUERY-450223
cvssv3.1 6.1 https://snyk.io/vuln/npm:jquery:20120206
generic_textual MODERATE https://snyk.io/vuln/npm:jquery:20120206
cvssv3.1 6.1 https://web.archive.org/web/20200227132049/http://www.securityfocus.com/bid/102792
generic_textual MODERATE https://web.archive.org/web/20200227132049/http://www.securityfocus.com/bid/102792
Reference id Reference type URL
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html
http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html
http://packetstormsecurity.com/files/161972/Linksys-EA7500-2.0.8.194281-Cross-Site-Scripting.html
http://people.canonical.com/~ubuntu-security/cve/2012/CVE-2012-6708.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json
https://api.first.org/data/v1/epss?cve=CVE-2012-6708
https://bugs.jquery.com/ticket/11290
https://bugs.jquery.com/ticket/12531
https://bugs.jquery.com/ticket/6429
https://bugs.jquery.com/ticket/9521
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6708
https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
https://github.com/jquery/jquery
https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d
https://github.com/rails/jquery-rails/blob/v2.1.4/vendor/assets/javascripts/jquery.js#L59
https://github.com/rails/jquery-rails/blob/v2.2.0/vendor/assets/javascripts/jquery.js#L67
https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
https://nvd.nist.gov/vuln/detail/cve-2012-6708
https://research.insecurelabs.org/jquery/test
https://research.insecurelabs.org/jquery/test/
https://security.snyk.io/vuln/SNYK-DOTNET-JQUERY-450223
https://snyk.io/vuln/npm:jquery:20120206
https://web.archive.org/web/20200227132049/http://www.securityfocus.com/bid/102792
https://www.npmjs.com/advisories/329
https://www.ruby-lang.org/en/news/2019/08/28/multiple-jquery-vulnerabilities-in-rdoc/
http://www.securityfocus.com/bid/102792
1591840 https://bugzilla.redhat.com/show_bug.cgi?id=1591840
ASA-201910-4 https://security.archlinux.org/ASA-201910-4
AVG-1041 https://security.archlinux.org/AVG-1041
cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*
CVE-2012-6708 Exploit https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/webapps/49708.txt
CVE-2012-6708 https://nvd.nist.gov/vuln/detail/CVE-2012-6708
CVE-2012-6708.YML https://github.com/rubysec/ruby-advisory-db/blob/master/gems/jquery-rails/CVE-2012-6708.yml
CVE-2017-16011 https://nvd.nist.gov/vuln/detail/CVE-2017-16011
GHSA-2pqj-h3vj-pqgw https://github.com/advisories/GHSA-2pqj-h3vj-pqgw
Data source Exploit-DB
Date added March 25, 2021
Description Linksys EA7500 2.0.8.194281 - Cross-Site Scripting
Ransomware campaign use Unknown
Source publication date March 25, 2021
Exploit type webapps
Platform hardware
Source update date March 25, 2021
Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H Found at http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at http://packetstormsecurity.com/files/161972/Linksys-EA7500-2.0.8.194281-Cross-Site-Scripting.html
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N Found at https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://bugs.jquery.com/ticket/11290
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://bugs.jquery.com/ticket/12531
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://bugs.jquery.com/ticket/6429
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://bugs.jquery.com/ticket/9521
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N Found at https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/jquery/jquery
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/jquery/jquery/commit/05531fc4080ae24070930d15ae0cea7ae056457d
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/rails/jquery-rails/blob/v2.1.4/vendor/assets/javascripts/jquery.js#L59
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://github.com/rails/jquery-rails/blob/v2.2.0/vendor/assets/javascripts/jquery.js#L67
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2012-6708
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://nvd.nist.gov/vuln/detail/CVE-2012-6708
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://research.insecurelabs.org/jquery/test
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://security.snyk.io/vuln/SNYK-DOTNET-JQUERY-450223
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://snyk.io/vuln/npm:jquery:20120206
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Found at https://web.archive.org/web/20200227132049/http://www.securityfocus.com/bid/102792
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.78987
EPSS Score 0.00635
Published At Dec. 17, 2024, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.