In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
Connections 61
has cited scope1 retained · stored CVE-2020-11023 → jquery · jQueryadedb2fb-9126-4671-beec-6bf2641af14b
has environmental constraint1 retained · stored CVE-2020-11023 → netapp · h700e1206e139-27b7-44bd-8609-ccbdd3931465
has environmental constraint1 retained · stored CVE-2020-11023 → netapp · h410ce7b305db-92d9-4448-a3a1-a23e0bec77f2
has environmental constraint1 retained · stored CVE-2020-11023 → netapp · h500s343f6778-954a-4ba7-9afb-28370e2f569b
has environmental constraint1 retained · stored CVE-2020-11023 → netapp · h300sb501d54a-7b29-42ae-abf9-97d6b4c4ab6d
has environmental constraint1 retained · stored CVE-2020-11023 → netapp · h300ec1b5b646-de21-416e-9176-0973f5e87620
has environmental constraint1 retained · stored CVE-2020-11023 → netapp · h410s1dd9ae70-fb94-4d7b-8465-bddcdddac97d
has environmental constraint1 retained · stored CVE-2020-11023 → netapp · h500ec260b45a-f18d-4453-bd73-f4fb45dc5b7c
has environmental constraint1 retained · stored CVE-2020-11023 → netapp · h700s38fcccdf-735c-48a5-b544-65bc431f43e2
has vulnerable target scope4 retained · stored CVE-2020-11023 → oracle · healthcare_translational_research178406bc-95a0-496a-bbb3-217901d40668aa7687a3-a37b-4da6-82cf-563d013e155cd0ecb904-48a0-4d64-8030-2edc076d0c0ef22c4cad-522d-4058-9191-74a9ea666661
has vulnerable target scope2 retained · stored CVE-2020-11023 → oracle · communications_operations_monitor6f06d3ed-8d06-4711-8f9e-6d507c658d90e96fc439-cf91-480e-a995-ca9cdb12c14a
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · business_intelligenceaffcfa5a-ac33-4306-ab5c-fb21002bddab
has vulnerable target scope5 retained · stored CVE-2020-11023 → oracle · rest_data_services493a15e2-a969-4455-80dd-4128dd5f4774963a5127-b9b8-48b6-8fd4-e35bc411b23ba1a1b6ff-4a55-40b5-b7b0-e419ffdd5391c4885800-b380-4917-aa3c-4dcfd1ed90fde265ae9a-6e3e-468e-b091-58539c44c3f3
has vulnerable target scope3 retained · stored CVE-2020-11023 → oracle · communications_element_manager2a90f76c-53a0-4345-8c4c-5eb37fd4658c5b7101b4-1ea1-4610-b981-0c7da3d476e9617a86c9-3f52-4cea-b1d1-cf097a879281
has vulnerable target scope3 retained · stored CVE-2020-11023 → drupal · drupal3110840a-3e8d-46eb-aa79-571daaccfc0063824099-d1b5-487d-9c58-bf668eb008dac9e70f6c-e116-4dbc-82e0-3aba07e1bd51
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · storagetek_tape_analytics_sw_tool69659703-4613-44b0-85d7-d32ed7b4818d
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · max_data8fda709e-fd54-44d1-b45d-e5ed6f28c8a3
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · communications_analyticsed0dcc5d-a24a-45f4-83c6-9d392a60faa9
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · h700s_firmwareea288ca2-f509-43c7-924e-52a6c6d19e92
has vulnerable target scope1 retained · stored CVE-2020-11023 → debian · debian_linux4522ebd6-a137-4914-b8a9-ec31ed121be2
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · h410c_firmware63a11bfb-89f6-4f3e-9242-ba27daddc3b7
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · oncommand_system_manager9a4ae697-50a8-4d6b-9813-42f1e7a66723
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · hci_baseboard_management_controllere22ef7fc-d99a-4ebd-b9f5-f88909d637de
has vulnerable target scope1 retained · stored CVE-2020-11023 → jquery · jqueryc74e7f0e-2420-4c11-afdf-055c260dca9a
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · application_express80ed362b-6579-4dd6-8f3d-97836a8b297c
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · hyperion_financial_reportinga0841cc0-7d37-4efb-88c9-c7f3515e9b18
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · application_testing_suite8cef123b-085b-4121-b7dd-60258a63f452
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · jd_edwards_enterpriseone_orchestrator02be290c-5214-4e15-bdd0-7338de4f21a7
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · banking_enterprise_collectionsda611f72-2016-423b-bd3f-0d8c5cfad7b1
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · peoplesoft_enterprise_human_capital_management_resources5268bb85-3fde-4648-94ba-9a81557f578a
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · communications_eagle_application_processor7409a36f-8502-474a-892a-b32bf3cd0b8a
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · oncommand_insight84c54922-7a29-4464-86ba-5d24472e1567
has vulnerable target scope4 retained · stored CVE-2020-11023 → oracle · primavera_gateway03d408d7-38b7-418c-b33d-9c509eb542d26722f58c-60d5-40fa-846f-61a666a9beb6a5dd39cc-0daf-4fe0-b76d-e83fa26b18bcd6ce696d-7330-4513-9b01-966214a68a08
has vulnerable target scope2 retained · stored CVE-2020-11023 → oracle · blockchain_platform379b1844-0051-4484-8939-54e2361115d8d6c53c96-a4bf-4f8c-bc28-1f7898799fc9
has vulnerable target scope4 retained · stored CVE-2020-11023 → oracle · weblogic_server18e4267c-ddbe-4e1d-a1bc-37cdcc7b3743347061bf-903a-4f51-b712-359a8296090843279099-a529-40fa-bd54-4eb7f810567bfdf79a18-7b8c-4a10-8624-673e63e78d99
has vulnerable target scope3 retained · stored CVE-2020-11023 → netapp · active_iq_unified_manager06eb2f17-7395-4335-9cd6-61963fe82ac57542f02f-5d23-4b30-8499-9bcebcd27ee6a5b4fec6-eed3-4340-9632-26f20261579a
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · siebel_mobile45bc90e6-c13c-4e95-9c53-46b9a68a1b2f
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · jd_edwards_enterpriseone_tools7fd1f1f1-0303-43a7-8a70-3d5608d870d9
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · oss_support_tools3a08d352-5873-44bf-9b36-f9197380ce39
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · cloud_backup6d71da2d-55c5-435d-8333-02c52af8ea16
has vulnerable target scope3 retained · stored CVE-2020-11023 → oracle · communications_session_route_manager29461ea5-ccf0-416a-ba89-639ebec08ad15718e85f-f4b8-49ca-bfed-7612aba55d01e1ebed73-8c43-492d-aac2-155c8d4c6b55
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · cloud_insights_storage_workload_security_agent9488bef2-b7c2-4567-9953-0f85891fc892
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · snapcenter_server2317e3da-5aeb-45c7-b7f9-e7bf362cd289
has vulnerable target scope2 retained · stored CVE-2020-11023 → oracle · financial_services_revenue_management_and_billing_analytics0e1e621c-7d05-41c2-8941-71d9e8601427459eeeff-dd03-4920-a784-124c1e2449f2
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · communications_services_gatekeeper3b7f73a1-7498-4c9e-a49a-5ba9b9c05007
has vulnerable target scope2 retained · stored CVE-2020-11023 → oracle · webcenter_sites70574dde-6e99-4adb-baee-7b828037b4b3e4218c46-ad9f-4052-8ee9-e5b4c84e5f54
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · h700e_firmware669669ff-8e33-472e-bfe5-3a719ef16e6e
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · banking_platform3dc0352a-2de7-438d-9a2e-b91c5949ce62
has vulnerable target scope1 retained · stored CVE-2020-11023 → tenable · log_correlation_engine6f7aebcf-69f7-44e9-a19e-2b5e4121bded
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · h300s_firmwarecfc06987-f299-4858-ba76-d39e8c4bbb70
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · h410s_firmware743cec1d-fe7d-4b77-8985-b16f4b5af7e7
has vulnerable target scope3 retained · stored CVE-2020-11023 → fedoraproject · fedora1a78a716-6023-418f-b226-4a070546e284236c9893-20b0-4bdb-b741-44ca15c74687cf6e2475-0540-4bdd-91b6-eb2d0a22e56b
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · snap_creator_framework56348eb9-b0a5-46d3-8bc7-dedf9b9c8b55
has vulnerable target scope3 retained · stored CVE-2020-11023 → oracle · communications_session_report_manager3f0e9a3e-9be7-44b0-904a-b3b95919e20a76514c2c-3ec9-4dfd-979d-fbc1b8e60074f5f6782d-12d8-4419-bb2d-279cdf6136cf
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · communications_interactive_session_recorder18066815-59ef-41f9-87d5-621f82e923a6
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · health_sciences_inform96968344-2e43-453b-8628-4c24e00ff968
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · storagetek_acslsff57426e-f876-4fd5-8181-53bf041f2bec
has vulnerable target scope1 retained · stored CVE-2020-11023 → oracle · financial_services_regulatory_reporting_for_de_nederlandsche_bank18a4fa6a-2762-4313-9cbb-0f7978a202ba
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · h500s_firmware6c42c54a-8593-4ef1-bb61-3718510ff58b
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · h500e_firmware846e18bb-c108-4e22-a477-a16b83822370
has vulnerable target scope1 retained · stored CVE-2020-11023 → netapp · h300e_firmware157d17cb-3c2a-4f38-8111-f8085425683e