CVE-2016-7103
- State
- Published
- Severity
- Not scored
- Published
- Mar 15, 2017
- Updated
- Aug 6, 2024
- Reserved
- Aug 27, 2016
Description
Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2017:0161vendor-advisory
- RHSA-2016:2933vendor-advisory
- RHSA-2016:2932vendor-advisory
- 104823vdb-entry
- [pulsar-commits] 20190416 [GitHub] [pulsar] one70six opened a new issue #4057: Security Vulnerabilities - Black Duck Scan - Pulsar v.2.3.1mailing-list
- FEDORA-2019-a96124345avendor-advisory
- [roller-commits] 20190820 [jira] [Created] (ROL-2150) Fix Js security vulnerabilities detected using retire jsmailing-list
- [drill-dev] 20191017 Dependencies used by Drill contain known vulnerabilitiesmailing-list
- [drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilitiesmailing-list
- [drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilitiesmailing-list
- https://www.oracle.com/security-alerts/cpuapr2020.html
- http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
- https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
- https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html
- https://www.oracle.com/security-alerts/cpuApr2021.html
- https://github.com/jquery/jquery-ui/commit/9644e7bae9116edaf8d37c5b38cb32b892f10ff6
- https://github.com/jquery/api.jqueryui.com/issues/281
- https://nodesecurity.io/advisories/127
- https://www.tenable.com/security/tns-2016-19
- https://jqueryui.com/changelog/1.12.0/
- https://security.netapp.com/advisory/ntap-20190416-0007/
- https://www.oracle.com//security-alerts/cpujul2021.html
- https://www.oracle.com/security-alerts/cpujan2022.html
- [debian-lts-announce] 20220119 [SECURITY] [DLA-2889-1] drupal7 security updatemailing-list
- https://www.drupal.org/sa-core-2022-002
- FEDORA-2022-9d655503eavendor-advisory
- FEDORA-2022-bf18450366vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.