jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
jquery jquery |
||
debian debian linux 8.0 |
||
debian debian linux 9.0 |
||
debian debian linux 10.0 |
||
drupal drupal |
||
backdropcms backdrop |
||
fedoraproject fedora 28 |
||
fedoraproject fedora 29 |
||
fedoraproject fedora 30 |
||
opensuse backports sle 15.0 |
||
opensuse leap 15.1 |
||
netapp oncommand system manager |
||
netapp snapcenter - |
||
redhat cloudforms 4.7 |
||
redhat virtualization manager 4.3 |
||
oracle agile product lifecycle management for process 6.1 |
||
oracle agile product lifecycle management for process 6.2.0.0 |
||
oracle agile product lifecycle management for process 6.2.1.0 |
||
oracle agile product lifecycle management for process 6.2.2.0 |
||
oracle agile product lifecycle management for process 6.2.3.0 |
||
oracle application express |
||
oracle application service level management 13.2.0.0 |
||
oracle application service level management 13.3.0.0 |
||
oracle application testing suite 12.5.0.3 |
||
oracle application testing suite 13.1.0.1 |
||
oracle application testing suite 13.2 |
||
oracle application testing suite 13.2.0.1 |
||
oracle application testing suite 13.3 |
||
oracle application testing suite 13.3.0.1 |
||
oracle banking digital experience 18.1 |
||
oracle banking digital experience 18.2 |
||
oracle banking digital experience 18.3 |
||
oracle banking digital experience 19.1 |
||
oracle banking digital experience 19.2 |
||
oracle banking digital experience 20.1 |
||
oracle banking enterprise collections |
||
oracle banking platform |
||
oracle bi publisher 5.5.0.0.0 |
||
oracle bi publisher 12.2.1.3.0 |
||
oracle bi publisher 12.2.1.4.0 |
||
oracle big data discovery 1.6 |
||
oracle business process management suite 12.2.1.3.0 |
||
oracle business process management suite 12.2.1.4.0 |
||
oracle communications analytics 12.1.1 |
||
oracle communications application session controller 3.8m0 |
||
oracle communications billing and revenue management 7.5 |
||
oracle communications billing and revenue management 7.5.0.23.0 |
||
oracle communications billing and revenue management 12.0 |
||
oracle communications billing and revenue management 12.0.0.3.0 |
||
oracle communications diameter signaling router 8.0.0 |
||
oracle communications diameter signaling router 8.1 |
||
oracle communications diameter signaling router 8.2 |
||
oracle communications diameter signaling router 8.2.1 |
||
oracle communications eagle application processor |
||
oracle communications element manager 8.1.1 |
||
oracle communications element manager 8.2.0 |
||
oracle communications element manager 8.2.1 |
||
oracle communications interactive session recorder |
||
oracle communications operations monitor |
||
oracle communications operations monitor 3.4 |
||
oracle communications operations monitor 4.0 |
||
oracle communications operations monitor 4.1.0 |
||
oracle communications services gatekeeper 7.0 |
||
oracle communications session report manager 8.1.1 |
||
oracle communications session report manager 8.2.0 |
||
oracle communications session report manager 8.2.1 |
||
oracle communications session route manager 8.1.1 |
||
oracle communications session route manager 8.2.0 |
||
oracle communications session route manager 8.2.1 |
||
oracle communications unified inventory management 7.3 |
||
oracle communications unified inventory management 7.4.0 |
||
oracle communications webrtc session controller 7.2 |
||
oracle diagnostic assistant 2.12.36 |
||
oracle enterprise manager ops center 12.3.3 |
||
oracle enterprise manager ops center 12.4.0 |
||
oracle enterprise manager ops center 12.4.0.0 |
||
oracle enterprise session border controller 8.4 |
||
oracle financial services analytical applications infrastructure |
||
oracle financial services analytical applications reconciliation framework |
||
oracle financial services analytical applications reconciliation framework 8.1.0 |
||
oracle financial services asset liability management |
||
oracle financial services asset liability management 8.1.0 |
||
oracle financial services balance sheet planning 8.0.8 |
||
oracle financial services basel regulatory capital basic |
||
oracle financial services basel regulatory capital basic 8.1.0 |
||
oracle financial services basel regulatory capital internal ratings based approach |
||
oracle financial services basel regulatory capital internal ratings based approach 8.1.0 |
||
oracle financial services data foundation |
||
oracle financial services data governance for us regulatory reporting |
||
oracle financial services data integration hub |
||
oracle financial services data integration hub 8.1.0 |
||
oracle financial services enterprise financial performance analytics 8.0.6 |
||
oracle financial services enterprise financial performance analytics 8.0.7 |
||
oracle financial services funds transfer pricing |
||
oracle financial services funds transfer pricing 8.1.0 |
||
oracle financial services hedge management and ifrs valuations |
||
oracle financial services hedge management and ifrs valuations 8.1.0 |
||
oracle financial services institutional performance analytics |
||
oracle financial services institutional performance analytics 8.1.0 |
||
oracle financial services liquidity risk management 8.0.0.1.0 |
||
oracle financial services liquidity risk management 8.0.2 |
||
oracle financial services liquidity risk management 8.0.4.0.0 |
||
oracle financial services liquidity risk management 8.0.5.0.0 |
||
oracle financial services liquidity risk management 8.0.6 |
||
oracle financial services liquidity risk measurement and management 8.0.7 |
||
oracle financial services liquidity risk measurement and management 8.0.8 |
||
oracle financial services liquidity risk measurement and management 8.1.0 |
||
oracle financial services loan loss forecasting and provisioning |
||
oracle financial services loan loss forecasting and provisioning 8.1.0 |
||
oracle financial services market risk measurement and management 8.0.5 |
||
oracle financial services market risk measurement and management 8.0.6 |
||
oracle financial services market risk measurement and management 8.0.8 |
||
oracle financial services price creation and discovery |
||
oracle financial services profitability management |
||
oracle financial services profitability management 8.1.0 |
||
oracle financial services regulatory reporting for de nederlandsche bank 8.0.4 |
||
oracle financial services regulatory reporting for european banking authority 8.0.6 |
||
oracle financial services regulatory reporting for european banking authority 8.0.7 |
||
oracle financial services regulatory reporting for us federal reserve |
||
oracle financial services retail customer analytics |
||
oracle financial services retail performance analytics 8.0.6 |
||
oracle financial services retail performance analytics 8.0.7 |
||
oracle financial services revenue management and billing 2.4.0.0 |
||
oracle financial services revenue management and billing 2.4.0.1 |
||
oracle fusion middleware mapviewer 12.2.1.3.0 |
||
oracle healthcare foundation 7.1.1 |
||
oracle healthcare foundation 7.2.0 |
||
oracle healthcare foundation 7.2.2 |
||
oracle healthcare foundation 7.3.0 |
||
oracle healthcare translational research 3.1.0 |
||
oracle healthcare translational research 3.2.1 |
||
oracle healthcare translational research 3.3.1 |
||
oracle healthcare translational research 3.3.2 |
||
oracle healthcare translational research 3.4.0 |
||
oracle hospitality guest access 4.2.0 |
||
oracle hospitality guest access 4.2.1 |
||
oracle hospitality materials control 18.1 |
||
oracle hospitality simphony |
||
oracle hospitality simphony 18.1 |
||
oracle hospitality simphony 18.2 |
||
oracle identity manager 12.2.1.3.0 |
||
oracle insurance accounting analyzer 8.0.9 |
||
oracle insurance allocation manager for enterprise profitability 8.0.8 |
||
oracle insurance allocation manager for enterprise profitability 8.1.0 |
||
oracle insurance data foundation |
||
oracle insurance ifrs 17 analyzer 8.0.6 |
||
oracle insurance ifrs 17 analyzer 8.0.7 |
||
oracle insurance insbridge rating and underwriting |
||
oracle insurance insbridge rating and underwriting 5.6.1.0 |
||
oracle insurance performance insight 8.0.7 |
||
oracle jd edwards enterpriseone tools 9.2 |
||
oracle jdeveloper 11.1.1.9.0 |
||
oracle jdeveloper 12.2.1.3.0 |
||
oracle jdeveloper 12.2.1.4.0 |
||
oracle jdeveloper and adf 11.1.1.9.0 |
||
oracle jdeveloper and adf 12.1.3.0.0 |
||
oracle jdeveloper and adf 12.2.1.3.0 |
||
oracle knowledge |
||
oracle peoplesoft enterprise peopletools 8.55 |
||
oracle peoplesoft enterprise peopletools 8.56 |
||
oracle peoplesoft enterprise peopletools 8.57 |
||
oracle peoplesoft enterprise peopletools 8.58 |
||
oracle policy automation |
||
oracle policy automation 10.4.7 |
||
oracle policy automation 12.1.0 |
||
oracle policy automation 12.1.1 |
||
oracle policy automation connector for siebel 10.4.6 |
||
oracle policy automation for mobile devices |
||
oracle primavera gateway |
||
oracle primavera gateway 15.2.18 |
||
oracle primavera unifier |
||
oracle primavera unifier 16.1 |
||
oracle primavera unifier 16.2 |
||
oracle primavera unifier 18.8 |
||
oracle real-time scheduler |
||
oracle rest data services 11.2.0.4 |
||
oracle rest data services 12.1.0.2 |
||
oracle rest data services 12.2.0.1 |
||
oracle rest data services 18c |
||
oracle rest data services 19c |
||
oracle retail back office 14.0 |
||
oracle retail back office 14.1 |
||
oracle retail central office 14.0 |
||
oracle retail central office 14.1 |
||
oracle retail customer insights 15.0 |
||
oracle retail customer insights 16.0 |
||
oracle retail customer management and segmentation foundation 18.0 |
||
oracle retail customer management and segmentation foundation 19.0 |
||
oracle retail point-of-service 14.0 |
||
oracle retail point-of-service 14.1 |
||
oracle retail returns management 14.0 |
||
oracle retail returns management 14.1 |
||
oracle service bus 11.1.1.9.0 |
||
oracle service bus 12.1.3.0.0 |
||
oracle service bus 12.2.1.3.0 |
||
oracle siebel mobile applications |
||
oracle siebel ui framework 20.8 |
||
oracle storagetek tape analytics sw tool 2.3.0 |
||
oracle system utilities 19.1 |
||
oracle tape library acsls 8.5 |
||
oracle tape library acsls 8.5.1 |
||
oracle transportation management 1.4.3 |
||
oracle utilities mobile workforce management |
||
oracle webcenter sites 12.2.1.3.0 |
||
oracle weblogic server 10.3.6.0.0 |
||
oracle weblogic server 12.1.3.0.0 |
||
oracle weblogic server 12.2.1.3.0 |
||
oracle weblogic server 12.2.1.4.0 |
||
oracle weblogic server 14.1.1.0.0 |
||
joomla joomla! |
||
juniper junos 21.2 |