CVE-2015-9251 in Retail Customer Managementinfo

Summary

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

Once again VulDB remains the best source for vulnerability data.

Reservation

01/18/2018

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
158434	Oracle Retail Customer Management/Segmentation Foundation Promotions cross site scripting	79	Not defined	Official fix	CVE-2015-9251
153558	Oracle Knowledge Information Manager Console/Web Applications cross site scripting	79	Not defined	Official fix	CVE-2015-9251
143637	Oracle WebLogic Server jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
138160	Oracle Diagnostic Assistant Jsch/jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
138021	Oracle Business Intelligence Enterprise Edition cURL cross site scripting	79	Not defined	Official fix	CVE-2015-9251
137907	Oracle Primavera Unifier jackson-databind cross site scripting	79	Not defined	Official fix	CVE-2015-9251
137897	Oracle Application Session Controller jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133761	Oracle Utilities Mobile Workforce Management Mobile Platform cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133760	Oracle Real-Time Scheduler Mobile Platform cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133755	Oracle OSS Support Tools Remote Diagnostic Agent cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133735	Oracle Retail Invoice Matching jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133734	Oracle Retail Allocation jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133656	Oracle JD Edwards EnterpriseOne Tools Web Runtime cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133625	Oracle JDeveloper ADF Faces cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133624	Oracle Fusion Middleware MapViewer Install cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133584	Oracle Hospitality Reporting/Analytics Report cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133583	Oracle Financial Services Reconciliation Framework User cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133582	Oracle Financial Services Profitability Management User cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133581	Oracle Financial Services Market Risk Measurement User cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133580	Oracle Financial Services Loan Loss Forecasting User cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133579	Oracle Financial Services Liquidity Risk Management Internal Operations cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133578	Oracle Financial Services Hedge Management User cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133577	Oracle Financial Services Funds Transfer Pricing User cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133576	Oracle Financial Services Data Integration Hub User cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133575	Oracle Financial Services Asset Liability Management User cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133574	Oracle Financial Services Analytical Applications Infrastructure User cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133512	Oracle Enterprise Operations Monitor jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
133511	Oracle Communications Interactive Session Recorder jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
129706	Oracle Utilities Framework User cross site scripting	79	Not defined	Official fix	CVE-2015-9251
129703	Oracle Agile Product Lifecycle Management for Process Supplier Portal cross site scripting	79	Not defined	Official fix	CVE-2015-9251
129686	Oracle Retail Workforce Management Software jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
129685	Oracle Retail Sales Audit Operational Insights cross site scripting	79	Not defined	Official fix	CVE-2015-9251
129683	Oracle Retail Customer Insights jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
129660	Oracle PeopleSoft Enterprise PeopleTools Mobile Application Platform cross site scripting	79	Not defined	Official fix	CVE-2015-9251
129612	Oracle Insurance Insbridge Rating/Underwriting jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
129601	Oracle Healthcare Foundation Install cross site scripting	79	Not defined	Official fix	CVE-2015-9251
129572	Oracle WebLogic Server jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
129569	Oracle Business Process Management Suite jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
129519	Oracle Enterprise Manager Ops Center Apache ActiveMQ cross site scripting	79	Not defined	Official fix	CVE-2015-9251
129483	Oracle Communications WebRTC Session Controller OpenSSL cross site scripting	79	Not defined	Official fix	CVE-2015-9251
129482	Oracle Communications Converged Application Server OpenSSL cross site scripting	79	Not defined	Official fix	CVE-2015-9251
125496	Oracle Hospitality Guest Access jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
125488	Oracle Healthcare Translational Research Cohort Explorer cross site scripting	79	Not defined	Official fix	CVE-2015-9251
125480	Oracle WebCenter Sites Advanced UI cross site scripting	79	Not defined	Official fix	CVE-2015-9251
125479	Oracle Service Bus OSB Core Functionality cross site scripting	79	Not defined	Official fix	CVE-2015-9251
125477	Oracle Endeca Information Discovery Studio jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
125421	Oracle Hospitality Materials Control MobileAuthWebService cross site scripting	79	Not defined	Official fix	CVE-2015-9251
125418	Oracle Banking Platform jQuery cross site scripting	79	Not defined	Official fix	CVE-2015-9251
125392	Oracle Construction/Engineering Suite Primavera Gateway cross site scripting	79	Not defined	Official fix	CVE-2015-9251
112187	jQuery dataType script.js Cross-Domain cross site scripting	79	Not defined	Official fix	CVE-2015-9251

Description

CPE

CWE

CVSS

Exploits

History

Diff

Relate

Threat Intelligence

API JSON

API XML

API CSV

Sources

◂ PreviousOverviewNext ▸

Interested in the pricing of exploits?

See the underground prices here!