CVE-2016-7103 in OSS Support Tools

Summary

Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservation

08/27/2016

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
191196	Oracle OSS Support Tools Diagnostic Assistant cross site scripting	79	Not defined	Official fix	CVE-2016-7103
173669	Oracle Siebel UI Framework UIF Open UI cross site scripting	79	Not defined	Official fix	CVE-2016-7103
153295	Oracle Database Oracle Application Express cross site scripting	79	Not defined	Official fix	CVE-2016-7103
143629	Oracle Business Intelligence Enterprise Edition JQuery cross site scripting	79	Not defined	Official fix	CVE-2016-7103
138022	Oracle WebLogic Server TFA Collector cross site scripting	79	Not defined	Official fix	CVE-2016-7103
133642	Oracle Hospitality Cruise Fleet Management FMS Suite cross site scripting	79	Not defined	Official fix	CVE-2016-7103
121590	Oracle Primavera Unifier jQueryUI cross site scripting	79	Not defined	Official fix	CVE-2016-7103
98137	jQuery UI dialog cross site scripting	79	Not defined	Official fix	CVE-2016-7103

Sources

• MITRE
• NVD
• CVE Details