VulnSocial

CVE-2019-11358General(backdropcms / agile_product_lifecycle_management_for_process)

LOWCVSS 6.1 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

backdropcms CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-1321

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • agile_product_lifecycle_management_for_process
  • application_express
  • application_service_level_management
  • application_testing_suite

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-05-30); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
backdropcmsdebiandrupalfedoraprojectjoomlajqueryjunipernetapp
Products
agile_product_lifecycle_management_for_processapplication_expressapplication_service_level_managementapplication_testing_suitebackdropbackports_slebanking_digital_experiencebanking_enterprise_collectionsbanking_platformbi_publisher

115 versions affected across 105 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-30: 1Mentions · 2026-06-14: 1Technical Details · 2026-06-14: 105-3006-14
Signal classification1 categories
General
2100.0%
Full discourse2 posts
  • sidharth@sidharthify
    General

    @ni5arga @thetirthparmar these are exposed to the following CVEs: CVE-2020-11023 CVE-2020-11022 CVE-2019-11358 CVE-2015-9251 CVE-2012-6708

    Post summary

    The tweet merely lists CVE identifiers without providing additional context, such as PoC, exploit details, or mitigation information.

    31108904.5K
    510 followersView on X
  • Stormking@StormkingX2
    General

    @vhsliberal Ahem Btw isto é publico A versao que estao a usar no website publico ja acabou o supporte em 13 de maio 2017. Also para leres o cve que falava CVE-2019-11358 (Medium Severity - CVSS 6.1) CVE-2020-11022 & CVE-2020-11023 (Medium Severity - CVSS 6.9)

    Post summary

    The post lists three CVEs (CVE‑2019‑11358, CVE‑2020‑11022, CVE‑2020‑11023) with medium severity and CVSS scores, noting that support for the site’s version ended on 13 May 2017; no further technical details, PoC, or exploitation status are provided.

    1000026
    43 followersView on X
CPE platform detail211 entries

211 of 211 entries

PartVendorProductVersionTarget SWTarget HW
Appbackdropcmsbackdrop---
OSdebiandebian_linux10.0--
OSdebiandebian_linux8.0--
OSdebiandebian_linux9.0--
Appdrupaldrupal---
OSfedoraprojectfedora28--
OSfedoraprojectfedora29--
OSfedoraprojectfedora30--
Appjoomlajoomla\!---
Appjqueryjquery---
OSjuniperjunos21.2--
Appnetapponcommand_system_manager---
Appnetappsnapcenter---
Appopensusebackports_sle15.0--
OSopensuseleap15.1--
Apporacleagile_product_lifecycle_management_for_process6.1--
Apporacleagile_product_lifecycle_management_for_process6.2.0.0--
Apporacleagile_product_lifecycle_management_for_process6.2.1.0--
Apporacleagile_product_lifecycle_management_for_process6.2.2.0--
Apporacleagile_product_lifecycle_management_for_process6.2.3.0--
Apporacleapplication_express---
Apporacleapplication_service_level_management13.2.0.0--
Apporacleapplication_service_level_management13.3.0.0--
Apporacleapplication_testing_suite12.5.0.3--
Apporacleapplication_testing_suite13.1.0.1--
Apporacleapplication_testing_suite13.2--
Apporacleapplication_testing_suite13.2.0.1--
Apporacleapplication_testing_suite13.3--
Apporacleapplication_testing_suite13.3.0.1--
Apporaclebanking_digital_experience18.1--
Apporaclebanking_digital_experience18.2--
Apporaclebanking_digital_experience18.3--
Apporaclebanking_digital_experience19.1--
Apporaclebanking_digital_experience19.2--
Apporaclebanking_digital_experience20.1--
Apporaclebanking_enterprise_collections---
Apporaclebanking_platform---
Apporaclebi_publisher12.2.1.3.0--
Apporaclebi_publisher12.2.1.4.0--
Apporaclebi_publisher5.5.0.0.0--
Apporaclebig_data_discovery1.6--
Apporaclebusiness_process_management_suite12.2.1.3.0--
Apporaclebusiness_process_management_suite12.2.1.4.0--
Apporaclecommunications_analytics12.1.1--
Apporaclecommunications_application_session_controller3.8m0--
Apporaclecommunications_billing_and_revenue_management12.0--
Apporaclecommunications_billing_and_revenue_management12.0.0.3.0--
Apporaclecommunications_billing_and_revenue_management7.5--
Apporaclecommunications_billing_and_revenue_management7.5.0.23.0--
Apporaclecommunications_diameter_signaling_router8.0.0--
Apporaclecommunications_diameter_signaling_router8.1--
Apporaclecommunications_diameter_signaling_router8.2--
Apporaclecommunications_diameter_signaling_router8.2.1--
Apporaclecommunications_eagle_application_processor---
Apporaclecommunications_element_manager8.1.1--
Apporaclecommunications_element_manager8.2.0--
Apporaclecommunications_element_manager8.2.1--
Apporaclecommunications_interactive_session_recorder---
Apporaclecommunications_operations_monitor---
Apporaclecommunications_operations_monitor3.4--
Apporaclecommunications_operations_monitor4.0--
Apporaclecommunications_operations_monitor4.1.0--
Apporaclecommunications_services_gatekeeper7.0--
Apporaclecommunications_session_report_manager8.1.1--
Apporaclecommunications_session_report_manager8.2.0--
Apporaclecommunications_session_report_manager8.2.1--
Apporaclecommunications_session_route_manager8.1.1--
Apporaclecommunications_session_route_manager8.2.0--
Apporaclecommunications_session_route_manager8.2.1--
Apporaclecommunications_unified_inventory_management7.3--
Apporaclecommunications_unified_inventory_management7.4.0--
Apporaclecommunications_webrtc_session_controller7.2--
Apporaclediagnostic_assistant2.12.36--
Apporacleenterprise_manager_ops_center12.3.3--
Apporacleenterprise_manager_ops_center12.4.0--
Apporacleenterprise_manager_ops_center12.4.0.0--
Apporacleenterprise_session_border_controller8.4--
Apporaclefinancial_services_analytical_applications_infrastructure---
Apporaclefinancial_services_analytical_applications_reconciliation_framework---
Apporaclefinancial_services_analytical_applications_reconciliation_framework8.1.0--
Apporaclefinancial_services_asset_liability_management---
Apporaclefinancial_services_asset_liability_management8.1.0--
Apporaclefinancial_services_balance_sheet_planning8.0.8--
Apporaclefinancial_services_basel_regulatory_capital_basic---
Apporaclefinancial_services_basel_regulatory_capital_basic8.1.0--
Apporaclefinancial_services_basel_regulatory_capital_internal_ratings_based_approach---
Apporaclefinancial_services_basel_regulatory_capital_internal_ratings_based_approach8.1.0--
Apporaclefinancial_services_data_foundation---
Apporaclefinancial_services_data_governance_for_us_regulatory_reporting---
Apporaclefinancial_services_data_integration_hub---
Apporaclefinancial_services_data_integration_hub8.1.0--
Apporaclefinancial_services_enterprise_financial_performance_analytics8.0.6--
Apporaclefinancial_services_enterprise_financial_performance_analytics8.0.7--
Apporaclefinancial_services_funds_transfer_pricing---
Apporaclefinancial_services_funds_transfer_pricing8.1.0--
Apporaclefinancial_services_hedge_management_and_ifrs_valuations---
Apporaclefinancial_services_hedge_management_and_ifrs_valuations8.1.0--
Apporaclefinancial_services_institutional_performance_analytics---
Apporaclefinancial_services_institutional_performance_analytics8.1.0--
Apporaclefinancial_services_liquidity_risk_management8.0.0.1.0--
Apporaclefinancial_services_liquidity_risk_management8.0.2--
Apporaclefinancial_services_liquidity_risk_management8.0.4.0.0--
Apporaclefinancial_services_liquidity_risk_management8.0.5.0.0--
Apporaclefinancial_services_liquidity_risk_management8.0.6--
Apporaclefinancial_services_liquidity_risk_measurement_and_management8.0.7--
Apporaclefinancial_services_liquidity_risk_measurement_and_management8.0.8--
Apporaclefinancial_services_liquidity_risk_measurement_and_management8.1.0--
Apporaclefinancial_services_loan_loss_forecasting_and_provisioning---
Apporaclefinancial_services_loan_loss_forecasting_and_provisioning8.1.0--
Apporaclefinancial_services_market_risk_measurement_and_management8.0.5--
Apporaclefinancial_services_market_risk_measurement_and_management8.0.6--
Apporaclefinancial_services_market_risk_measurement_and_management8.0.8--
Apporaclefinancial_services_price_creation_and_discovery---
Apporaclefinancial_services_profitability_management---
Apporaclefinancial_services_profitability_management8.1.0--
Apporaclefinancial_services_regulatory_reporting_for_de_nederlandsche_bank8.0.4--
Apporaclefinancial_services_regulatory_reporting_for_european_banking_authority8.0.6--
Apporaclefinancial_services_regulatory_reporting_for_european_banking_authority8.0.7--
Apporaclefinancial_services_regulatory_reporting_for_us_federal_reserve---
Apporaclefinancial_services_retail_customer_analytics---
Apporaclefinancial_services_retail_performance_analytics8.0.6--
Apporaclefinancial_services_retail_performance_analytics8.0.7--
Apporaclefinancial_services_revenue_management_and_billing2.4.0.0--
Apporaclefinancial_services_revenue_management_and_billing2.4.0.1--
Apporaclefusion_middleware_mapviewer12.2.1.3.0--
Apporaclehealthcare_foundation7.1.1--
Apporaclehealthcare_foundation7.2.0--
Apporaclehealthcare_foundation7.2.2--
Apporaclehealthcare_foundation7.3.0--
Apporaclehealthcare_translational_research3.1.0--
Apporaclehealthcare_translational_research3.2.1--
Apporaclehealthcare_translational_research3.3.1--
Apporaclehealthcare_translational_research3.3.2--
Apporaclehealthcare_translational_research3.4.0--
Apporaclehospitality_guest_access4.2.0--
Apporaclehospitality_guest_access4.2.1--
Apporaclehospitality_materials_control18.1--
Apporaclehospitality_simphony---
Apporaclehospitality_simphony18.1--
Apporaclehospitality_simphony18.2--
Apporacleidentity_manager12.2.1.3.0--
Apporacleinsurance_accounting_analyzer8.0.9--
Apporacleinsurance_allocation_manager_for_enterprise_profitability8.0.8--
Apporacleinsurance_allocation_manager_for_enterprise_profitability8.1.0--
Apporacleinsurance_data_foundation---
Apporacleinsurance_ifrs_17_analyzer8.0.6--
Apporacleinsurance_ifrs_17_analyzer8.0.7--
Apporacleinsurance_insbridge_rating_and_underwriting---
Apporacleinsurance_insbridge_rating_and_underwriting5.6.1.0--
Apporacleinsurance_performance_insight8.0.7--
Apporaclejd_edwards_enterpriseone_tools9.2--
Apporaclejdeveloper11.1.1.9.0--
Apporaclejdeveloper12.2.1.3.0--
Apporaclejdeveloper12.2.1.4.0--
Apporaclejdeveloper_and_adf11.1.1.9.0--
Apporaclejdeveloper_and_adf12.1.3.0.0--
Apporaclejdeveloper_and_adf12.2.1.3.0--
Apporacleknowledge---
Apporaclepeoplesoft_enterprise_peopletools8.55--
Apporaclepeoplesoft_enterprise_peopletools8.56--
Apporaclepeoplesoft_enterprise_peopletools8.57--
Apporaclepeoplesoft_enterprise_peopletools8.58--
Apporaclepolicy_automation---
Apporaclepolicy_automation10.4.7--
Apporaclepolicy_automation12.1.0--
Apporaclepolicy_automation12.1.1--
Apporaclepolicy_automation_connector_for_siebel10.4.6--
Apporaclepolicy_automation_for_mobile_devices---
Apporacleprimavera_gateway---
Apporacleprimavera_gateway15.2.18--
Apporacleprimavera_unifier---
Apporacleprimavera_unifier16.1--
Apporacleprimavera_unifier16.2--
Apporacleprimavera_unifier18.8--
Apporaclereal-time_scheduler---
Apporaclerest_data_services11.2.0.4--
Apporaclerest_data_services12.1.0.2--
Apporaclerest_data_services12.2.0.1--
Apporaclerest_data_services18c--
Apporaclerest_data_services19c--
Apporacleretail_back_office14.0--
Apporacleretail_back_office14.1--
Apporacleretail_central_office14.0--
Apporacleretail_central_office14.1--
Apporacleretail_customer_insights15.0--
Apporacleretail_customer_insights16.0--
Apporacleretail_customer_management_and_segmentation_foundation18.0--
Apporacleretail_customer_management_and_segmentation_foundation19.0--
Apporacleretail_point-of-service14.0--
Apporacleretail_point-of-service14.1--
Apporacleretail_returns_management14.0--
Apporacleretail_returns_management14.1--
Apporacleservice_bus11.1.1.9.0--
Apporacleservice_bus12.1.3.0.0--
Apporacleservice_bus12.2.1.3.0--
Apporaclesiebel_mobile_applications---
Apporaclesiebel_ui_framework20.8--
Apporaclestoragetek_tape_analytics_sw_tool2.3.0--
Apporaclesystem_utilities19.1--
Apporacletape_library_acsls8.5--
Apporacletape_library_acsls8.5.1--
Apporacletransportation_management1.4.3--
Apporacleutilities_mobile_workforce_management---
Apporaclewebcenter_sites12.2.1.3.0--
Apporacleweblogic_server10.3.6.0.0--
Apporacleweblogic_server12.1.3.0.0--
Apporacleweblogic_server12.2.1.3.0--
Apporacleweblogic_server12.2.1.4.0--
Apporacleweblogic_server14.1.1.0.0--
Appredhatcloudforms4.7--
Appredhatvirtualization_manager4.3--

Explore more

Back to dashboardbackdropcms CVEsdebian CVEsdrupal CVEsagile_product_lifecycle_management_for_process vulnerabilities