VulnSocial

CVE-2020-11023General(debian / active_iq_unified_manager)

LOWCVSS 6.1 · MEDIUMCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

debian CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2025-02-13. Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Patch / fix
Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-79

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • active_iq_unified_manager
  • application_express
  • application_testing_suite
  • banking_enterprise_collections

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-05-30); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
debiandrupalfedoraprojectjquerynetapporacletenable
Products
active_iq_unified_managerapplication_expressapplication_testing_suitebanking_enterprise_collectionsbanking_platformblockchain_platformbusiness_intelligencecloud_backupcloud_insights_storage_workload_security_agentcommunications_analytics

35 versions affected across 60 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-05-30: 1Mentions · 2026-06-14: 1Technical Details · 2026-06-14: 105-3006-14
Signal classification1 categories
General
2100.0%
Full discourse2 posts
  • sidharth@sidharthify
    General

    @ni5arga @thetirthparmar these are exposed to the following CVEs: CVE-2020-11023 CVE-2020-11022 CVE-2019-11358 CVE-2015-9251 CVE-2012-6708

    Post summary

    The message simply lists several CVE identifiers, giving no further information on exploitation, patches, or technical details.

    31108904.5K
    510 followersView on X
  • Stormking@StormkingX2
    General

    @vhsliberal Ahem Btw isto é publico A versao que estao a usar no website publico ja acabou o supporte em 13 de maio 2017. Also para leres o cve que falava CVE-2019-11358 (Medium Severity - CVSS 6.1) CVE-2020-11022 &amp; CVE-2020-11023 (Medium Severity - CVSS 6.9)

    Post summary

    The tweet mentions three CVEs with their CVSS scores and notes that the affected version is no longer supported, but does not provide exploit details, patches, or evidence of active exploitation.

    1000026
    43 followersView on X
CPE platform detail84 entries

84 of 84 entries

PartVendorProductVersionTarget SWTarget HW
OSdebiandebian_linux9.0--
Appdrupaldrupal---
OSfedoraprojectfedora31--
OSfedoraprojectfedora32--
OSfedoraprojectfedora33--
Appjqueryjquery---
Appnetappactive_iq_unified_manager-linux-
Appnetappactive_iq_unified_manager-vsphere-
Appnetappactive_iq_unified_manager-windows-
Appnetappcloud_backup---
Appnetappcloud_insights_storage_workload_security_agent---
HWnetapph300e---
OSnetapph300e_firmware---
HWnetapph300s---
OSnetapph300s_firmware---
HWnetapph410c---
OSnetapph410c_firmware---
HWnetapph410s---
OSnetapph410s_firmware---
HWnetapph500e---
OSnetapph500e_firmware---
HWnetapph500s---
OSnetapph500s_firmware---
HWnetapph700e---
OSnetapph700e_firmware---
HWnetapph700s---
OSnetapph700s_firmware---
Appnetapphci_baseboard_management_controller---
Appnetappmax_data---
Appnetapponcommand_insight---
Appnetapponcommand_system_manager---
Appnetappsnap_creator_framework---
Appnetappsnapcenter_server---
Apporacleapplication_express---
Apporacleapplication_testing_suite13.3.0.1--
Apporaclebanking_enterprise_collections---
Apporaclebanking_platform---
Apporacleblockchain_platform---
Apporacleblockchain_platform21.1.2--
Apporaclebusiness_intelligence5.9.0.0.0--
Apporaclecommunications_analytics12.1.1--
Apporaclecommunications_eagle_application_processor---
Apporaclecommunications_element_manager8.1.1--
Apporaclecommunications_element_manager8.2.0--
Apporaclecommunications_element_manager8.2.1--
Apporaclecommunications_interactive_session_recorder---
Apporaclecommunications_operations_monitor---
Apporaclecommunications_operations_monitor3.4--
Apporaclecommunications_services_gatekeeper7.0--
Apporaclecommunications_session_report_manager8.1.1--
Apporaclecommunications_session_report_manager8.2.0--
Apporaclecommunications_session_report_manager8.2.1--
Apporaclecommunications_session_route_manager8.1.1--
Apporaclecommunications_session_route_manager8.2.0--
Apporaclecommunications_session_route_manager8.2.1--
Apporaclefinancial_services_regulatory_reporting_for_de_nederlandsche_bank8.0.4--
Apporaclefinancial_services_revenue_management_and_billing_analytics2.7--
Apporaclefinancial_services_revenue_management_and_billing_analytics2.8--
Apporaclehealth_sciences_inform6.3.0--
Apporaclehealthcare_translational_research3.2.1--
Apporaclehealthcare_translational_research3.3.1--
Apporaclehealthcare_translational_research3.3.2--
Apporaclehealthcare_translational_research3.4.0--
Apporaclehyperion_financial_reporting11.1.2.4--
Apporaclejd_edwards_enterpriseone_orchestrator---
Apporaclejd_edwards_enterpriseone_tools---
Apporacleoss_support_tools---
Apporaclepeoplesoft_enterprise_human_capital_management_resources9.2--
Apporacleprimavera_gateway---
Apporaclerest_data_services11.2.0.4--
Apporaclerest_data_services12.1.0.2--
Apporaclerest_data_services12.2.0.1--
Apporaclerest_data_services18c--
Apporaclerest_data_services19c--
Apporaclesiebel_mobile---
Apporaclestoragetek_acsls8.5.1--
Apporaclestoragetek_tape_analytics_sw_tool2.3.1--
Apporaclewebcenter_sites12.2.1.3.0--
Apporaclewebcenter_sites12.2.1.4.0--
Apporacleweblogic_server12.1.3.0.0--
Apporacleweblogic_server12.2.1.3.0--
Apporacleweblogic_server12.2.1.4.0--
Apporacleweblogic_server14.1.1.0.0--
Apptenablelog_correlation_engine---

Explore more

Back to dashboarddebian CVEsdrupal CVEsfedoraproject CVEsactive_iq_unified_manager vulnerabilities