Machap@machap
これはお話になりませんね。 今は主要なページは1.6.2のようですが下記脆弱性もあり、サポートが終了しており継続使用も推奨されていないバージョンを利用しているようです。 CVE-2011-4969 CVE-2012-6708 CVE-2015-9251 CVE-2019-11358 CVE-2020-7656 CVE-2020-11023 XSSが主かな？
00010261
729 followersView on X
CVE-2020-7656(jquery / active_iq_unified_manager)
LOWCVSS 6.1 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.
1.0/ 10 priority
Sources & remediation
Exploit / PoC references
Vendor / third-party advisories
- https://security.netapp.com/advisory/ntap-20200528-0001/
- https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1?language=en_US
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://security.netapp.com/advisory/ntap-20200528-0001/
- https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1?language=en_US
Weakness type (CWE)
CWE-79
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
Are you affected?
If you run products in this scope, you should treat this CVE as relevant to your environment.
- active_iq_unified_manager
- cloud_backup
- jquery
- junos
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day
Affected systems
Products
active_iq_unified_managercloud_backupjqueryjunosoncommand_system_managerpeoplesoft_enterprise_peopletoolssnap_creator_framework
3 versions affected across 7 products
Deep dive
Activity timeline1 mentions / 1d
Full discourse1 post
CPE platform detail9 entries
9 of 9 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jquery | jquery | - | node.js | - |
| OS | juniper | junos | 21.2 | - | - |
| App | netapp | active_iq_unified_manager | - | linux | - |
| App | netapp | active_iq_unified_manager | - | vmware_vsphere | - |
| App | netapp | active_iq_unified_manager | - | windows | - |
| App | netapp | cloud_backup | - | - | - |
| App | netapp | oncommand_system_manager | - | - | - |
| App | netapp | snap_creator_framework | - | - | - |
| App | oracle | peoplesoft_enterprise_peopletools | 8.58 | - | - |