Details of VAR-202004-2191

ID

VAR-202004-2191

CVE

CVE-2020-11022

TITLE

jQuery Cross-site scripting vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2020-004854

DESCRIPTION

In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. jQuery Exists in a cross-site scripting vulnerability.Information may be obtained and information may be tampered with. jQuery is an open source, cross-browser JavaScript library developed by American John Resig programmers. The library simplifies the operation between HTML and JavaScript, and has the characteristics of modularization and plug-in extension. The vulnerability stems from the lack of correct validation of client data in WEB applications. An attacker could exploit this vulnerability to execute client code. Relevant releases/architectures: Red Hat Enterprise Linux AppStream (v. 8) - aarch64, noarch, ppc64le, s390x, x86_64 3. Description: The Public Key Infrastructure (PKI) Core contains fundamental packages required by Red Hat Certificate System. Bugs fixed (https://bugzilla.redhat.com/): 1376706 - restore SerialNumber tag in caManualRenewal xml 1399546 - CVE-2015-9251 jquery: Cross-site scripting via cross-domain ajax requests 1406505 - KRA ECC installation failed with shared tomcat 1601614 - CVE-2018-14040 bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute 1601617 - CVE-2018-14042 bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip 1666907 - CC: Enable AIA OCSP cert checking for entire cert chain 1668097 - CVE-2016-10735 bootstrap: XSS in the data-target attribute 1686454 - CVE-2019-8331 bootstrap: XSS in the tooltip or popover data-template attribute 1695901 - CVE-2019-10179 pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab 1701972 - CVE-2019-11358 jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection 1706521 - CA - SubjectAltNameExtInput does not display text fields to the enrollment page 1710171 - CVE-2019-10146 pki-core: Reflected XSS in 'path length' constraint field in CA's Agent page 1721684 - Rebase pki-servlet-engine to 9.0.30 1724433 - caTransportCert.cfg contains MD2/MD5withRSA as signingAlgsAllowed. 1732565 - CVE-2019-10221 pki-core: Reflected XSS in getcookies?url= endpoint in CA 1732981 - When nuxwdog is enabled pkidaemon status shows instances as stopped. 1777579 - CVE-2020-1721 pki-core: KRA vulnerable to reflected XSS via the getPk12 page 1805541 - [RFE] CA Certificate Transparency with Embedded Signed Certificate Time stamp 1817247 - Upgrade to 10.8.3 breaks PKI Tomcat Server 1821851 - [RFE] Provide SSLEngine via JSSProvider for use with PKI 1822246 - JSS - NativeProxy never calls releaseNativeResources - Memory Leak 1824939 - JSS: add RSA PSS support - RHEL 8.3 1824948 - add RSA PSS support - RHEL 8.3 1825998 - CertificatePoliciesExtDefault MAX_NUM_POLICIES hardcoded limit 1828406 - CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method 1842734 - CVE-2019-10179 pki-core: pki-core/pki-kra: Reflected XSS in recoveryID search field at KRA's DRM agent page in authorize recovery tab [rhel-8] 1842736 - CVE-2019-10146 pki-core: Reflected Cross-Site Scripting in 'path length' constraint field in CA's Agent page [rhel-8] 1843537 - Able to Perform PKI CLI operations like cert request and approval without nssdb password 1845447 - pkispawn fails in FIPS mode: AJP connector has secretRequired="true" but no secret 1850004 - CVE-2020-11023 jquery: Passing HTML containing <option> elements to manipulation methods could result in untrusted code execution 1854043 - /usr/bin/PrettyPrintCert is failing with a ClassNotFoundException 1854959 - ca-profile-add with Netscape extensions nsCertSSLClient and nsCertEmail in the profile gets stuck in processing 1855273 - CVE-2020-15720 pki: Dogtag's python client does not validate certificates 1855319 - Not able to launch pkiconsole 1856368 - kra-key-generate request is failing 1857933 - CA Installation is failing with ncipher v12.30 HSM 1861911 - pki cli ca-cert-request-approve hangs over crmf request from client-cert-request 1869893 - Common certificates are missing in CS.cfg on shared PKI instance 1871064 - replica install failing during pki-ca component configuration 1873235 - pki ca-user-cert-add with secure port failed with 'SSL_ERROR_INAPPROPRIATE_FALLBACK_ALERT' 6. Package List: Red Hat Enterprise Linux AppStream (v. Description: Red Hat Single Sign-On 7.6 is a standalone server, based on the Keycloak project, that provides authentication and standards-based single sign-on capabilities for web and mobile applications. Description: Red Hat JBoss Enterprise Application Platform 7 is a platform for Java applications based on the WildFly application runtime. JIRA issues fixed (https://issues.jboss.org/): JBEAP-23864 - (7.4.z) Upgrade xmlsec from 2.1.7.redhat-00001 to 2.2.3.redhat-00001 JBEAP-23865 - [GSS](7.4.z) Upgrade Apache CXF from 3.3.13.redhat-00001 to 3.4.10.redhat-00001 JBEAP-23866 - (7.4.z) Upgrade wss4j from 2.2.7.redhat-00001 to 2.3.3.redhat-00001 JBEAP-23928 - Tracker bug for the EAP 7.4.9 release for RHEL-9 JBEAP-24055 - (7.4.z) Upgrade HAL from 3.3.15.Final-redhat-00001 to 3.3.16.Final-redhat-00001 JBEAP-24081 - (7.4.z) Upgrade Elytron from 1.15.14.Final-redhat-00001 to 1.15.15.Final-redhat-00001 JBEAP-24095 - (7.4.z) Upgrade elytron-web from 1.9.2.Final-redhat-00001 to 1.9.3.Final-redhat-00001 JBEAP-24100 - [GSS](7.4.z) Upgrade Undertow from 2.2.20.SP1-redhat-00001 to 2.2.22.SP3-redhat-00001 JBEAP-24127 - (7.4.z) UNDERTOW-2123 - Update AsyncContextImpl.dispatch to use proper value JBEAP-24128 - (7.4.z) Upgrade Hibernate Search from 5.10.7.Final-redhat-00001 to 5.10.13.Final-redhat-00001 JBEAP-24132 - [GSS](7.4.z) Upgrade Ironjacamar from 1.5.3.SP2-redhat-00001 to 1.5.10.Final-redhat-00001 JBEAP-24147 - (7.4.z) Upgrade jboss-ejb-client from 4.0.45.Final-redhat-00001 to 4.0.49.Final-redhat-00001 JBEAP-24167 - (7.4.z) Upgrade WildFly Core from 15.0.19.Final-redhat-00001 to 15.0.21.Final-redhat-00002 JBEAP-24191 - [GSS](7.4.z) Upgrade remoting from 5.0.26.SP1-redhat-00001 to 5.0.27.Final-redhat-00001 JBEAP-24195 - [GSS](7.4.z) Upgrade JSF API from 3.0.0.SP06-redhat-00001 to 3.0.0.SP07-redhat-00001 JBEAP-24207 - (7.4.z) Upgrade Soteria from 1.0.1.redhat-00002 to 1.0.1.redhat-00003 JBEAP-24248 - (7.4.z) ELY-2492 - Upgrade sshd-common in Elytron from 2.7.0 to 2.9.2 JBEAP-24426 - (7.4.z) Upgrade Elytron from 1.15.15.Final-redhat-00001 to 1.15.16.Final-redhat-00001 JBEAP-24427 - (7.4.z) Upgrade WildFly Core from 15.0.21.Final-redhat-00002 to 15.0.22.Final-redhat-00001 7. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: Red Hat AMQ Interconnect 1.9.0 release and security update Advisory ID: RHSA-2020:4211-01 Product: Red Hat JBoss AMQ Interconnect Advisory URL: https://access.redhat.com/errata/RHSA-2020:4211 Issue date: 2020-10-08 CVE Names: CVE-2020-7656 CVE-2020-11022 CVE-2020-11023 ==================================================================== 1. Summary: Red Hat AMQ Interconnect 1.9.0 release packages are available for A-MQ Interconnect on RHEL 6, 7, and 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: 6ComputeNode-RH6-A-MQ-Interconnect-1 - noarch, x86_64 6Server-RH6-A-MQ-Interconnect-1 - i386, noarch, x86_64 6Workstation-RH6-A-MQ-Interconnect-1 - i386, noarch, x86_64 7ComputeNode-RH7-A-MQ-Interconnect-1 - noarch, x86_64 7Server-RH7-A-MQ-Interconnect-1 - noarch, x86_64 7Workstation-RH7-A-MQ-Interconnect-1 - noarch, x86_64 8Base-A-MQ-Interconnect-1 - noarch, x86_64 3. Description: Red Hat AMQ Interconnect is a component of the AMQ 7 product family. AMQ Interconnect provides flexible routing of messages between AMQP-enabled endpoints, whether they are clients, servers, brokers, or any other entity that can send or receive standard AMQP messages. This release of Red Hat AMQ Interconnect 1.9.0 serves as a replacement for Red Hat AMQ Interconnect 1.8.0 and includes security and bug fixes, and enhancements. For further information, refer to the release notes linked to in the References section. Security Fix(es): * jQuery: allows XSS via the load method (CVE-2020-7656) * jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022) * jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution (CVE-2020-11023) For more details about the security issue(s), including the impact, a CVSS score, acknowledgements, and other related information, refer to the CVE page(s) listed in the References section. 4. Solution: Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 5. JIRA issues fixed (https://issues.jboss.org/): ENTMQIC-2448 - Allow specifying address/source/target to be used for a multitenant listener ENTMQIC-2455 - Allow AMQP open properties to be supplemented from connector configuration ENTMQIC-2460 - Adding new config address, autolinks and link routes become slower as more get added ENTMQIC-2481 - Unable to delete listener with http enabled ENTMQIC-2485 - The VhostNamePatterns does not work in OCP env ENTMQIC-2492 - router drops TransactionalState on produced messages on link routes 7. Package List: 6ComputeNode-RH6-A-MQ-Interconnect-1: Source: qpid-dispatch-1.13.0-3.el6_10.src.rpm noarch: qpid-dispatch-console-1.13.0-3.el6_10.noarch.rpm qpid-dispatch-docs-1.13.0-3.el6_10.noarch.rpm qpid-dispatch-tools-1.13.0-3.el6_10.noarch.rpm x86_64: qpid-dispatch-debuginfo-1.13.0-3.el6_10.x86_64.rpm qpid-dispatch-router-1.13.0-3.el6_10.x86_64.rpm 6Server-RH6-A-MQ-Interconnect-1: Source: qpid-dispatch-1.13.0-3.el6_10.src.rpm i386: qpid-dispatch-debuginfo-1.13.0-3.el6_10.i686.rpm qpid-dispatch-router-1.13.0-3.el6_10.i686.rpm noarch: qpid-dispatch-console-1.13.0-3.el6_10.noarch.rpm qpid-dispatch-docs-1.13.0-3.el6_10.noarch.rpm qpid-dispatch-tools-1.13.0-3.el6_10.noarch.rpm x86_64: qpid-dispatch-debuginfo-1.13.0-3.el6_10.x86_64.rpm qpid-dispatch-router-1.13.0-3.el6_10.x86_64.rpm 6Workstation-RH6-A-MQ-Interconnect-1: Source: qpid-dispatch-1.13.0-3.el6_10.src.rpm i386: qpid-dispatch-debuginfo-1.13.0-3.el6_10.i686.rpm qpid-dispatch-router-1.13.0-3.el6_10.i686.rpm noarch: qpid-dispatch-console-1.13.0-3.el6_10.noarch.rpm qpid-dispatch-docs-1.13.0-3.el6_10.noarch.rpm qpid-dispatch-tools-1.13.0-3.el6_10.noarch.rpm x86_64: qpid-dispatch-debuginfo-1.13.0-3.el6_10.x86_64.rpm qpid-dispatch-router-1.13.0-3.el6_10.x86_64.rpm 7ComputeNode-RH7-A-MQ-Interconnect-1: Source: qpid-dispatch-1.13.0-3.el7.src.rpm noarch: qpid-dispatch-console-1.13.0-3.el7.noarch.rpm qpid-dispatch-docs-1.13.0-3.el7.noarch.rpm qpid-dispatch-tools-1.13.0-3.el7.noarch.rpm x86_64: qpid-dispatch-debuginfo-1.13.0-3.el7.x86_64.rpm qpid-dispatch-router-1.13.0-3.el7.x86_64.rpm 7Server-RH7-A-MQ-Interconnect-1: Source: qpid-dispatch-1.13.0-3.el7.src.rpm noarch: qpid-dispatch-console-1.13.0-3.el7.noarch.rpm qpid-dispatch-docs-1.13.0-3.el7.noarch.rpm qpid-dispatch-tools-1.13.0-3.el7.noarch.rpm x86_64: qpid-dispatch-debuginfo-1.13.0-3.el7.x86_64.rpm qpid-dispatch-router-1.13.0-3.el7.x86_64.rpm 7Workstation-RH7-A-MQ-Interconnect-1: Source: qpid-dispatch-1.13.0-3.el7.src.rpm noarch: qpid-dispatch-console-1.13.0-3.el7.noarch.rpm qpid-dispatch-docs-1.13.0-3.el7.noarch.rpm qpid-dispatch-tools-1.13.0-3.el7.noarch.rpm x86_64: qpid-dispatch-debuginfo-1.13.0-3.el7.x86_64.rpm qpid-dispatch-router-1.13.0-3.el7.x86_64.rpm 8Base-A-MQ-Interconnect-1: Source: qpid-dispatch-1.13.0-3.el8.src.rpm noarch: qpid-dispatch-console-1.13.0-3.el8.noarch.rpm qpid-dispatch-docs-1.13.0-3.el8.noarch.rpm qpid-dispatch-tools-1.13.0-3.el8.noarch.rpm x86_64: qpid-dispatch-debugsource-1.13.0-3.el8.x86_64.rpm qpid-dispatch-router-1.13.0-3.el8.x86_64.rpm qpid-dispatch-router-debuginfo-1.13.0-3.el8.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 8. References: https://access.redhat.com/security/cve/CVE-2020-7656 https://access.redhat.com/security/cve/CVE-2020-11022 https://access.redhat.com/security/cve/CVE-2020-11023 https://access.redhat.com/security/updates/classification/#moderate https://access.redhat.com/jbossnetwork/restricted/listSoftware.html?product=jboss.amq.interconnect&downloadType=distributions&version=1.9.0 https://access.redhat.com/documentation/en-us/red_hat_amq/ 9. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2020 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBX365P9zjgjWX9erEAQhhZw/+K0DanwyxyCuUqIhXUzKL4TutmZLV0ONZ AQpnQ4ZdZxmfxkx5EImuKVFTac9sWJv8sKAE295nsOzkSCnfvvkDhsUp285V/AkE FBLp6j5wEEucUMSeWNz9LtFke6g2xZfqOoYU93Z9hk0FxAH1BLTuiWNYTC/XSjrK KHeJOpW1+cLdRyDAMT3w7giMoN2k4zo8/qUr1NlmNK8BT5+iDU4PYi/yH6liUTDa M3LoQPUIBzHVNIH/PxiJNsgV7cCzMUoodeam3DgqjXWhQ2/tJ5T3jNfTloynKhcV 39PsRf5VGAAWXqMxDXPHdgNqIxxvW51S0EGlnwMH5hQmcj2OgWhc47LDSXkWw9dM Atp4v4RoC+NvvOaC2Y8/KTC0EM5QTJxBziBsIO3PyTuuwDH2yIFY2b7iW/rz9Cb/ Vi03xbsUdDXvdlZz1Z4Ba6xDUM5+otsPOWWmWtTxJD9eEH0kFv7O2+xHIPdO1J2G PsRa/Zd6AtAjbuid972MIkC3aVeKuAqc+/pKvObky7FNl/lSL5YJtydqRPgSlqvy H/41cZGjGbpXUPg+7llDjdor729EcoG1fcUXtHs69Wr8AZgoqRgnXaVRy5z5lUn+ hEoMR9PVyT2ivMkvqNsiAA0XgDEO0KBh8Vmnl56R6Ql+VxdaOXsVs2iffp6sW7kM xMEHmT+D6Rw=G1iH -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . Description: Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation

Trust: 2.25

sources: NVD: CVE-2020-11022 // JVNDB: JVNDB-2020-004854 // VULHUB: VHN-163559 // VULMON: CVE-2020-11022 // PACKETSTORM: 159852 // PACKETSTORM: 171211 // PACKETSTORM: 170819 // PACKETSTORM: 159513 // PACKETSTORM: 157905

AFFECTED PRODUCTS

vendor:	oracle	model:	jdeveloper	scope:	eq	version:	12.2.1.3.0	Trust: 1.0
vendor:	oracle	model:	jdeveloper	scope:	eq	version:	12.2.1.4.0	Trust: 1.0
vendor:	oracle	model:	financial services data foundation	scope:	gte	version:	8.0.6	Trust: 1.0
vendor:	oracle	model:	financial services analytical applications infrastructure	scope:	gte	version:	8.0.6.0.0	Trust: 1.0
vendor:	oracle	model:	hospitality simphony	scope:	eq	version:	19.1.0-19.1.2	Trust: 1.0
vendor:	oracle	model:	financial services market risk measurement and management	scope:	eq	version:	8.0.8	Trust: 1.0
vendor:	drupal	model:	drupal	scope:	gte	version:	8.7.0	Trust: 1.0
vendor:	oracle	model:	financial services liquidity risk measurement and management	scope:	eq	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	financial services analytical applications infrastructure	scope:	gte	version:	8.0.6	Trust: 1.0
vendor:	netapp	model:	h300s	scope:	eq	version:	-	Trust: 1.0
vendor:	drupal	model:	drupal	scope:	lt	version:	8.7.14	Trust: 1.0
vendor:	oracle	model:	communications billing and revenue management	scope:	eq	version:	12.0.0.3.0	Trust: 1.0
vendor:	oracle	model:	financial services analytical applications reconciliation framework	scope:	lte	version:	8.0.8	Trust: 1.0
vendor:	oracle	model:	hospitality materials control	scope:	eq	version:	18.1	Trust: 1.0
vendor:	oracle	model:	hospitality simphony	scope:	lte	version:	19.1.2	Trust: 1.0
vendor:	oracle	model:	financial services data governance for us regulatory reporting	scope:	lte	version:	8.0.9	Trust: 1.0
vendor:	oracle	model:	policy automation connector for siebel	scope:	eq	version:	10.4.6	Trust: 1.0
vendor:	oracle	model:	financial services analytical applications reconciliation framework	scope:	eq	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	financial services basel regulatory capital basic	scope:	lte	version:	8.0.8	Trust: 1.0
vendor:	oracle	model:	enterprise session border controller	scope:	eq	version:	8.4	Trust: 1.0
vendor:	oracle	model:	financial services institutional performance analytics	scope:	eq	version:	8.0.6	Trust: 1.0
vendor:	oracle	model:	financial services profitability management	scope:	eq	version:	8.0.6	Trust: 1.0
vendor:	oracle	model:	retail back office	scope:	eq	version:	14.0	Trust: 1.0
vendor:	netapp	model:	snapcenter	scope:	eq	version:	-	Trust: 1.0
vendor:	drupal	model:	drupal	scope:	gte	version:	8.8.0	Trust: 1.0
vendor:	oracle	model:	financial services price creation and discovery	scope:	eq	version:	8.0.7	Trust: 1.0
vendor:	oracle	model:	insurance data foundation	scope:	lte	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	banking digital experience	scope:	eq	version:	20.1	Trust: 1.0
vendor:	oracle	model:	insurance allocation manager for enterprise profitability	scope:	eq	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	financial services analytical applications reconciliation framework	scope:	gte	version:	8.0.6	Trust: 1.0
vendor:	oracle	model:	financial services liquidity risk measurement and management	scope:	eq	version:	8.0.7	Trust: 1.0
vendor:	oracle	model:	insurance accounting analyzer	scope:	eq	version:	8.0.9	Trust: 1.0
vendor:	oracle	model:	financial services loan loss forecasting and provisioning	scope:	eq	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	financial services funds transfer pricing	scope:	eq	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	insurance data foundation	scope:	gte	version:	8.0.6	Trust: 1.0
vendor:	oracle	model:	agile product lifecycle management for process	scope:	eq	version:	6.2.0.0	Trust: 1.0
vendor:	oracle	model:	peoplesoft enterprise peopletools	scope:	eq	version:	8.58	Trust: 1.0
vendor:	oracle	model:	communications eagle application processor	scope:	gte	version:	16.1.0	Trust: 1.0
vendor:	oracle	model:	banking digital experience	scope:	eq	version:	18.2	Trust: 1.0
vendor:	jquery	model:	jquery	scope:	gte	version:	1.2	Trust: 1.0
vendor:	oracle	model:	financial services basel regulatory capital basic	scope:	gte	version:	8.0.6	Trust: 1.0
vendor:	oracle	model:	financial services data governance for us regulatory reporting	scope:	gte	version:	8.0.6	Trust: 1.0
vendor:	oracle	model:	financial services profitability management	scope:	eq	version:	8.1.0	Trust: 1.0
vendor:	drupal	model:	drupal	scope:	gte	version:	7.0	Trust: 1.0
vendor:	oracle	model:	blockchain platform	scope:	lt	version:	21.1.2	Trust: 1.0
vendor:	drupal	model:	drupal	scope:	lt	version:	8.8.6	Trust: 1.0
vendor:	oracle	model:	communications diameter signaling router idih\:	scope:	lte	version:	8.2.2	Trust: 1.0
vendor:	fedoraproject	model:	fedora	scope:	eq	version:	31	Trust: 1.0
vendor:	oracle	model:	financial services loan loss forecasting and provisioning	scope:	gte	version:	8.0.6	Trust: 1.0
vendor:	oracle	model:	insurance insbridge rating and underwriting	scope:	gte	version:	5.0.0.0	Trust: 1.0
vendor:	oracle	model:	financial services regulatory reporting for european banking authority	scope:	lte	version:	8.1.0	Trust: 1.0
vendor:	netapp	model:	h300e	scope:	eq	version:	-	Trust: 1.0
vendor:	oracle	model:	banking digital experience	scope:	eq	version:	19.2	Trust: 1.0
vendor:	oracle	model:	healthcare foundation	scope:	eq	version:	7.2.0	Trust: 1.0
vendor:	oracle	model:	siebel ui framework	scope:	eq	version:	20.8	Trust: 1.0
vendor:	oracle	model:	weblogic server	scope:	eq	version:	14.1.1.0.0	Trust: 1.0
vendor:	oracle	model:	banking digital experience	scope:	lte	version:	20.1	Trust: 1.0
vendor:	netapp	model:	h700e	scope:	eq	version:	-	Trust: 1.0
vendor:	oracle	model:	weblogic server	scope:	eq	version:	12.2.1.3.0	Trust: 1.0
vendor:	oracle	model:	weblogic server	scope:	eq	version:	12.2.1.4.0	Trust: 1.0
vendor:	netapp	model:	h500s	scope:	eq	version:	-	Trust: 1.0
vendor:	oracle	model:	financial services funds transfer pricing	scope:	eq	version:	8.0.7	Trust: 1.0
vendor:	oracle	model:	financial services price creation and discovery	scope:	eq	version:	8.0.6	Trust: 1.0
vendor:	oracle	model:	healthcare foundation	scope:	eq	version:	7.2.1	Trust: 1.0
vendor:	oracle	model:	policy automation	scope:	lte	version:	12.2.20	Trust: 1.0
vendor:	netapp	model:	oncommand system manager	scope:	gte	version:	3.0	Trust: 1.0
vendor:	oracle	model:	financial services profitability management	scope:	eq	version:	8.0.7	Trust: 1.0
vendor:	oracle	model:	financial services hedge management and ifrs valuations	scope:	eq	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	enterprise manager ops center	scope:	eq	version:	12.4.0.0	Trust: 1.0
vendor:	oracle	model:	banking digital experience	scope:	gte	version:	18.1	Trust: 1.0
vendor:	oracle	model:	policy automation	scope:	gte	version:	12.2.0	Trust: 1.0
vendor:	oracle	model:	financial services asset liability management	scope:	eq	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	communications application session controller	scope:	eq	version:	3.8m0	Trust: 1.0
vendor:	oracle	model:	financial services basel regulatory capital internal ratings based approach	scope:	eq	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	financial services market risk measurement and management	scope:	eq	version:	8.0.6	Trust: 1.0
vendor:	debian	model:	linux	scope:	eq	version:	9.0	Trust: 1.0
vendor:	oracle	model:	banking digital experience	scope:	eq	version:	18.3	Trust: 1.0
vendor:	oracle	model:	financial services hedge management and ifrs valuations	scope:	gte	version:	8.0.6	Trust: 1.0
vendor:	oracle	model:	weblogic server	scope:	eq	version:	10.3.6.0.0	Trust: 1.0
vendor:	fedoraproject	model:	fedora	scope:	eq	version:	33	Trust: 1.0
vendor:	oracle	model:	financial services basel regulatory capital internal ratings based approach	scope:	lte	version:	8.0.8	Trust: 1.0
vendor:	drupal	model:	drupal	scope:	lt	version:	7.70	Trust: 1.0
vendor:	oracle	model:	insurance insbridge rating and underwriting	scope:	eq	version:	5.6.1.0	Trust: 1.0
vendor:	oracle	model:	financial services balance sheet planning	scope:	eq	version:	8.0.8	Trust: 1.0
vendor:	oracle	model:	financial services funds transfer pricing	scope:	eq	version:	8.0.6	Trust: 1.0
vendor:	oracle	model:	retail returns management	scope:	eq	version:	14.1	Trust: 1.0
vendor:	oracle	model:	hospitality simphony	scope:	eq	version:	18.1	Trust: 1.0
vendor:	oracle	model:	insurance allocation manager for enterprise profitability	scope:	eq	version:	8.0.8	Trust: 1.0
vendor:	oracle	model:	financial services asset liability management	scope:	eq	version:	8.0.7	Trust: 1.0
vendor:	oracle	model:	insurance data foundation	scope:	eq	version:	8.0.6-8.1.0	Trust: 1.0
vendor:	oracle	model:	peoplesoft enterprise peopletools	scope:	eq	version:	8.56	Trust: 1.0
vendor:	oracle	model:	financial services basel regulatory capital basic	scope:	eq	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	financial services regulatory reporting for us federal reserve	scope:	lte	version:	8.0.9	Trust: 1.0
vendor:	oracle	model:	peoplesoft enterprise peopletools	scope:	eq	version:	8.57	Trust: 1.0
vendor:	opensuse	model:	leap	scope:	eq	version:	15.2	Trust: 1.0
vendor:	oracle	model:	communications services gatekeeper	scope:	eq	version:	7.0	Trust: 1.0
vendor:	oracle	model:	financial services data integration hub	scope:	eq	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	healthcare foundation	scope:	eq	version:	7.3.0	Trust: 1.0
vendor:	oracle	model:	insurance insbridge rating and underwriting	scope:	lte	version:	5.6.0.0	Trust: 1.0
vendor:	oracle	model:	hospitality simphony	scope:	eq	version:	18.2	Trust: 1.0
vendor:	oracle	model:	financial services data foundation	scope:	lte	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	policy automation for mobile devices	scope:	lte	version:	12.2.20	Trust: 1.0
vendor:	oracle	model:	storagetek acsls	scope:	eq	version:	8.5.1	Trust: 1.0
vendor:	netapp	model:	snap creator framework	scope:	eq	version:	-	Trust: 1.0
vendor:	oracle	model:	financial services basel regulatory capital internal ratings based approach	scope:	gte	version:	8.0.6	Trust: 1.0
vendor:	netapp	model:	h410c	scope:	eq	version:	-	Trust: 1.0
vendor:	oracle	model:	banking digital experience	scope:	eq	version:	18.1	Trust: 1.0
vendor:	oracle	model:	policy automation for mobile devices	scope:	gte	version:	12.2.0	Trust: 1.0
vendor:	jquery	model:	jquery	scope:	lt	version:	3.5.0	Trust: 1.0
vendor:	oracle	model:	financial services liquidity risk management	scope:	eq	version:	8.0.6	Trust: 1.0
vendor:	netapp	model:	oncommand insight	scope:	eq	version:	-	Trust: 1.0
vendor:	fedoraproject	model:	fedora	scope:	eq	version:	32	Trust: 1.0
vendor:	oracle	model:	financial services analytical applications infrastructure	scope:	lte	version:	8.1.0.0.0	Trust: 1.0
vendor:	netapp	model:	h500e	scope:	eq	version:	-	Trust: 1.0
vendor:	netapp	model:	h410s	scope:	eq	version:	-	Trust: 1.0
vendor:	tenable	model:	log correlation engine	scope:	lt	version:	6.0.9	Trust: 1.0
vendor:	oracle	model:	communications diameter signaling router idih\:	scope:	gte	version:	8.0.0	Trust: 1.0
vendor:	oracle	model:	healthcare foundation	scope:	eq	version:	7.1.1	Trust: 1.0
vendor:	oracle	model:	financial services data integration hub	scope:	eq	version:	8.0.7	Trust: 1.0
vendor:	oracle	model:	communications eagle application processor	scope:	lte	version:	16.4.0	Trust: 1.0
vendor:	oracle	model:	financial services asset liability management	scope:	eq	version:	8.0.6	Trust: 1.0
vendor:	oracle	model:	financial services regulatory reporting for us federal reserve	scope:	gte	version:	8.0.6	Trust: 1.0
vendor:	netapp	model:	max data	scope:	eq	version:	-	Trust: 1.0
vendor:	oracle	model:	financial services institutional performance analytics	scope:	eq	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	financial services regulatory reporting for european banking authority	scope:	gte	version:	8.0.6	Trust: 1.0
vendor:	oracle	model:	jdeveloper	scope:	eq	version:	11.1.1.9.0	Trust: 1.0
vendor:	oracle	model:	retail returns management	scope:	eq	version:	14.0	Trust: 1.0
vendor:	oracle	model:	financial services loan loss forecasting and provisioning	scope:	lte	version:	8.0.8	Trust: 1.0
vendor:	oracle	model:	agile product supplier collaboration for process	scope:	eq	version:	6.2.0.0	Trust: 1.0
vendor:	oracle	model:	financial services analytical applications infrastructure	scope:	lte	version:	8.1.0	Trust: 1.0
vendor:	oracle	model:	application testing suite	scope:	eq	version:	13.3.0.1	Trust: 1.0
vendor:	oracle	model:	retail back office	scope:	eq	version:	14.1	Trust: 1.0
vendor:	oracle	model:	hospitality simphony	scope:	gte	version:	19.1.0	Trust: 1.0
vendor:	oracle	model:	banking digital experience	scope:	eq	version:	19.1	Trust: 1.0
vendor:	oracle	model:	weblogic server	scope:	eq	version:	12.1.3.0.0	Trust: 1.0
vendor:	oracle	model:	communications webrtc session controller	scope:	eq	version:	7.2	Trust: 1.0
vendor:	oracle	model:	communications billing and revenue management	scope:	eq	version:	7.5.0.23.0	Trust: 1.0
vendor:	oracle	model:	financial services hedge management and ifrs valuations	scope:	lte	version:	8.0.8	Trust: 1.0
vendor:	oracle	model:	financial services institutional performance analytics	scope:	eq	version:	8.0.7	Trust: 1.0
vendor:	oracle	model:	financial services data integration hub	scope:	eq	version:	8.0.6	Trust: 1.0
vendor:	opensuse	model:	leap	scope:	eq	version:	15.1	Trust: 1.0
vendor:	netapp	model:	h700s	scope:	eq	version:	-	Trust: 1.0
vendor:	oracle	model:	financial services liquidity risk measurement and management	scope:	eq	version:	8.0.8	Trust: 1.0
vendor:	oracle	model:	retail customer management and segmentation foundation	scope:	eq	version:	19.0	Trust: 1.0
vendor:	netapp	model:	oncommand system manager	scope:	lte	version:	3.1.3	Trust: 1.0
vendor:	日立	model:	hitachi ops center common services	scope:	-	version:	-	Trust: 0.8
vendor:	jquery	model:	jquery	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2020-004854 // NVD: CVE-2020-11022

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2020-11022
value:	MEDIUM
Trust: 1.0
security-advisories@github.com:	CVE-2020-11022
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2020-11022
value:	MEDIUM
Trust: 0.8
VULHUB:	VHN-163559
value:	MEDIUM
Trust: 0.1
VULMON:	CVE-2020-11022
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2020-11022
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-163559
severity:	MEDIUM
baseScore:	4.3
vectorString:	AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2020-11022
baseSeverity:	MEDIUM
baseScore:	6.1
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	2.8
impactScore:	2.7
version:	3.1
Trust: 1.0
security-advisories@github.com:	CVE-2020-11022
baseSeverity:	MEDIUM
baseScore:	6.9
vectorString:	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N
attackVector:	NETWORK
attackComplexity:	HIGH
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	HIGH
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	1.6
impactScore:	4.7
version:	3.1
Trust: 1.0
NVD:	CVE-2020-11022
baseSeverity:	MEDIUM
baseScore:	6.1
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	REQUIRED
scope:	CHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-163559 // VULMON: CVE-2020-11022 // JVNDB: JVNDB-2020-004854 // NVD: CVE-2020-11022 // NVD: CVE-2020-11022

PROBLEMTYPE DATA

problemtype:	CWE-79	Trust: 1.1
problemtype:	Cross-site scripting (CWE-79) [NVD evaluation ]	Trust: 0.8

sources: VULHUB: VHN-163559 // JVNDB: JVNDB-2020-004854 // NVD: CVE-2020-11022

TYPE

code execution, xss

Trust: 0.3

sources: PACKETSTORM: 171211 // PACKETSTORM: 170819 // PACKETSTORM: 159513

PATCH

title:	hitachi-sec-2020-130	url:	https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77	Trust: 0.8
title:	Red Hat: Moderate: OpenShift Container Platform 3.11 security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20202217 - Security Advisory	Trust: 0.1
title:	Debian Security Advisories: DSA-4693-1 drupal7 -- security update	url:	https://vulmon.com/vendoradvisory?qidtp=debian_security_advisories&qid=978f239ce60a8a08c53eb64ba189d0f6	Trust: 0.1
title:	Red Hat: Moderate: Red Hat AMQ Interconnect 1.9.0 release and security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20204211 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: Red Hat Virtualization security, bug fix, and enhancement update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20203807 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: Red Hat OpenShift Service Mesh security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20202362 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: security update - Red Hat Ansible Tower 3.7.4-1 - RHEL7 Container	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20205249 - Security Advisory	Trust: 0.1
title:	Debian CVElist Bug Report Logs: wordpress: WordPress 5.9.2 security and maintenance release	url:	https://vulmon.com/vendoradvisory?qidtp=debian_cvelist_bugreportlogs&qid=e7014c0a68e8d9bc31a54125059176dc	Trust: 0.1
title:	Red Hat: Important: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20226393 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: ipa security, bug fix, and enhancement update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20203936 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: RHV Manager (ovirt-engine) 4.4 security, bug fix, and enhancement update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20203247 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20204670 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: Red Hat Single Sign-On 7.4.1 security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20202813 - Security Advisory	Trust: 0.1
title:	Tenable Security Advisories: [R1] Nessus 8.13.0 Fixes One Third-party Vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories&qid=TNS-2020-10	Trust: 0.1
title:	HP: SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBPI03688 rev. 1 - Certain HP Printer and MFP products - Cross-Site Scripting (XSS)	url:	https://vulmon.com/vendoradvisory?qidtp=hp_bulletin&qid=0c6e8f969487f201b1d56f59bd98f443	Trust: 0.1
title:	HP: SUPPORT COMMUNICATION- SECURITY BULLETIN HPSBPI03688 rev. 1 - Certain HP Printer and MFP products - Cross-Site Scripting (XSS)	url:	https://vulmon.com/vendoradvisory?qidtp=hp_bulletin&qid=e57a04f097f54c762da82263eadc1b8a	Trust: 0.1
title:	Red Hat: Moderate: pki-core:10.6 and pki-deps:10.6 security, bug fix, and enhancement update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20204847 - Security Advisory	Trust: 0.1
title:	Tenable Security Advisories: [R1] Nessus Network Monitor 5.13.0 Fixes One Third-party Vulnerability	url:	https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories&qid=TNS-2021-02	Trust: 0.1
title:	Red Hat: Important: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20230556 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: Red Hat JBoss Enterprise Application Platform 7.4.9 Security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20230554 - Security Advisory	Trust: 0.1
title:	Tenable Security Advisories: [R1] Tenable.sc 5.17.0 Fixes Multiple Vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories&qid=TNS-2020-11	Trust: 0.1
title:	Amazon Linux 2: ALAS2-2020-1519	url:	https://vulmon.com/vendoradvisory?qidtp=amazon_linux2&qid=ALAS2-2020-1519	Trust: 0.1
title:	Hitachi Security Advisories: Multiple Vulnerabilities in Hitachi Ops Center Common Services	url:	https://vulmon.com/vendoradvisory?qidtp=hitachi_security_advisories&qid=hitachi-sec-2020-130	Trust: 0.1
title:	Tenable Security Advisories: [R1] LCE 6.0.9 Fixes Multiple Third-party Vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=tenable_security_advisories&qid=TNS-2021-10	Trust: 0.1
title:	Red Hat: Important: Red Hat Single Sign-On 7.6.2 security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20231049 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: Red Hat Single Sign-On 7.6.2 security update on RHEL 9	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20231045 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: Red Hat Single Sign-On 7.6.2 security update on RHEL 7	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20231043 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: Red Hat Single Sign-On 7.6.2 security update on RHEL 8	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20231044 - Security Advisory	Trust: 0.1
title:	Red Hat: Important: Red Hat Single Sign-On 7.6.2 for OpenShift image security and enhancement update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20231047 - Security Advisory	Trust: 0.1
title:	Red Hat: Moderate: OpenShift Container Platform 4.6.1 image security update	url:	https://vulmon.com/vendoradvisory?qidtp=red_hat_security_advisories&qid=RHSA-20204298 - Security Advisory	Trust: 0.1
title:	Geolocation Playground	url:	https://github.com/blaufish/geo	Trust: 0.1
title:	https-nj.gov---CVE-2020-11022 RECOMMENDATION REFERENCES	url:	https://github.com/Snorlyd/https-nj.gov---CVE-2020-11022	Trust: 0.1
title:	https-nj.gov---CVE-2020-11022 RECOMMENDATION REFERENCES	url:	https://github.com/korestreet/https-nj.gov---CVE-2020-11022	Trust: 0.1
title:	AlmostSignificant	url:	https://github.com/bartongroup/AlmostSignificant	Trust: 0.1
title:	Bagel Patch Website TO DO:	url:	https://github.com/corey-schneider/bagel-shop	Trust: 0.1
title:	JS_Encoder	url:	https://github.com/AssassinUKG/JS_Encoder	Trust: 0.1
title:	XSSPlayground What is XSS?	url:	https://github.com/AssassinUKG/XSSPlayground	Trust: 0.1
title:	jQuery XSS	url:	https://github.com/EmptyHeart5292/jQuery-XSS	Trust: 0.1
title:	https://github.com/DanielRuf/snyk-js-jquery-565129	url:	https://github.com/DanielRuf/snyk-js-jquery-565129	Trust: 0.1
title:	CVE-2020-11022 CVE-2020-11023	url:	https://github.com/0xAJ2K/CVE-2020-11022-CVE-2020-11023	Trust: 0.1
title:	Strings_Attached User Experience Development Process Testing Bugs Libraries and Programs Used Deployment Credits Acknowledgements	url:	https://github.com/johnrearden/strings_attached	Trust: 0.1
title:	CVEcrystalyer	url:	https://github.com/captcha-n00b/CVEcrystalyer	Trust: 0.1
title:	CVE Sandbox :: jQuery	url:	https://github.com/cve-sandbox/jquery	Trust: 0.1
title:	jQuery — New Wave JavaScript	url:	https://github.com/spurreiter/jquery	Trust: 0.1
title:	Github Repository Security Alerts	url:	https://github.com/elifesciences/github-repo-security-alerts	Trust: 0.1
title:	Case Study	url:	https://github.com/faizhaffizudin/Case-Study-Hamsa	Trust: 0.1
title:	Retire HTML Parser	url:	https://github.com/marksowell/retire-html-parser	Trust: 0.1
title:	https://github.com/octane23/CASE-STUDY-1	url:	https://github.com/octane23/CASE-STUDY-1	Trust: 0.1
title:	Awesome-POC	url:	https://github.com/ArrestX/--POC	Trust: 0.1
title:	Normal-POC	url:	https://github.com/Miraitowa70/POC-Notes	Trust: 0.1
title:	Normal-POC	url:	https://github.com/Miraitowa70/Pentest-Notes	Trust: 0.1
title:	Vulnerability	url:	https://github.com/tzwlhack/Vulnerability	Trust: 0.1
title:	Awesome-POC	url:	https://github.com/KayCHENvip/vulnerability-poc	Trust: 0.1
title:	Awesome-POC	url:	https://github.com/Threekiii/Awesome-POC	Trust: 0.1
title:	欢迎关注阿尔法实验室微信公众号	url:	https://github.com/alphaSeclab/sec-daily-2020	Trust: 0.1
title:	SecBooks SecBooks目录	url:	https://github.com/SexyBeast233/SecBooks	Trust: 0.1
title:	PoC in GitHub	url:	https://github.com/soosmile/POC	Trust: 0.1

sources: VULMON: CVE-2020-11022 // JVNDB: JVNDB-2020-004854

EXTERNAL IDS

db:	NVD	id:	CVE-2020-11022	Trust: 3.3
db:	PACKETSTORM	id:	162159	Trust: 1.2
db:	TENABLE	id:	TNS-2021-02	Trust: 1.2
db:	TENABLE	id:	TNS-2020-10	Trust: 1.2
db:	TENABLE	id:	TNS-2020-11	Trust: 1.2
db:	TENABLE	id:	TNS-2021-10	Trust: 1.2
db:	ICS CERT	id:	ICSA-22-055-02	Trust: 0.9
db:	JVN	id:	JVNVU99843134	Trust: 0.8
db:	JVN	id:	JVNVU94912830	Trust: 0.8
db:	JVN	id:	JVNVU94847990	Trust: 0.8
db:	JVN	id:	JVNVU94973485	Trust: 0.8
db:	ICS CERT	id:	ICSA-25-182-07	Trust: 0.8
db:	ICS CERT	id:	ICSA-22-342-02	Trust: 0.8
db:	ICS CERT	id:	ICSA-22-097-01	Trust: 0.8
db:	CERT@VDE	id:	VDE-2021-027	Trust: 0.8
db:	JVNDB	id:	JVNDB-2020-004854	Trust: 0.8
db:	PACKETSTORM	id:	159852	Trust: 0.2
db:	PACKETSTORM	id:	170819	Trust: 0.2
db:	PACKETSTORM	id:	159513	Trust: 0.2
db:	PACKETSTORM	id:	171213	Trust: 0.1
db:	PACKETSTORM	id:	170823	Trust: 0.1
db:	PACKETSTORM	id:	171214	Trust: 0.1
db:	PACKETSTORM	id:	171212	Trust: 0.1
db:	PACKETSTORM	id:	171215	Trust: 0.1
db:	PACKETSTORM	id:	160274	Trust: 0.1
db:	PACKETSTORM	id:	170821	Trust: 0.1
db:	PACKETSTORM	id:	159876	Trust: 0.1
db:	PACKETSTORM	id:	159275	Trust: 0.1
db:	PACKETSTORM	id:	159353	Trust: 0.1
db:	PACKETSTORM	id:	161727	Trust: 0.1
db:	PACKETSTORM	id:	168304	Trust: 0.1
db:	PACKETSTORM	id:	170817	Trust: 0.1
db:	PACKETSTORM	id:	158750	Trust: 0.1
db:	PACKETSTORM	id:	157850	Trust: 0.1
db:	PACKETSTORM	id:	158555	Trust: 0.1
db:	CNNVD	id:	CNNVD-202004-2429	Trust: 0.1
db:	VULHUB	id:	VHN-163559	Trust: 0.1
db:	VULMON	id:	CVE-2020-11022	Trust: 0.1
db:	PACKETSTORM	id:	171211	Trust: 0.1
db:	PACKETSTORM	id:	157905	Trust: 0.1

sources: VULHUB: VHN-163559 // VULMON: CVE-2020-11022 // PACKETSTORM: 159852 // PACKETSTORM: 171211 // PACKETSTORM: 170819 // PACKETSTORM: 159513 // PACKETSTORM: 157905 // JVNDB: JVNDB-2020-004854 // NVD: CVE-2020-11022

REFERENCES

url:	https://www.debian.org/security/2020/dsa-4693	Trust: 1.3
url:	https://nvd.nist.gov/vuln/detail/cve-2020-11022	Trust: 1.3
url:	https://github.com/jquery/jquery/security/advisories/ghsa-gxr4-xjj5-5px2	Trust: 1.2
url:	https://security.netapp.com/advisory/ntap-20200511-0006/	Trust: 1.2
url:	https://www.drupal.org/sa-core-2020-002	Trust: 1.2
url:	https://www.tenable.com/security/tns-2020-10	Trust: 1.2
url:	https://www.tenable.com/security/tns-2020-11	Trust: 1.2
url:	https://www.tenable.com/security/tns-2021-02	Trust: 1.2
url:	https://www.tenable.com/security/tns-2021-10	Trust: 1.2
url:	https://security.gentoo.org/glsa/202007-03	Trust: 1.2
url:	http://packetstormsecurity.com/files/162159/jquery-1.2-cross-site-scripting.html	Trust: 1.2
url:	https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/	Trust: 1.2
url:	https://github.com/jquery/jquery/commit/1d61fd9407e6fbe82fe55cb0b938307aa0791f77	Trust: 1.2
url:	https://jquery.com/upgrade-guide/3.5/	Trust: 1.2
url:	https://www.oracle.com//security-alerts/cpujul2021.html	Trust: 1.2
url:	https://www.oracle.com/security-alerts/cpuapr2021.html	Trust: 1.2
url:	https://www.oracle.com/security-alerts/cpuapr2022.html	Trust: 1.2
url:	https://www.oracle.com/security-alerts/cpujan2021.html	Trust: 1.2
url:	https://www.oracle.com/security-alerts/cpujan2022.html	Trust: 1.2
url:	https://www.oracle.com/security-alerts/cpujul2020.html	Trust: 1.2
url:	https://www.oracle.com/security-alerts/cpujul2022.html	Trust: 1.2
url:	https://www.oracle.com/security-alerts/cpuoct2020.html	Trust: 1.2
url:	https://www.oracle.com/security-alerts/cpuoct2021.html	Trust: 1.2
url:	https://lists.debian.org/debian-lts-announce/2021/03/msg00033.html	Trust: 1.2
url:	http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00067.html	Trust: 1.2
url:	http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00085.html	Trust: 1.2
url:	http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00039.html	Trust: 1.2
url:	https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html	Trust: 1.1
url:	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/voe7p7apprqkd4fgnhbkjpdy6ffcoh3w/	Trust: 1.1
url:	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/qpn2l2xvqgua2v5hnqjwhk3apsk3vn7k/	Trust: 1.1
url:	https://lists.apache.org/thread.html/rdf44341677cf7eec7e9aa96dcf3f37ed709544863d619cca8c36f133%40%3ccommits.airflow.apache.org%3e	Trust: 1.1
url:	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/sfp4uk4egp4afh2mwyj5a5z4i7xvfq6b/	Trust: 1.1
url:	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/avkyxlwclzbv2n7m46kyk4lva5oxwpby/	Trust: 1.1
url:	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/sapqvx3xdnpgft26qaq6ajixzzbz4cd4/	Trust: 1.1
url:	https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d%40%3cissues.flink.apache.org%3e	Trust: 1.1
url:	https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67%40%3cdev.flink.apache.org%3e	Trust: 1.1
url:	https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48%40%3cissues.flink.apache.org%3e	Trust: 1.1
url:	https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c%40%3cissues.flink.apache.org%3e	Trust: 1.1
url:	https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760%40%3cissues.flink.apache.org%3e	Trust: 1.1
url:	https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2%40%3cissues.flink.apache.org%3e	Trust: 1.1
url:	https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4%40%3cissues.flink.apache.org%3e	Trust: 1.1
url:	https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae%40%3cissues.flink.apache.org%3e	Trust: 1.1
url:	https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108%40%3cissues.flink.apache.org%3e	Trust: 1.1
url:	https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36%40%3cissues.flink.apache.org%3e	Trust: 1.1
url:	https://www.cisa.gov/uscert/ics/advisories/icsa-22-055-02	Trust: 0.9
url:	https://jvn.jp/vu/jvnvu94912830/	Trust: 0.8
url:	http://jvn.jp/vu/jvnvu94847990/index.html	Trust: 0.8
url:	https://jvn.jp/vu/jvnvu99843134/index.html	Trust: 0.8
url:	https://jvn.jp/vu/jvnvu94973485/index.html	Trust: 0.8
url:	https://www.cisa.gov/uscert/ics/advisories/icsa-22-097-01	Trust: 0.8
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-22-342-02	Trust: 0.8
url:	https://www.cisa.gov/news-events/ics-advisories/icsa-25-182-07	Trust: 0.8
url:	https://cert.vde.com/en/advisories/vde-2021-027/	Trust: 0.8
url:	https://access.redhat.com/articles/11258	Trust: 0.5
url:	https://access.redhat.com/security/team/contact/	Trust: 0.5
url:	https://bugzilla.redhat.com/):	Trust: 0.5
url:	https://access.redhat.com/security/cve/cve-2020-11022	Trust: 0.5
url:	https://access.redhat.com/security/team/key/	Trust: 0.5
url:	https://nvd.nist.gov/vuln/detail/cve-2020-11023	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2020-11023	Trust: 0.4
url:	https://access.redhat.com/security/cve/cve-2018-14042	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2018-14040	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2018-14042	Trust: 0.3
url:	https://www.redhat.com/mailman/listinfo/rhsa-announce	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2019-11358	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2019-11358	Trust: 0.3
url:	https://access.redhat.com/security/updates/classification/#moderate	Trust: 0.3
url:	https://nvd.nist.gov/vuln/detail/cve-2018-14040	Trust: 0.3
url:	https://access.redhat.com/security/cve/cve-2015-9251	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2019-8331	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2016-10735	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2015-9251	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2016-10735	Trust: 0.2
url:	https://nvd.nist.gov/vuln/detail/cve-2019-8331	Trust: 0.2
url:	https://listman.redhat.com/mailman/listinfo/rhsa-announce	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-40150	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-40149	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-45047	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-46364	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-42004	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-45693	Trust: 0.2
url:	https://access.redhat.com/security/cve/cve-2022-42003	Trust: 0.2
url:	https://access.redhat.com/security/updates/classification/#important	Trust: 0.2
url:	https://issues.jboss.org/):	Trust: 0.2
url:	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/avkyxlwclzbv2n7m46kyk4lva5oxwpby/	Trust: 0.1
url:	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/voe7p7apprqkd4fgnhbkjpdy6ffcoh3w/	Trust: 0.1
url:	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/qpn2l2xvqgua2v5hnqjwhk3apsk3vn7k/	Trust: 0.1
url:	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/sfp4uk4egp4afh2mwyj5a5z4i7xvfq6b/	Trust: 0.1
url:	https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/sapqvx3xdnpgft26qaq6ajixzzbz4cd4/	Trust: 0.1
url:	https://lists.apache.org/thread.html/rdf44341677cf7eec7e9aa96dcf3f37ed709544863d619cca8c36f133@%3ccommits.airflow.apache.org%3e	Trust: 0.1
url:	https://lists.apache.org/thread.html/rbb448222ba62c430e21e13f940be4cb5cfc373cd3bce56b48c0ffa67@%3cdev.flink.apache.org%3e	Trust: 0.1
url:	https://lists.apache.org/thread.html/r706cfbc098420f7113968cc377247ec3d1439bce42e679c11c609e2d@%3cissues.flink.apache.org%3e	Trust: 0.1
url:	https://lists.apache.org/thread.html/r49ce4243b4738dd763caeb27fa8ad6afb426ae3e8c011ff00b8b1f48@%3cissues.flink.apache.org%3e	Trust: 0.1
url:	https://lists.apache.org/thread.html/r564585d97bc069137e64f521e68ba490c7c9c5b342df5d73c49a0760@%3cissues.flink.apache.org%3e	Trust: 0.1
url:	https://lists.apache.org/thread.html/r8f70b0f65d6bedf316ecd899371fd89e65333bc988f6326d2956735c@%3cissues.flink.apache.org%3e	Trust: 0.1
url:	https://lists.apache.org/thread.html/rede9cfaa756e050a3d83045008f84a62802fc68c17f2b4eabeaae5e4@%3cissues.flink.apache.org%3e	Trust: 0.1
url:	https://lists.apache.org/thread.html/ree3bd8ddb23df5fa4e372d11c226830ea3650056b1059f3965b3fce2@%3cissues.flink.apache.org%3e	Trust: 0.1
url:	https://lists.apache.org/thread.html/r54565a8f025c7c4f305355fdfd75b68eca442eebdb5f31c2e7d977ae@%3cissues.flink.apache.org%3e	Trust: 0.1
url:	https://lists.apache.org/thread.html/re4ae96fa5c1a2fe71ccbb7b7ac1538bd0cb677be270a2bf6e2f8d108@%3cissues.flink.apache.org%3e	Trust: 0.1
url:	https://lists.apache.org/thread.html/r0483ba0072783c2e1bfea613984bfb3c86e73ba8879d780dc1cc7d36@%3cissues.flink.apache.org%3e	Trust: 0.1
url:	https://cwe.mitre.org/data/definitions/79.html	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2020:2217	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://github.com/blaufish/geo	Trust: 0.1
url:	https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-1721	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2019-10146	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-10221	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-1721	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-15720	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-15720	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-10146	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2019-10179	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-10179	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2019-10221	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2020:4847	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-38750	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-1471	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-1438	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-3916	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-31129	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-25857	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-46175	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-35065	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2021-44906	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-44906	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2023-0091	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-24785	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-3782	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-2764	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-2764	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-4137	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-46363	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-1471	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2023:1044	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2023-0264	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-38751	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-1274	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-37603	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-38749	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-31129	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2021-35065	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-1438	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-25857	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-24785	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-1274	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2023:0554	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-3143	Trust: 0.1
url:	https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/	Trust: 0.1
url:	https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2018-14041	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-40150	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2017-18214	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-40152	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2022-40149	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-40152	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2018-14041	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2017-18214	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2022-3143	Trust: 0.1
url:	https://access.redhat.com/documentation/en-us/red_hat_amq/	Trust: 0.1
url:	https://access.redhat.com/jbossnetwork/restricted/listsoftware.html?product=jboss.amq.interconnect&downloadtype=distributions&version=1.9.0	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-7656	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2020:4211	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-7656	Trust: 0.1
url:	https://access.redhat.com/errata/rhsa-2020:2362	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2019-10744	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-12459	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-7598	Trust: 0.1
url:	https://access.redhat.com/security/cve/cve-2020-12459	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2019-10744	Trust: 0.1
url:	https://nvd.nist.gov/vuln/detail/cve-2020-7598	Trust: 0.1

CREDITS

Red Hat

Trust: 0.5

sources: PACKETSTORM: 159852 // PACKETSTORM: 171211 // PACKETSTORM: 170819 // PACKETSTORM: 159513 // PACKETSTORM: 157905

SOURCES

db:	VULHUB	id:	VHN-163559
db:	VULMON	id:	CVE-2020-11022
db:	PACKETSTORM	id:	159852
db:	PACKETSTORM	id:	171211
db:	PACKETSTORM	id:	170819
db:	PACKETSTORM	id:	159513
db:	PACKETSTORM	id:	157905
db:	JVNDB	id:	JVNDB-2020-004854
db:	NVD	id:	CVE-2020-11022

LAST UPDATE DATE

2026-02-08T20:30:59.777000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-163559	date:	2022-07-25T00:00:00
db:	VULMON	id:	CVE-2020-11022	date:	2023-11-07T00:00:00
db:	JVNDB	id:	JVNDB-2020-004854	date:	2025-07-03T06:01:00
db:	NVD	id:	CVE-2020-11022	date:	2024-11-21T04:56:36.110

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-163559	date:	2020-04-29T00:00:00
db:	VULMON	id:	CVE-2020-11022	date:	2020-04-29T00:00:00
db:	PACKETSTORM	id:	159852	date:	2020-11-04T15:29:15
db:	PACKETSTORM	id:	171211	date:	2023-03-02T15:19:02
db:	PACKETSTORM	id:	170819	date:	2023-01-31T17:19:24
db:	PACKETSTORM	id:	159513	date:	2020-10-08T16:49:58
db:	PACKETSTORM	id:	157905	date:	2020-06-02T22:47:18
db:	JVNDB	id:	JVNDB-2020-004854	date:	2020-05-29T00:00:00
db:	NVD	id:	CVE-2020-11022	date:	2020-04-29T22:15:11.903