CVE:CVE-2020-11023
CNNVD:CNNVD-202004-2420
jQuery是美国John Resig个人开发者的一套开源、跨浏览器的JavaScript库。该库简化了HTML与JavaScript之间的操作，并具有模块化、插件扩展等特点。
jQuery 1.0.3版本至3.5.0之前版本中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade jquery jquery to a higher version than 3.5.0,and avoid the version [1.0.3,3.5.0); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade fedoraproject fedora to a higher version than 31,32,33,and avoid the version 31,32,33; Upgrade drupal drupal to a higher version than 7.70,8.7.14,8.8.6,and avoid the version [7.0,7.70),[8.7.0,8.7.14),[8.8.0,8.8.6); Upgrade oracle application_express to a higher version than 20.2,and avoid the version (,20.2); Upgrade oracle application_testing_suite to a higher version than 13.3.0.1,and avoid the version 13.3.0.1; Upgrade oracle banking_enterprise_collections to a higher version than 2.8.0,and avoid the version [2.7.0,2.8.0]; Upgrade oracle banking_platform to a higher version than 2.10.0,and avoid the version [2.4.0,2.10.0]; Upgrade oracle business_intelligence to a higher version than 5.9.0.0.0,and avoid the version 5.9.0.0.0; Upgrade oracle communications_analytics to a higher version than 12.1.1,and avoid the version 12.1.1; Upgrade oracle communications_eagle_application_processor to a higher version than 16.4.0,and avoid the version [16.1.0,16.4.0]; Upgrade oracle communications_element_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle communications_interactive_session_recorder to a higher version than 6.4,and avoid the version [6.1,6.4]; Upgrade oracle communications_operations_monitor to a higher version than 4.3,3.4,and avoid the version [4.1,4.3],3.4; Upgrade oracle communications_services_gatekeeper to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle communications_session_report_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle communications_session_route_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle financial_services_regulatory_reporting_for_de_nederlandsche_bank to a higher version than 8.0.4,and avoid the version 8.0.4; Upgrade oracle financial_services_revenue_management_and_billing_analytics to a higher version than 2.7,2.8,and avoid the version 2.7,2.8; Upgrade oracle health_sciences_inform to a higher version than 6.3.0,and avoid the version 6.3.0; Upgrade oracle healthcare_translational_research to a higher version than 3.2.1,3.3.1,3.3.2,3.4.0,and avoid the version 3.2.1,3.3.1,3.3.2,3.4.0; Upgrade oracle hyperion_financial_reporting to a higher version than 11.1.2.4,and avoid the version 11.1.2.4; Upgrade oracle jd_edwards_enterpriseone_orchestrator to a higher version than 9.2.5.0,and avoid the version (,9.2.5.0); Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2.5.0,and avoid the version (,9.2.5.0); Upgrade oracle oss_support_tools to a higher version than 2.12.41,and avoid the version (,2.12.41); Upgrade oracle peoplesoft_enterprise_human_capital_management_resources to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle primavera_gateway to a higher version than 16.2.11,17.12.7,18.8.9,19.12.4,and avoid the version [16.2,16.2.11],[17.12.0,17.12.7],[18.8.0,18.8.9],[19.12.0,19.12.4]; Upgrade oracle rest_data_services to a higher version than 11.2.0.4,12.1.0.2,12.2.0.1,18c,19c,and avoid the version 11.2.0.4,12.1.0.2,12.2.0.1,18c,19c; Upgrade oracle siebel_mobile to a higher version than 20.12,and avoid the version (,20.12]; Upgrade oracle storagetek_acsls to a higher version than 8.5.1,and avoid the version 8.5.1; Upgrade oracle storagetek_tape_analytics_sw_tool to a higher version than 2.3.1,and avoid the version 2.3.1; Upgrade oracle webcenter_sites to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle weblogic_server to a higher version than 12.1.3.0.0,12.2.1.3.0,12.2.1.4.0,14.1.1.0.0,and avoid the version 12.1.3.0.0,12.2.1.3.0,12.2.1.4.0,14.1.1.0.0; Upgrade netapp h300s_firmware to a higher version than -; Upgrade netapp h500s_firmware to a higher version than -; Upgrade netapp h700s_firmware to a higher version than -; Upgrade netapp h300e_firmware to a higher version than -; Upgrade netapp h500e_firmware to a higher version than -; Upgrade netapp h700e_firmware to a higher version than -; Upgrade netapp h410s_firmware to a higher version than -; Upgrade netapp h410c_firmware to a higher version than -; Upgrade netapp max_data to a higher version than -; Upgrade netapp oncommand_insight to a higher version than -; Upgrade netapp oncommand_system_manager to a higher version than 3.1.3,and avoid the version [3.0,3.1.3]; Upgrade netapp snap_creator_framework to a higher version than -; Upgrade netapp snapcenter_server to a higher version than -; Upgrade tenable log_correlation_engine to a higher version than 6.0.9,and avoid the version (,6.0.9)