CVE:CVE-2016-7103
CNNVD:CNNVD-201703-646
jQuery是美国John Resig个人开发者的一套开源、跨浏览器的JavaScript库。该库简化了HTML与JavaScript之间的操作，并具有模块化、插件扩展等特点。
jQuery UI 1.12.0之前的版本中存在跨站脚本漏洞。远程攻击者可借助‘dialog’函数中的‘closeText’参数利用该漏洞注入任意的Web脚本或HTML。
solution:Upgrade jqueryui jquery_ui to a higher version than 1.11.4,and avoid the version [1.10.0,1.11.4]; Upgrade oracle application_express to a higher version than 19.1,and avoid the version (,19.1); Upgrade oracle business_intelligence to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle hospitality_cruise_fleet_management to a higher version than 9.0.11,and avoid the version 9.0.11; Upgrade oracle oss_support_tools to a higher version than 2.12.42,2.12.42,and avoid the version (,2.12.42),2.12.42; Upgrade oracle primavera_unifier to a higher version than 16.2,17.12.4,18.8.4,and avoid the version [16.0,16.2],[17.0,17.12.4],[18.0,18.8.4]; Upgrade oracle siebel_ui_framework to a higher version than 21.2,and avoid the version (,21.2]; Upgrade oracle weblogic_server to a higher version than 10.3.6.0.0,12.1.3.0.0,12.2.1.3.0,and avoid the version 10.3.6.0.0,12.1.3.0.0,12.2.1.3.0; Upgrade fedoraproject fedora to a higher version than 30,35,36,and avoid the version 30,35,36; Upgrade netapp snapcenter to a higher version than -; Upgrade redhat openstack to a higher version than 7.0,8,9,and avoid the version 7.0,8,9; Upgrade juniper junos to a higher version than 21.2,and avoid the version 21.2; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0