CVE:CVE-2015-9251
CNNVD:CNNVD-201801-798
jQuery是美国John Resig个人开发者的一套开源、跨浏览器的JavaScript库。该库简化了HTML与JavaScript之间的操作，并具有模块化、插件扩展等特点。
jQuery 3.0.0之前版本中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade jquery jquery to a higher version than 3.0.0,and avoid the version (,3.0.0); Upgrade oracle agile_product_lifecycle_management_for_process to a higher version than 6.2.0.0,6.2.1.0,6.2.2.0,6.2.3.0,6.2.3.1,and avoid the version 6.2.0.0,6.2.1.0,6.2.2.0,6.2.3.0,6.2.3.1; Upgrade oracle banking_platform to a higher version than 2.6.0,2.6.1,2.6.2,and avoid the version 2.6.0,2.6.1,2.6.2; Upgrade oracle business_process_management_suite to a higher version than 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0,and avoid the version 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0; Upgrade oracle communications_converged_application_server to a higher version than 7.0.0.1,and avoid the version (,7.0.0.1); Upgrade oracle communications_interactive_session_recorder to a higher version than 6.0,6.1,6.2,and avoid the version 6.0,6.1,6.2; Upgrade oracle communications_services_gatekeeper to a higher version than 6.1.0.4.0,and avoid the version (,6.1.0.4.0); Upgrade oracle communications_webrtc_session_controller to a higher version than 7.2,and avoid the version (,7.2); Upgrade oracle endeca_information_discovery_studio to a higher version than 3.1.0,3.2.0,and avoid the version 3.1.0,3.2.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.2.2,12.3.3,and avoid the version 12.2.2,12.3.3; Upgrade oracle enterprise_operations_monitor to a higher version than 3.4,4.0,and avoid the version 3.4,4.0; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 7.3.5,8.0.7,and avoid the version [7.3.3,7.3.5],[8.0.0,8.0.7]; Upgrade oracle financial_services_asset_liability_management to a higher version than 8.0.7,and avoid the version [8.0.4,8.0.7]; Upgrade oracle financial_services_data_integration_hub to a higher version than 8.0.7,and avoid the version [8.0.5,8.0.7]; Upgrade oracle financial_services_funds_transfer_pricing to a higher version than 8.0.7,and avoid the version [8.0.4,8.0.7]; Upgrade oracle financial_services_hedge_management_and_ifrs_valuations to a higher version than 8.0.7,and avoid the version [8.0.4,8.0.7]; Upgrade oracle financial_services_liquidity_risk_management to a higher version than 8.0.6,and avoid the version [8.0.2,8.0.6]; Upgrade oracle financial_services_loan_loss_forecasting_and_provisioning to a higher version than 8.0.7,and avoid the version [8.0.2,8.0.7]; Upgrade oracle financial_services_market_risk_measurement_and_management to a higher version than 8.0.5,8.0.6,and avoid the version 8.0.5,8.0.6; Upgrade oracle financial_services_profitability_management to a higher version than 8.0.6,and avoid the version [8.0.4,8.0.6]; Upgrade oracle financial_services_reconciliation_framework to a higher version than 8.0.5,8.0.6,and avoid the version 8.0.5,8.0.6; Upgrade oracle fusion_middleware_mapviewer to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0; Upgrade oracle healthcare_foundation to a higher version than 7.1,7.2,and avoid the version 7.1,7.2; Upgrade oracle healthcare_translational_research to a higher version than 3.1.0,and avoid the version 3.1.0; Upgrade oracle hospitality_cruise_fleet_management to a higher version than 9.0.11,and avoid the version 9.0.11; Upgrade oracle hospitality_guest_access to a higher version than 4.2.0,4.2.1,and avoid the version 4.2.0,4.2.1; Upgrade oracle hospitality_materials_control to a higher version than 18.1,and avoid the version 18.1; Upgrade oracle hospitality_reporting_and_analytics to a higher version than 9.1.0,and avoid the version 9.1.0; Upgrade oracle insurance_insbridge_rating_and_underwriting to a higher version than 5.2,5.4,5.5,and avoid the version 5.2,5.4,5.5; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle jdeveloper to a higher version than 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0,and avoid the version 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0; Upgrade oracle oss_support_tools to a higher version than 19.1,and avoid the version 19.1; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.55,8.56,8.57,and avoid the version 8.55,8.56,8.57; Upgrade oracle primavera_gateway to a higher version than 15.2,16.2,17.12,and avoid the version 15.2,16.2,17.12; Upgrade oracle primavera_unifier to a higher version than 17.12,16.1,16.2,18.8,and avoid the version [17.1,17.12],16.1,16.2,18.8; Upgrade oracle real-time_scheduler to a higher version than 2.3.0,and avoid the version 2.3.0; Upgrade oracle retail_allocation to a higher version than 15.0.2,and avoid the version 15.0.2; Upgrade oracle retail_customer_insights to a higher version than 15.0,16.0,and avoid the version 15.0,16.0; Upgrade oracle retail_invoice_matching to a higher version than 15.0,and avoid the version 15.0; Upgrade oracle retail_sales_audit to a higher version than 15.0,and avoid the version 15.0; Upgrade oracle retail_workforce_management_software to a higher version than 1.60.9,1.64.0,and avoid the version 1.60.9,1.64.0; Upgrade oracle service_bus to a higher version than 12.1.3.0.0,12.2.1.3.0,and avoid the version 12.1.3.0.0,12.2.1.3.0; Upgrade oracle siebel_ui_framework to a higher version than 18.10,18.11,and avoid the version 18.10,18.11; Upgrade oracle utilities_framework to a higher version than 4.3.0.4,and avoid the version [4.3.0.1,4.3.0.4]; Upgrade oracle utilities_mobile_workforce_management to a higher version than 2.3.0,and avoid the version 2.3.0; Upgrade oracle webcenter_sites to a higher version than 11.1.1.8.0,and avoid the version 11.1.1.8.0; Upgrade oracle weblogic_server to a higher version than 12.1.3.0,12.2.1.3,and avoid the version 12.1.3.0,12.2.1.3