CVE:CVE-2019-11358
CNNVD:CNNVD-201904-948
jQuery是美国John Resig个人开发者的一套开源、跨浏览器的JavaScript库。该库简化了HTML与JavaScript之间的操作，并具有模块化、插件扩展等特点。
jQuery 3.4.0之前版本中存在跨站脚本漏洞，该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade jquery jquery to a higher version than 3.4.0,and avoid the version (,3.4.0); Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0; Upgrade drupal drupal to a higher version than 7.66,8.5.15,8.6.15,and avoid the version [7.0,7.66),[8.5.0,8.5.15),[8.6.0,8.6.15); Upgrade backdropcms backdrop to a higher version than 1.11.9,1.12.6,and avoid the version [1.11.0,1.11.9),[1.12.0,1.12.6); Upgrade fedoraproject fedora to a higher version than 28,29,30,and avoid the version 28,29,30; Upgrade opensuse backports_sle to a higher version than 15.0:sp1,and avoid the version 15.0:sp1; Upgrade opensuse leap to a higher version than 15.1,and avoid the version 15.1; Upgrade netapp oncommand_system_manager to a higher version than 3.1.3,and avoid the version [3.0,3.1.3]; Upgrade netapp snapcenter to a higher version than -; Upgrade redhat cloudforms to a higher version than 4.7,and avoid the version 4.7; Upgrade redhat virtualization_manager to a higher version than 4.3,and avoid the version 4.3; Upgrade oracle agile_product_lifecycle_management_for_process to a higher version than 6.1,6.2.0.0,6.2.1.0,6.2.2.0,6.2.3.0,and avoid the version 6.1,6.2.0.0,6.2.1.0,6.2.2.0,6.2.3.0; Upgrade oracle application_express to a higher version than 19.1,and avoid the version (,19.1); Upgrade oracle application_service_level_management to a higher version than 13.2.0.0,13.3.0.0,and avoid the version 13.2.0.0,13.3.0.0; Upgrade oracle application_testing_suite to a higher version than 12.5.0.3,13.1.0.1,13.2,13.2.0.1,13.3,13.3.0.1,and avoid the version 12.5.0.3,13.1.0.1,13.2,13.2.0.1,13.3,13.3.0.1; Upgrade oracle banking_digital_experience to a higher version than 18.1,18.2,18.3,19.1,19.2,20.1,and avoid the version 18.1,18.2,18.3,19.1,19.2,20.1; Upgrade oracle banking_enterprise_collections to a higher version than 2.8.0,and avoid the version [2.7.0,2.8.0]; Upgrade oracle banking_platform to a higher version than 2.10.0,and avoid the version [2.4.0,2.10.0]; Upgrade oracle bi_publisher to a higher version than 5.5.0.0.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 5.5.0.0.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle big_data_discovery to a higher version than 1.6,and avoid the version 1.6; Upgrade oracle business_process_management_suite to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle communications_analytics to a higher version than 12.1.1,and avoid the version 12.1.1; Upgrade oracle communications_application_session_controller to a higher version than 3.8m0,and avoid the version 3.8m0; Upgrade oracle communications_billing_and_revenue_management to a higher version than 7.5,7.5.0.23.0,12.0,12.0.0.3.0,and avoid the version 7.5,7.5.0.23.0,12.0,12.0.0.3.0; Upgrade oracle communications_diameter_signaling_router to a higher version than 8.0.0,8.1,8.2,8.2.1,and avoid the version 8.0.0,8.1,8.2,8.2.1; Upgrade oracle communications_eagle_application_processor to a higher version than 16.4.0,and avoid the version [16.1.0,16.4.0]; Upgrade oracle communications_element_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle communications_interactive_session_recorder to a higher version than 6.4,and avoid the version [6.0,6.4]; Upgrade oracle communications_operations_monitor to a higher version than 4.3,3.4,4.0,4.1.0,and avoid the version [4.1,4.3],3.4,4.0,4.1.0; Upgrade oracle communications_services_gatekeeper to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle communications_session_report_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle communications_session_route_manager to a higher version than 8.1.1,8.2.0,8.2.1,and avoid the version 8.1.1,8.2.0,8.2.1; Upgrade oracle communications_unified_inventory_management to a higher version than 7.3,7.4.0,and avoid the version 7.3,7.4.0; Upgrade oracle communications_webrtc_session_controller to a higher version than 7.2,and avoid the version 7.2; Upgrade oracle diagnostic_assistant to a higher version than 2.12.36,and avoid the version 2.12.36; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.3.3,12.4.0,12.4.0.0,and avoid the version 12.3.3,12.4.0,12.4.0.0; Upgrade oracle enterprise_session_border_controller to a higher version than 8.4,and avoid the version 8.4; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 7.3.5,8.1.0,and avoid the version [7.3.3,7.3.5],[8.0.2,8.1.0]; Upgrade oracle financial_services_analytical_applications_reconciliation_framework to a higher version than 8.0.7,8.1.0,and avoid the version [8.0.4,8.0.7],8.1.0; Upgrade oracle financial_services_asset_liability_management to a higher version than 8.0.7,8.1.0,and avoid the version [8.0.4,8.0.7],8.1.0; Upgrade oracle financial_services_balance_sheet_planning to a higher version than 8.0.8,and avoid the version 8.0.8; Upgrade oracle financial_services_basel_regulatory_capital_basic to a higher version than 8.0.7,8.1.0,and avoid the version [8.0.4,8.0.7],8.1.0; Upgrade oracle financial_services_basel_regulatory_capital_internal_ratings_based_approach to a higher version than 8.0.7,8.1.0,and avoid the version [8.0.4,8.0.7],8.1.0; Upgrade oracle financial_services_data_foundation to a higher version than 8.0.8,and avoid the version [8.0.4,8.0.8]; Upgrade oracle financial_services_data_governance_for_us_regulatory_reporting to a higher version than 8.0.9,and avoid the version [8.0.6,8.0.9]; Upgrade oracle financial_services_data_integration_hub to a higher version than 8.0.7,8.1.0,and avoid the version [8.0.5,8.0.7],8.1.0; Upgrade oracle financial_services_enterprise_financial_performance_analytics to a higher version than 8.0.6,8.0.7,and avoid the version 8.0.6,8.0.7; Upgrade oracle financial_services_funds_transfer_pricing to a higher version than 8.0.7,8.1.0,and avoid the version [8.0.4,8.0.7],8.1.0; Upgrade oracle financial_services_hedge_management_and_ifrs_valuations to a higher version than 8.0.7,8.1.0,and avoid the version [8.0.4,8.0.7],8.1.0; Upgrade oracle financial_services_institutional_performance_analytics to a higher version than 8.0.7,8.1.0,and avoid the version [8.0.4,8.0.7],8.1.0; Upgrade oracle financial_services_liquidity_risk_management to a higher version than 8.0.0.1.0,8.0.2,8.0.4.0.0,8.0.5.0.0,8.0.6,and avoid the version 8.0.0.1.0,8.0.2,8.0.4.0.0,8.0.5.0.0,8.0.6; Upgrade oracle financial_services_liquidity_risk_measurement_and_management to a higher version than 8.0.7,8.0.8,8.1.0,and avoid the version 8.0.7,8.0.8,8.1.0; Upgrade oracle financial_services_loan_loss_forecasting_and_provisioning to a higher version than 8.0.7,8.1.0,and avoid the version [8.0.2,8.0.7],8.1.0; Upgrade oracle financial_services_market_risk_measurement_and_management to a higher version than 8.0.5,8.0.6,8.0.8,and avoid the version 8.0.5,8.0.6,8.0.8; Upgrade oracle financial_services_price_creation_and_discovery to a higher version than 8.0.7,and avoid the version [8.0.4,8.0.7]; Upgrade oracle financial_services_profitability_management to a higher version than 8.0.7,8.1.0,and avoid the version [8.0.4,8.0.7],8.1.0; Upgrade oracle financial_services_regulatory_reporting_for_de_nederlandsche_bank to a higher version than 8.0.4,and avoid the version 8.0.4; Upgrade oracle financial_services_regulatory_reporting_for_european_banking_authority to a higher version than 8.0.6,8.0.7,and avoid the version 8.0.6,8.0.7; Upgrade oracle financial_services_regulatory_reporting_for_us_federal_reserve to a higher version than 8.0.7,and avoid the version [8.0.4,8.0.7]; Upgrade oracle financial_services_retail_customer_analytics to a higher version than 8.0.6,and avoid the version [8.0.4,8.0.6]; Upgrade oracle financial_services_retail_performance_analytics to a higher version than 8.0.6,8.0.7,and avoid the version 8.0.6,8.0.7; Upgrade oracle financial_services_revenue_management_and_billing to a higher version than 2.4.0.0,2.4.0.1,and avoid the version 2.4.0.0,2.4.0.1; Upgrade oracle fusion_middleware_mapviewer to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0; Upgrade oracle healthcare_foundation to a higher version than 7.1.1,7.2.0,7.2.2,7.3.0,and avoid the version 7.1.1,7.2.0,7.2.2,7.3.0; Upgrade oracle healthcare_translational_research to a higher version than 3.1.0,3.2.1,3.3.1,3.3.2,3.4.0,and avoid the version 3.1.0,3.2.1,3.3.1,3.3.2,3.4.0; Upgrade oracle hospitality_guest_access to a higher version than 4.2.0,4.2.1,and avoid the version 4.2.0,4.2.1; Upgrade oracle hospitality_materials_control to a higher version than 18.1,and avoid the version 18.1; Upgrade oracle hospitality_simphony to a higher version than 19.1.2,18.1,18.2,and avoid the version [19.1.0,19.1.2],18.1,18.2; Upgrade oracle identity_manager to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0; Upgrade oracle insurance_accounting_analyzer to a higher version than 8.0.9,and avoid the version 8.0.9; Upgrade oracle insurance_allocation_manager_for_enterprise_profitability to a higher version than 8.0.8,8.1.0,and avoid the version 8.0.8,8.1.0; Upgrade oracle insurance_data_foundation to a higher version than 8.0.7,and avoid the version [8.0.4,8.0.7]; Upgrade oracle insurance_ifrs_17_analyzer to a higher version than 8.0.6,8.0.7,and avoid the version 8.0.6,8.0.7; Upgrade oracle insurance_insbridge_rating_and_underwriting to a higher version than 5.6.0.0,5.6.1.0,and avoid the version [5.0.0.0,5.6.0.0],5.6.1.0; Upgrade oracle insurance_performance_insight to a higher version than 8.0.7,and avoid the version 8.0.7; Upgrade oracle jd_edwards_enterpriseone_tools to a higher version than 9.2,and avoid the version 9.2; Upgrade oracle jdeveloper to a higher version than 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 11.1.1.9.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle jdeveloper_and_adf to a higher version than 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0,and avoid the version 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0; Upgrade oracle knowledge to a higher version than 8.6.3,and avoid the version [8.6.0,8.6.3]; Upgrade oracle peoplesoft_enterprise_peopletools to a higher version than 8.55,8.56,8.57,8.58,and avoid the version 8.55,8.56,8.57,8.58; Upgrade oracle policy_automation to a higher version than 12.2.15,10.4.7,12.1.0,12.1.1,and avoid the version [12.2.0,12.2.15],10.4.7,12.1.0,12.1.1; Upgrade oracle policy_automation_connector_for_siebel to a higher version than 10.4.6,and avoid the version 10.4.6; Upgrade oracle policy_automation_for_mobile_devices to a higher version than 12.2.15,and avoid the version [12.2.0,12.2.15]; Upgrade oracle primavera_gateway to a higher version than 16.2.11,17.12.7,18.8.9,19.12.4,15.2.18,and avoid the version [16.2.0,16.2.11],[17.12.0,17.12.7],[18.8.0,18.8.9],[19.12.0,19.12.4],15.2.18; Upgrade oracle primavera_unifier to a higher version than 17.12,16.1,16.2,18.8,and avoid the version [17.7,17.12],16.1,16.2,18.8; Upgrade oracle real-time_scheduler to a higher version than 2.3.0.3,and avoid the version [2.3.0.1,2.3.0.3]; Upgrade oracle rest_data_services to a higher version than 11.2.0.4,12.1.0.2,12.2.0.1,18c,19c,and avoid the version 11.2.0.4,12.1.0.2,12.2.0.1,18c,19c; Upgrade oracle retail_back_office to a higher version than 14.0,14.1,and avoid the version 14.0,14.1; Upgrade oracle retail_central_office to a higher version than 14.0,14.1,and avoid the version 14.0,14.1; Upgrade oracle retail_customer_insights to a higher version than 15.0,16.0,and avoid the version 15.0,16.0; Upgrade oracle retail_customer_management_and_segmentation_foundation to a higher version than 18.0,19.0,and avoid the version 18.0,19.0; Upgrade oracle retail_point-of-service to a higher version than 14.0,14.1,and avoid the version 14.0,14.1; Upgrade oracle retail_returns_management to a higher version than 14.0,14.1,and avoid the version 14.0,14.1; Upgrade oracle service_bus to a higher version than 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0,and avoid the version 11.1.1.9.0,12.1.3.0.0,12.2.1.3.0; Upgrade oracle siebel_mobile_applications to a higher version than 19.8,and avoid the version (,19.8]; Upgrade oracle siebel_ui_framework to a higher version than 20.8,and avoid the version 20.8; Upgrade oracle storagetek_tape_analytics_sw_tool to a higher version than 2.3.0,and avoid the version 2.3.0; Upgrade oracle system_utilities to a higher version than 19.1,and avoid the version 19.1; Upgrade oracle tape_library_acsls to a higher version than 8.5,8.5.1,and avoid the version 8.5,8.5.1; Upgrade oracle transportation_management to a higher version than 1.4.3,and avoid the version 1.4.3; Upgrade oracle utilities_mobile_workforce_management to a higher version than 2.3.0.3,and avoid the version [2.3.0.1,2.3.0.3]; Upgrade oracle webcenter_sites to a higher version than 12.2.1.3.0,and avoid the version 12.2.1.3.0; Upgrade oracle weblogic_server to a higher version than 10.3.6.0.0,12.1.3.0.0,12.2.1.3.0,12.2.1.4.0,14.1.1.0.0,and avoid the version 10.3.6.0.0,12.1.3.0.0,12.2.1.3.0,12.2.1.4.0,14.1.1.0.0; Upgrade joomla joomla! to a higher version than 3.9.4,and avoid the version [3.0.0,3.9.4]; Upgrade juniper junos to a higher version than 21.2,and avoid the version 21.2