Communications Analytics vulnerabilities

1 known vulnerability in Communications Analytics from Oracle. None are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 6.1 Medium severity

  JQuery Cross-Site Scripting (XSS) Exploited

  CVE-2020-11023Apr 29, 2020JqueryEPSS 84.9%

  In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untr