✕
Request a Demo
Rewterz
Rewterz Threat Advisory – CVE-2016-1000031 – Oracle Identity Analytics Apache Commons FileUpload Deserialization Security Bypass Vulnerability
April 18, 2019
Rewterz
Rewterz Threat Advisory – Oracle Siebel CRM Update for Multiple Vulnerabilities
April 18, 2019

Rewterz Threat Advisory – CVE-2015-9251 – Oracle Fusion Middleware MapViewer jQuery Cross-Site Scripting Vulnerability

Severity

Medium

Analysis summary

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

Impact

Cross Site Scripting

Affected Vendors

Oracle

Affected Products

Oracle Fusion Middleware MapViewer 12.2.1.3.0.

Remediation

Apply update.

https://support.oracle.com/rs?type=doc&id=2498664.1