GHSA-rmxg-73gg-4p98 · Severity: medium · Ecosystem: nuget — Cross-Site Scripting (XSS) in jquery
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
Conclusion & alert: CVE-2015-9251 is rated Moderate Risk (63.7/100): CVSS Medium severity, with high exploitation likelihood (EPSS 30.22%, 98th percentile). Core evidence: EPSS ranks this CVE among the most likely to be exploited in the near term. EPSS rose +12.22% over the last day, indicating growing attacker interest. Mandatory action: High exploitation likelihood—assess exposure and prioritize remediation.
Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.
EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).
| # | Date | Old EPSS score | New EPSS score | Delta (New - Old) |
|---|---|---|---|---|
| 1 | 2026-06-15 | 18.01% | 30.22% | +12.22% |
| 2 | 2026-05-22 | 25.59% | 18.01% | -7.59% |
| 3 | 2026-05-06 | — | 25.59% | — |
Full EPSS history (56 records total)
CVSS metrics for this CVE.
| Base score | Version | Severity | Vector | Exploitability | Impact | Score source |
|---|---|---|---|---|---|---|
| 6.1 | 3.0 | MEDIUM |
|
2.8 | 2.7 | [email protected] |
| 4.3 | 2.0 | MEDIUM |
|
8.6 | 2.9 | [email protected] |
GHSA-rmxg-73gg-4p98 · Severity: medium · Ecosystem: nuget — Cross-Site Scripting (XSS) in jquery
| vendor | priority | summary | link |
|---|---|---|---|
alpine
|
medium | CVE-2015-9251: 2 source package rows (rabbitmq-server, ruby); 5 state rows across 5 repos (3.10-main, 3.20-community, 3.21-community, 3.22-community, edge-community); fixed 5, open 0. | https://security.alpinelinux.org/vuln/CVE-2015-9251 |
redhat
|
medium | — | https://access.redhat.com/security/cve/CVE-2015-9251 |
suse
|
medium | CVE-2015-9251 severity moderate: SUSE including 281 source package names (2.17-17.3:libruby2_5-2_5-2.5.7-4.8.1, 2.17-17.3:ruby2.5-2.5.7-4.8.1, …), 872 product×package rows across 206 product lines (Container bci/ruby, Container suse/rmt-server, … (206 product lines)): Fixed 713, Known Affected 157, Known Not Affected 2. | https://www.suse.com/security/cve/CVE-2015-9251/ |
ubuntu
|
low | CVE-2015-9251 low priority: Ubuntu including 1 source packages (jquery), 9 status rows across 9 suites (artful, bionic, cosmic, disco, eoan, focal, trusty, upstream, xenial): not-affected 6, ignored 2, released 1. | https://ubuntu.com/security/CVE-2015-9251 |
| Vendor | Product | Version | Raw CPE |
|---|---|---|---|
| jquery | jquery | < 3.0.0 | cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* |
| oracle | agile_product_lifecycle_management_for_process | 6.2.0.0 | cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:* |
| oracle | agile_product_lifecycle_management_for_process | 6.2.1.0 | cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0:*:*:*:*:*:*:* |
| oracle | agile_product_lifecycle_management_for_process | 6.2.2.0 | cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:* |
| oracle | agile_product_lifecycle_management_for_process | 6.2.3.0 | cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:* |
| oracle | agile_product_lifecycle_management_for_process | 6.2.3.1 | cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.1:*:*:*:*:*:*:* |
| oracle | banking_platform | 2.6.0 | cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:* |
| oracle | banking_platform | 2.6.1 | cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:* |
| oracle | banking_platform | 2.6.2 | cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:* |
| oracle | business_process_management_suite | 11.1.1.9.0 | cpe:2.3:a:oracle:business_process_management_suite:11.1.1.9.0:*:*:*:*:*:*:* |
| oracle | business_process_management_suite | 12.1.3.0.0 | cpe:2.3:a:oracle:business_process_management_suite:12.1.3.0.0:*:*:*:*:*:*:* |
| oracle | business_process_management_suite | 12.2.1.3.0 | cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:* |
| oracle | communications_converged_application_server | < 7.0.0.1 | cpe:2.3:a:oracle:communications_converged_application_server:*:*:*:*:*:*:*:* |
| oracle | communications_interactive_session_recorder | 6.0 | cpe:2.3:a:oracle:communications_interactive_session_recorder:6.0:*:*:*:*:*:*:* |
| oracle | communications_interactive_session_recorder | 6.1 | cpe:2.3:a:oracle:communications_interactive_session_recorder:6.1:*:*:*:*:*:*:* |
| oracle | communications_interactive_session_recorder | 6.2 | cpe:2.3:a:oracle:communications_interactive_session_recorder:6.2:*:*:*:*:*:*:* |
| oracle | communications_services_gatekeeper | < 6.1.0.4.0 | cpe:2.3:a:oracle:communications_services_gatekeeper:*:*:*:*:*:*:*:* |
| oracle | communications_webrtc_session_controller | < 7.2 | cpe:2.3:a:oracle:communications_webrtc_session_controller:*:*:*:*:*:*:*:* |
| oracle | endeca_information_discovery_studio | 3.1.0 | cpe:2.3:a:oracle:endeca_information_discovery_studio:3.1.0:*:*:*:*:*:*:* |
| oracle | endeca_information_discovery_studio | 3.2.0 | cpe:2.3:a:oracle:endeca_information_discovery_studio:3.2.0:*:*:*:*:*:*:* |
| oracle | enterprise_manager_ops_center | 12.2.2 | cpe:2.3:a:oracle:enterprise_manager_ops_center:12.2.2:*:*:*:*:*:*:* |
| oracle | enterprise_manager_ops_center | 12.3.3 | cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:* |
| oracle | enterprise_operations_monitor | 3.4 | cpe:2.3:a:oracle:enterprise_operations_monitor:3.4:*:*:*:*:*:*:* |
| oracle | enterprise_operations_monitor | 4.0 | cpe:2.3:a:oracle:enterprise_operations_monitor:4.0:*:*:*:*:*:*:* |
| oracle | financial_services_analytical_applications_infrastructure | >= 7.3.3, <= 7.3.5 | cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* |
| oracle | financial_services_analytical_applications_infrastructure | >= 8.0.0, <= 8.0.7 | cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* |
| oracle | financial_services_asset_liability_management | >= 8.0.4, <= 8.0.7 | cpe:2.3:a:oracle:financial_services_asset_liability_management:*:*:*:*:*:*:*:* |
| oracle | financial_services_data_integration_hub | >= 8.0.5, <= 8.0.7 | cpe:2.3:a:oracle:financial_services_data_integration_hub:*:*:*:*:*:*:*:* |
| oracle | financial_services_funds_transfer_pricing | >= 8.0.4, <= 8.0.7 | cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:*:*:*:*:*:*:*:* |
| oracle | financial_services_hedge_management_and_ifrs_valuations | >= 8.0.4, <= 8.0.7 | cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:* |
| oracle | financial_services_liquidity_risk_management | >= 8.0.2, <= 8.0.6 | cpe:2.3:a:oracle:financial_services_liquidity_risk_management:*:*:*:*:*:*:*:* |
| oracle | financial_services_loan_loss_forecasting_and_provisioning | >= 8.0.2, <= 8.0.7 | cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:* |
| oracle | financial_services_market_risk_measurement_and_management | 8.0.5 | cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5:*:*:*:*:*:*:* |
| oracle | financial_services_market_risk_measurement_and_management | 8.0.6 | cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:* |
| oracle | financial_services_profitability_management | >= 8.0.4, <= 8.0.6 | cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:* |
| oracle | financial_services_reconciliation_framework | 8.0.5 | cpe:2.3:a:oracle:financial_services_reconciliation_framework:8.0.5:*:*:*:*:*:*:* |
| oracle | financial_services_reconciliation_framework | 8.0.6 | cpe:2.3:a:oracle:financial_services_reconciliation_framework:8.0.6:*:*:*:*:*:*:* |
| oracle | fusion_middleware_mapviewer | 12.2.1.3.0 | cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:* |
| oracle | healthcare_foundation | 7.1 | cpe:2.3:a:oracle:healthcare_foundation:7.1:*:*:*:*:*:*:* |
| oracle | healthcare_foundation | 7.2 | cpe:2.3:a:oracle:healthcare_foundation:7.2:*:*:*:*:*:*:* |
| oracle | healthcare_translational_research | 3.1.0 | cpe:2.3:a:oracle:healthcare_translational_research:3.1.0:*:*:*:*:*:*:* |
| oracle | hospitality_cruise_fleet_management | 9.0.11 | cpe:2.3:a:oracle:hospitality_cruise_fleet_management:9.0.11:*:*:*:*:*:*:* |
| oracle | hospitality_guest_access | 4.2.0 | cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:* |
| oracle | hospitality_guest_access | 4.2.1 | cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:* |
| oracle | hospitality_materials_control | 18.1 | cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:* |
| oracle | hospitality_reporting_and_analytics | 9.1.0 | cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.1.0:*:*:*:*:*:*:* |
| oracle | insurance_insbridge_rating_and_underwriting | 5.2 | cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.2:*:*:*:*:*:*:* |
| oracle | insurance_insbridge_rating_and_underwriting | 5.4 | cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.4:*:*:*:*:*:*:* |
| oracle | insurance_insbridge_rating_and_underwriting | 5.5 | cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.5:*:*:*:*:*:*:* |
| oracle | jd_edwards_enterpriseone_tools | 9.2 | cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:* |
| oracle | jdeveloper | 11.1.1.9.0 | cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:* |
| oracle | jdeveloper | 12.1.3.0.0 | cpe:2.3:a:oracle:jdeveloper:12.1.3.0.0:*:*:*:*:*:*:* |
| oracle | jdeveloper | 12.2.1.3.0 | cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:* |
| oracle | oss_support_tools | 19.1 | cpe:2.3:a:oracle:oss_support_tools:19.1:*:*:*:*:*:*:* |
| oracle | peoplesoft_enterprise_peopletools | 8.55 | cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:* |
| oracle | peoplesoft_enterprise_peopletools | 8.56 | cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:* |
| oracle | peoplesoft_enterprise_peopletools | 8.57 | cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* |
| oracle | primavera_gateway | 15.2 | cpe:2.3:a:oracle:primavera_gateway:15.2:*:*:*:*:*:*:* |
| oracle | primavera_gateway | 16.2 | cpe:2.3:a:oracle:primavera_gateway:16.2:*:*:*:*:*:*:* |
| oracle | primavera_gateway | 17.12 | cpe:2.3:a:oracle:primavera_gateway:17.12:*:*:*:*:*:*:* |
| oracle | primavera_unifier | >= 17.1, <= 17.12 | cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* |
| oracle | primavera_unifier | 16.1 | cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:* |
| oracle | primavera_unifier | 16.2 | cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:* |
| oracle | primavera_unifier | 18.8 | cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* |
| oracle | real-time_scheduler | 2.3.0 | cpe:2.3:a:oracle:real-time_scheduler:2.3.0:*:*:*:*:*:*:* |
| oracle | retail_allocation | 15.0.2 | cpe:2.3:a:oracle:retail_allocation:15.0.2:*:*:*:*:*:*:* |
| oracle | retail_customer_insights | 15.0 | cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:* |
| oracle | retail_customer_insights | 16.0 | cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:* |
| oracle | retail_invoice_matching | 15.0 | cpe:2.3:a:oracle:retail_invoice_matching:15.0:*:*:*:*:*:*:* |
| oracle | retail_sales_audit | 15.0 | cpe:2.3:a:oracle:retail_sales_audit:15.0:*:*:*:*:*:*:* |
| oracle | retail_workforce_management_software | 1.60.9 | cpe:2.3:a:oracle:retail_workforce_management_software:1.60.9:*:*:*:*:*:*:* |
| oracle | retail_workforce_management_software | 1.64.0 | cpe:2.3:a:oracle:retail_workforce_management_software:1.64.0:*:*:*:*:*:*:* |
| oracle | service_bus | 12.1.3.0.0 | cpe:2.3:a:oracle:service_bus:12.1.3.0.0:*:*:*:*:*:*:* |
| oracle | service_bus | 12.2.1.3.0 | cpe:2.3:a:oracle:service_bus:12.2.1.3.0:*:*:*:*:*:*:* |
| oracle | siebel_ui_framework | 18.10 | cpe:2.3:a:oracle:siebel_ui_framework:18.10:*:*:*:*:*:*:* |
| oracle | siebel_ui_framework | 18.11 | cpe:2.3:a:oracle:siebel_ui_framework:18.11:*:*:*:*:*:*:* |
| oracle | utilities_framework | >= 4.3.0.1, <= 4.3.0.4 | cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:* |
| oracle | utilities_mobile_workforce_management | 2.3.0 | cpe:2.3:a:oracle:utilities_mobile_workforce_management:2.3.0:*:*:*:*:*:*:* |
| oracle | webcenter_sites | 11.1.1.8.0 | cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:* |
| oracle | weblogic_server | 12.1.3.0 | cpe:2.3:a:oracle:weblogic_server:12.1.3.0:*:*:*:*:*:*:* |