[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhONSCsrkyXkPHtQvl83ZnRBHZ1RQskGY6mx4F6l-bNo":3,"g5a-family:oracle\u002Foss_support_tools":131,"g5a-ex:oracle\u002Foss_support_tools@*":132},{"success":4,"data":5},true,{"product":6,"versions":33,"topVulnerabilitiesByEpss":41,"kevVulnerabilities":103,"seoMetadata":109,"meta":128},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":32},"oracle","oss_support_tools",7,19,1,"2022-04-19",[14,18,20,23,25,27,30],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"18.3",0,false,{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},"19.1",{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},"20.0",4,{"version":24,"cve_count":16,"kev_count":16,"has_kev":17},"2.11.33",{"version":26,"cve_count":16,"kev_count":16,"has_kev":17},"2.12.41",{"version":28,"cve_count":29,"kev_count":16,"has_kev":17},"2.12.42",3,{"version":31,"cve_count":11,"kev_count":16,"has_kev":17},"8.11.16.3.8","Oss Support Tools by Oracle is a technology product with 7 tracked versions and 19 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[34,35,36,37,38,39,40],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},{"version":21,"cve_count":22,"kev_count":16,"has_kev":17},{"version":24,"cve_count":16,"kev_count":16,"has_kev":17},{"version":26,"cve_count":16,"kev_count":16,"has_kev":17},{"version":28,"cve_count":29,"kev_count":16,"has_kev":17},{"version":31,"cve_count":11,"kev_count":16,"has_kev":17},[42,50,57,64,69,74,81,87,93,97],{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":4,"epssScore":49},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.9,"v3.1","Medium",0.84887,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":47,"severity":55,"isKev":17,"epssScore":56},"CVE-2019-5436","A heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in libcurl versions 7.19.4 through 7.64.1.","2019-05-28",7.8,"High",0.49739,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":62,"severity":48,"isKev":17,"epssScore":63},"CVE-2015-9251","jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text\u002Fjavascript responses to be executed.","2018-01-18",6.1,"v3.0",0.29726,{"cveId":65,"description":66,"publishedDate":60,"cvssScore":67,"cvssVersion":62,"severity":55,"isKev":17,"epssScore":68},"CVE-2018-2616","Vulnerability in the OSS Support Tools component of Oracle Support Tools (subcomponent: Diagnostic Assistant). The supported version that is affected is Prior to 2.11.33. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise OSS Support Tools. Successful attacks of this vulnerability can result in takeover of OSS Support Tools. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).",8.8,0.27068,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":61,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":73},"CVE-2016-7103","Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function.","2017-03-15",0.2258,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":47,"severity":79,"isKev":17,"epssScore":80},"CVE-2019-5482","Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3.","2019-09-16",9.8,"Critical",0.17939,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":62,"severity":48,"isKev":17,"epssScore":86},"CVE-2015-3197","ssl\u002Fs2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.","2016-02-15",5.9,0.10731,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":92},"CVE-2021-29425","In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"\u002F\u002F..\u002Ffoo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.","2021-04-13",4.8,0.10549,{"cveId":94,"description":95,"publishedDate":77,"cvssScore":78,"cvssVersion":47,"severity":79,"isKev":17,"epssScore":96},"CVE-2019-5481","Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3.",0.07465,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":102},"CVE-2021-41973","In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater.","2021-11-01",6.5,0.04634,[104],{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"severity":48,"isKev":4,"epssScore":49,"cisaVulnName":105,"cisaDateAdded":106,"cisaShortDescription":107,"cisaRequiredAction":108},"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":110,"metaDescription":111,"keywords":112,"structuredData":113},"Oss Support Tools by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Oss Support Tools by Oracle covering 7 versions with 19 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Oss Support Tools vulnerabilities, Oss Support Tools security, Oss Support Tools CVE, Oracle Oss Support Tools, Oss Support Tools threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Oss Support Tools KEV, Oss Support Tools exploited vulnerabilities",{"@context":114,"@type":115,"name":116,"description":111,"url":117,"manufacturer":118,"applicationCategory":122,"softwareVersion":123,"mainEntity":124},"https:\u002F\u002Fschema.org","SoftwareApplication","Oss Support Tools","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Foss_support_tools",{"@type":119,"name":120,"url":121},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","7 versions tracked",{"@type":125,"name":126,"description":127,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Oss Support Tools Security Vulnerabilities","Security vulnerabilities affecting Oss Support Tools by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":129,"apiVersion":130},"2026-10-17T19:17:40.322Z","3.0",[],{"rows":133,"total":11,"capped":17,"failed":16},[134],{"cveId":43,"name":105,"severity":48,"cvss":46,"added":106,"epss":49,"published":135,"ranges":136,"checked":4,"hits":138,"covers":17},"2020-04-29T21:15:11.743",[137],"before 2.12.41",[]]