CVE
CVE-2015-9251
- First Reported
- Oct 21, 2026
- Latest Reported
- Oct 21, 2026
CVE Enrichment
- CVSS
- 6.1 MEDIUM
- EPSS
- 29.73%
- EPSS Percentile
- 98.19%
- CISA KEV
- Not listed
Description
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
Technical Details
- CVSS Version
- 3.0
- CNA / NVD Source
- [email protected]
- Published
- 19-Jan-2018 06:29
- Last Modified
- 17-Jun-2026 07:36
- EPSS Date
- 2026-10-20
- CWE
- CWE-79
CVSS Vector
CVSS:3.0 AV:N /
AC:L /
PR:N /
UI:R /
S:C /
C:L /
I:L /
A:N
Affected Products / Versions
- jquery / jquery
Version / affected range: * · before (exclusive) 3.0.0
cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* - oracle / agile_product_lifecycle_management_for_process
Version / affected range: 6.2.0.0
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:* - oracle / agile_product_lifecycle_management_for_process
Version / affected range: 6.2.1.0
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0:*:*:*:*:*:*:* - oracle / agile_product_lifecycle_management_for_process
Version / affected range: 6.2.2.0
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:* - oracle / agile_product_lifecycle_management_for_process
Version / affected range: 6.2.3.0
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:* - oracle / agile_product_lifecycle_management_for_process
Version / affected range: 6.2.3.1
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.1:*:*:*:*:*:*:* - oracle / banking_platform
Version / affected range: 2.6.0
cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:* - oracle / banking_platform
Version / affected range: 2.6.1
cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:* - oracle / banking_platform
Version / affected range: 2.6.2
cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:* - oracle / business_process_management_suite
Version / affected range: 11.1.1.9.0
cpe:2.3:a:oracle:business_process_management_suite:11.1.1.9.0:*:*:*:*:*:*:* - oracle / business_process_management_suite
Version / affected range: 12.1.3.0.0
cpe:2.3:a:oracle:business_process_management_suite:12.1.3.0.0:*:*:*:*:*:*:* - oracle / business_process_management_suite
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:* - oracle / communications_converged_application_server
Version / affected range: * · before (exclusive) 7.0.0.1
cpe:2.3:a:oracle:communications_converged_application_server:*:*:*:*:*:*:*:* - oracle / communications_interactive_session_recorder
Version / affected range: 6.0
cpe:2.3:a:oracle:communications_interactive_session_recorder:6.0:*:*:*:*:*:*:* - oracle / communications_interactive_session_recorder
Version / affected range: 6.1
cpe:2.3:a:oracle:communications_interactive_session_recorder:6.1:*:*:*:*:*:*:* - oracle / communications_interactive_session_recorder
Version / affected range: 6.2
cpe:2.3:a:oracle:communications_interactive_session_recorder:6.2:*:*:*:*:*:*:* - oracle / communications_services_gatekeeper
Version / affected range: * · before (exclusive) 6.1.0.4.0
cpe:2.3:a:oracle:communications_services_gatekeeper:*:*:*:*:*:*:*:* - oracle / communications_webrtc_session_controller
Version / affected range: * · before (exclusive) 7.2
cpe:2.3:a:oracle:communications_webrtc_session_controller:*:*:*:*:*:*:*:* - oracle / endeca_information_discovery_studio
Version / affected range: 3.1.0
cpe:2.3:a:oracle:endeca_information_discovery_studio:3.1.0:*:*:*:*:*:*:* - oracle / endeca_information_discovery_studio
Version / affected range: 3.2.0
cpe:2.3:a:oracle:endeca_information_discovery_studio:3.2.0:*:*:*:*:*:*:* - oracle / enterprise_manager_ops_center
Version / affected range: 12.2.2
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.2.2:*:*:*:*:*:*:* - oracle / enterprise_manager_ops_center
Version / affected range: 12.3.3
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:* - oracle / enterprise_operations_monitor
Version / affected range: 3.4
cpe:2.3:a:oracle:enterprise_operations_monitor:3.4:*:*:*:*:*:*:* - oracle / enterprise_operations_monitor
Version / affected range: 4.0
cpe:2.3:a:oracle:enterprise_operations_monitor:4.0:*:*:*:*:*:*:* - oracle / financial_services_analytical_applications_infrastructure
Version / affected range: * · from (inclusive) 7.3.3 · through (inclusive) 7.3.5
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* - oracle / financial_services_analytical_applications_infrastructure
Version / affected range: * · from (inclusive) 8.0.0 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* - oracle / financial_services_asset_liability_management
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_asset_liability_management:*:*:*:*:*:*:*:* - oracle / financial_services_data_integration_hub
Version / affected range: * · from (inclusive) 8.0.5 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_data_integration_hub:*:*:*:*:*:*:*:* - oracle / financial_services_funds_transfer_pricing
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:*:*:*:*:*:*:*:* - oracle / financial_services_hedge_management_and_ifrs_valuations
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:* - oracle / financial_services_liquidity_risk_management
Version / affected range: * · from (inclusive) 8.0.2 · through (inclusive) 8.0.6
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:*:*:*:*:*:*:*:* - oracle / financial_services_loan_loss_forecasting_and_provisioning
Version / affected range: * · from (inclusive) 8.0.2 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:* - oracle / financial_services_market_risk_measurement_and_management
Version / affected range: 8.0.5
cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5:*:*:*:*:*:*:* - oracle / financial_services_market_risk_measurement_and_management
Version / affected range: 8.0.6
cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:* - oracle / financial_services_profitability_management
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.6
cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:* - oracle / financial_services_reconciliation_framework
Version / affected range: 8.0.5
cpe:2.3:a:oracle:financial_services_reconciliation_framework:8.0.5:*:*:*:*:*:*:* - oracle / financial_services_reconciliation_framework
Version / affected range: 8.0.6
cpe:2.3:a:oracle:financial_services_reconciliation_framework:8.0.6:*:*:*:*:*:*:* - oracle / fusion_middleware_mapviewer
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:* - oracle / healthcare_foundation
Version / affected range: 7.1
cpe:2.3:a:oracle:healthcare_foundation:7.1:*:*:*:*:*:*:* - oracle / healthcare_foundation
Version / affected range: 7.2
cpe:2.3:a:oracle:healthcare_foundation:7.2:*:*:*:*:*:*:* - oracle / healthcare_translational_research
Version / affected range: 3.1.0
cpe:2.3:a:oracle:healthcare_translational_research:3.1.0:*:*:*:*:*:*:* - oracle / hospitality_cruise_fleet_management
Version / affected range: 9.0.11
cpe:2.3:a:oracle:hospitality_cruise_fleet_management:9.0.11:*:*:*:*:*:*:* - oracle / hospitality_guest_access
Version / affected range: 4.2.0
cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:* - oracle / hospitality_guest_access
Version / affected range: 4.2.1
cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:* - oracle / hospitality_materials_control
Version / affected range: 18.1
cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:* - oracle / hospitality_reporting_and_analytics
Version / affected range: 9.1.0
cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.1.0:*:*:*:*:*:*:* - oracle / insurance_insbridge_rating_and_underwriting
Version / affected range: 5.2
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.2:*:*:*:*:*:*:* - oracle / insurance_insbridge_rating_and_underwriting
Version / affected range: 5.4
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.4:*:*:*:*:*:*:* - oracle / insurance_insbridge_rating_and_underwriting
Version / affected range: 5.5
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.5:*:*:*:*:*:*:* - oracle / jd_edwards_enterpriseone_tools
Version / affected range: 9.2
cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:* - oracle / jdeveloper
Version / affected range: 11.1.1.9.0
cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:* - oracle / jdeveloper
Version / affected range: 12.1.3.0.0
cpe:2.3:a:oracle:jdeveloper:12.1.3.0.0:*:*:*:*:*:*:* - oracle / jdeveloper
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:* - oracle / oss_support_tools
Version / affected range: 19.1
cpe:2.3:a:oracle:oss_support_tools:19.1:*:*:*:*:*:*:* - oracle / peoplesoft_enterprise_peopletools
Version / affected range: 8.55
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:* - oracle / peoplesoft_enterprise_peopletools
Version / affected range: 8.56
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:* - oracle / peoplesoft_enterprise_peopletools
Version / affected range: 8.57
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* - oracle / primavera_gateway
Version / affected range: 15.2
cpe:2.3:a:oracle:primavera_gateway:15.2:*:*:*:*:*:*:* - oracle / primavera_gateway
Version / affected range: 16.2
cpe:2.3:a:oracle:primavera_gateway:16.2:*:*:*:*:*:*:* - oracle / primavera_gateway
Version / affected range: 17.12
cpe:2.3:a:oracle:primavera_gateway:17.12:*:*:*:*:*:*:* - oracle / primavera_unifier
Version / affected range: * · from (inclusive) 17.1 · through (inclusive) 17.12
cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* - oracle / primavera_unifier
Version / affected range: 16.1
cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:* - oracle / primavera_unifier
Version / affected range: 16.2
cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:* - oracle / primavera_unifier
Version / affected range: 18.8
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* - oracle / real-time_scheduler
Version / affected range: 2.3.0
cpe:2.3:a:oracle:real-time_scheduler:2.3.0:*:*:*:*:*:*:* - oracle / retail_allocation
Version / affected range: 15.0.2
cpe:2.3:a:oracle:retail_allocation:15.0.2:*:*:*:*:*:*:* - oracle / retail_customer_insights
Version / affected range: 15.0
cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:* - oracle / retail_customer_insights
Version / affected range: 16.0
cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:* - oracle / retail_invoice_matching
Version / affected range: 15.0
cpe:2.3:a:oracle:retail_invoice_matching:15.0:*:*:*:*:*:*:* - oracle / retail_sales_audit
Version / affected range: 15.0
cpe:2.3:a:oracle:retail_sales_audit:15.0:*:*:*:*:*:*:* - oracle / retail_workforce_management_software
Version / affected range: 1.60.9
cpe:2.3:a:oracle:retail_workforce_management_software:1.60.9:*:*:*:*:*:*:* - oracle / retail_workforce_management_software
Version / affected range: 1.64.0
cpe:2.3:a:oracle:retail_workforce_management_software:1.64.0:*:*:*:*:*:*:* - oracle / service_bus
Version / affected range: 12.1.3.0.0
cpe:2.3:a:oracle:service_bus:12.1.3.0.0:*:*:*:*:*:*:* - oracle / service_bus
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:service_bus:12.2.1.3.0:*:*:*:*:*:*:* - oracle / siebel_ui_framework
Version / affected range: 18.10
cpe:2.3:a:oracle:siebel_ui_framework:18.10:*:*:*:*:*:*:* - oracle / siebel_ui_framework
Version / affected range: 18.11
cpe:2.3:a:oracle:siebel_ui_framework:18.11:*:*:*:*:*:*:* - oracle / utilities_framework
Version / affected range: * · from (inclusive) 4.3.0.1 · through (inclusive) 4.3.0.4
cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:* - oracle / utilities_mobile_workforce_management
Version / affected range: 2.3.0
cpe:2.3:a:oracle:utilities_mobile_workforce_management:2.3.0:*:*:*:*:*:*:* - oracle / webcenter_sites
Version / affected range: 11.1.1.8.0
cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:* - oracle / weblogic_server
Version / affected range: 12.1.3.0
cpe:2.3:a:oracle:weblogic_server:12.1.3.0:*:*:*:*:*:*:* - oracle / weblogic_server
Version / affected range: 12.2.1.3
cpe:2.3:a:oracle:weblogic_server:12.2.1.3:*:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- | | | 8 BDSA-2017-2930 (CVE-2015-9251) | 651 | 2,135 | 25% | Black Duck 2026 Report Finds Open Source Vulnerability Counts More Than Doubled
CVE (5)
Malware (1)
Threat Actors (1)
MITRE ATT&CK (5)
Vendors (1)
Products (6)
Industries (9)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.