{"id":"CVE-2015-9251","published":"2018-01-18T23:00:00Z","modified":"2024-08-06T08:43:41Z","title":"jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.","provenance":"source","from":"CVE.org"},"summary":null,"cvss":null,"epss":{"score":0.29726,"percentile":0.9819,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2021-01-21","exploitedFirstSeen":"2021-01-21","ransomware":false,"evidence":[{"url":"https://www.tenable.com/blog/daisy-chaining-how-vulnerabilities-can-be-greater-than-the-sum-of-their-parts","date":"2021-01-21"},{"url":"https://www.securin.io/wp-content/uploads/2023/08/2023-State-of-Cybersecurity-for-Medical-Devices-and-Healthcare-Systems.pdf","date":"2023-08-08"}],"evidenceTotal":2,"provenance":"source"},"exploited":true,"otx":{"pulseCount":5,"pulses":[{"name":"clone school board","url":"https://otx.alienvault.com/pulse/69a9cad78745fdea3001aec9","created":"2026-03-05"},{"name":"clone school board","url":"https://otx.alienvault.com/pulse/69a9cad6633206ba1204cf8f","created":"2026-03-05"},{"name":"http://crd.gov.pl/wzor/","url":"https://otx.alienvault.com/pulse/66a27442c3dd6aa438bd8d67","created":"2024-07-25"},{"name":"recallsfschoolboard.org","url":"https://otx.alienvault.com/pulse/65707e9819da1f2e8e26e78e","created":"2023-12-06"},{"name":"recallsfschoolboard.org","url":"https://otx.alienvault.com/pulse/6211397913dcdae410959042","created":"2022-02-19"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/105658","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://seclists.org/bugtraq/2019/May/18","tags":["mailing-list","x_refsource_BUGTRAQ"]},{"url":"http://seclists.org/fulldisclosure/2019/May/11","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"http://seclists.org/fulldisclosure/2019/May/10","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"http://seclists.org/fulldisclosure/2019/May/13","tags":["mailing-list","x_refsource_FULLDISC"]},{"url":"https://lists.apache.org/thread.html/54df3aeb4239b64b50b356f0ca6f986e3c4ca5b84c515dce077c7854%40%3Cuser.flink.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/10f0f3aefd51444d1198c65f44ffdf2d78ca3359423dbc1c168c9731%40%3Cdev.flink.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/17ff53f7999e74fbe3cc0ceb4e1c3b00b180b7c5afec8e978837bc49%40%3Cuser.flink.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/52bafac05ad174000ea465fe275fd3cc7bd5c25535a7631c0bc9bfb2%40%3Cuser.flink.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/ba79cf1658741e9f146e4c59b50aee56656ea95d841d358d006c18b6%40%3Ccommits.roller.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0481","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2020:0729","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00041.html","tags":["vendor-advisory","x_refsource_SUSE"]},{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","tags":["x_refsource_MISC"]},{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2018-4428296.html","tags":["x_refsource_CONFIRM"]},{"url":"https://www.oracle.com/security-alerts/cpujul2020.html","tags":["x_refsource_MISC"]},{"url":"https://github.com/jquery/jquery/issues/2432","tags":["x_refsource_MISC"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html","tags":["x_refsource_CONFIRM"]},{"url":"https://sw.aveva.com/hubfs/assets-2018/pdf/security-bulletin/SecurityBulletin_LFSec126.pdf","tags":["x_refsource_MISC"]},{"url":"https://github.com/jquery/jquery/pull/2588/commits/c254d308a7d3f1eac4d0b42837804cfffcba4bb2","tags":["x_refsource_MISC"]},{"url":"https://snyk.io/vuln/npm:jquery:20150627","tags":["x_refsource_MISC"]},{"url":"https://github.com/jquery/jquery/pull/2588","tags":["x_refsource_MISC"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-18-212-04","tags":["x_refsource_MISC"]},{"url":"https://github.com/jquery/jquery/commit/f60729f3903d17917dc351f3ac87794de379b0cc","tags":["x_refsource_MISC"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html","tags":["x_refsource_MISC"]},{"url":"http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html","tags":["x_refsource_MISC"]},{"url":"http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html","tags":["x_refsource_MISC"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html","tags":["x_refsource_MISC"]},{"url":"https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html","tags":["x_refsource_MISC"]},{"url":"https://www.tenable.com/security/tns-2019-08","tags":["x_refsource_CONFIRM"]},{"url":"https://www.oracle.com/security-alerts/cpujan2020.html","tags":["x_refsource_MISC"]},{"url":"http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html","tags":["x_refsource_MISC"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2020.html","tags":["x_refsource_MISC"]},{"url":"https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44601","tags":["x_refsource_CONFIRM"]},{"url":"https://security.netapp.com/advisory/ntap-20210108-0004/","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"npm","package":"jquery","vulnerableRanges":["<1.12.2",">=1.12.3, <3.0.0"],"patched":["1.12.2","3.0.0"],"from":["GHSA-rmxg-73gg-4p98"],"provenance":"source"},{"ecosystem":"NuGet","package":"jQuery","vulnerableRanges":["<1.12.2",">=1.12.3, <3.0.0"],"patched":["1.12.2","3.0.0"],"from":["GHSA-rmxg-73gg-4p98"],"provenance":"source"},{"ecosystem":"RubyGems","package":"jquery-rails","vulnerableRanges":["<4.2.0"],"patched":["4.2.0"],"from":["GHSA-rmxg-73gg-4p98"],"provenance":"source"},{"ecosystem":"Maven","package":"org.webjars.npm:jquery","vulnerableRanges":["<1.12.2",">=1.12.3, <3.0.0"],"patched":["1.12.2","3.0.0"],"from":["GHSA-rmxg-73gg-4p98"],"provenance":"source"}],"advisories":[{"id":"GHSA-rmxg-73gg-4p98","url":"https://github.com/advisories/GHSA-rmxg-73gg-4p98","severity":"MODERATE","ecosystem":"npm","package":"jquery","vulnerableRanges":["<1.12.2"],"patched":["1.12.2"],"provenance":"source","from":"GHSA"},{"id":"GHSA-rmxg-73gg-4p98","url":"https://github.com/advisories/GHSA-rmxg-73gg-4p98","severity":"MODERATE","ecosystem":"NuGet","package":"jQuery","vulnerableRanges":["<1.12.2"],"patched":["1.12.2"],"provenance":"source","from":"GHSA"},{"id":"GHSA-rmxg-73gg-4p98","url":"https://github.com/advisories/GHSA-rmxg-73gg-4p98","severity":"MODERATE","ecosystem":"NuGet","package":"jQuery","vulnerableRanges":[">=1.12.3, <3.0.0"],"patched":["3.0.0"],"provenance":"source","from":"GHSA"},{"id":"GHSA-rmxg-73gg-4p98","url":"https://github.com/advisories/GHSA-rmxg-73gg-4p98","severity":"MODERATE","ecosystem":"npm","package":"jquery","vulnerableRanges":[">=1.12.3, <3.0.0"],"patched":["3.0.0"],"provenance":"source","from":"GHSA"},{"id":"GHSA-rmxg-73gg-4p98","url":"https://github.com/advisories/GHSA-rmxg-73gg-4p98","severity":"MODERATE","ecosystem":"RubyGems","package":"jquery-rails","vulnerableRanges":["<4.2.0"],"patched":["4.2.0"],"provenance":"source","from":"GHSA"},{"id":"GHSA-rmxg-73gg-4p98","url":"https://github.com/advisories/GHSA-rmxg-73gg-4p98","severity":"MODERATE","ecosystem":"Maven","package":"org.webjars.npm:jquery","vulnerableRanges":["<1.12.2"],"patched":["1.12.2"],"provenance":"source","from":"GHSA"},{"id":"GHSA-rmxg-73gg-4p98","url":"https://github.com/advisories/GHSA-rmxg-73gg-4p98","severity":"MODERATE","ecosystem":"Maven","package":"org.webjars.npm:jquery","vulnerableRanges":[">=1.12.3, <3.0.0"],"patched":["3.0.0"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2018-0165","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-0165","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":4,"skipped":0,"earliest":"2018-12-20","earliestUrl":"https://github.com/halkichi0308/CVE-2015-9251","repos":[{"name":"halkichi0308/CVE-2015-9251","url":"https://github.com/halkichi0308/CVE-2015-9251","stars":9,"created":"2018-12-20"},{"name":"moften/CVE-2015-9251","url":"https://github.com/moften/CVE-2015-9251","stars":2,"created":"2024-11-01"},{"name":"hackgiver/CVE-2015-9251","url":"https://github.com/hackgiver/CVE-2015-9251","stars":2,"created":"2025-01-08"},{"name":"rox-11/xss","url":"https://github.com/rox-11/xss","stars":0,"created":"2025-06-06"}]},"first":{"date":"2018-12-20","source":"PoC-in-GitHub","url":"https://github.com/halkichi0308/CVE-2015-9251"},"provenance":"source"},"exploitRefs":["http://packetstormsecurity.com/files/152787/dotCMS-5.1.1-Vulnerable-Dependencies.html","http://packetstormsecurity.com/files/153237/RetireJS-CORS-Issue-Script-Execution.html","http://packetstormsecurity.com/files/156743/OctoberCMS-Insecure-Dependencies.html"],"flow":[],"timeline":[{"date":"2018-01-18","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2015-9251","provenance":"source"},{"date":"2018-12-20","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/halkichi0308/CVE-2015-9251","provenance":"source"},{"date":"2021-01-21","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.tenable.com/blog/daisy-chaining-how-vulnerabilities-can-be-greater-than-the-sum-of-their-parts","provenance":"source"}],"speed":{"daysToPublicExploit":336,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":61.4,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 2107 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.64,"detail":"percentile 0.9819"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"3 NVD exploit links; 4 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":1.77,"detail":"5 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"packageHistory":[{"cve":"CVE-2011-4969","published":"2013-03-08","fixed":"1.6.3","kev":false},{"cve":"CVE-2012-6708","published":"2018-01-18","fixed":"1.9.0","kev":false,"link":{"from":"CVE-2012-6708","to":"CVE-2015-9251","relation":"successor","confidence":"low","kind":"sequence","orderedBy":"description","evidence":[{"kind":"version-step","provenance":"source","package":"npm:jquery","fromFixed":"1.9.0","toFixed":"1.12.2","daysApart":0},{"kind":"version-step","provenance":"source","package":"NuGet:jQuery","fromFixed":"1.9.0","toFixed":"1.12.2","daysApart":0}]}},{"cve":"CVE-2020-7656","published":"2020-05-19","fixed":"1.9.0","kev":false},{"cve":"CVE-2015-9251","published":"2018-01-18","fixed":"3.0.0","kev":false},{"cve":"CVE-2016-10707","published":"2018-01-18","fixed":"3.0.0","kev":false},{"cve":"CVE-2019-11358","published":"2019-04-19","fixed":"3.4.0","kev":false,"link":{"from":"CVE-2015-9251","to":"CVE-2019-11358","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"RubyGems:jquery-rails","fromFixed":"4.2.0","toFixed":"4.3.4","daysApart":456},{"kind":"version-step","provenance":"source","package":"npm:jquery","fromFixed":"3.0.0","toFixed":"3.4.0","daysApart":456}]}},{"cve":"CVE-2020-11022","published":"2020-04-29","fixed":"3.5.0","kev":false}],"package":"npm:jquery"}}