[{"CVE":"CVE-2020-7656","severity":"moderate","public_date":"2020-05-19T00:00:00Z","advisories":["RHSA-2020:4211"],"bugzilla":"1850119","bugzilla_description":"CVE-2020-7656 jQuery: allows XSS via the load method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-7656.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss3_score":"5.4"},{"CVE":"CVE-2020-11023","severity":"moderate","public_date":"2020-04-29T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:3369","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2813"],"bugzilla":"1850004","bugzilla_description":"CVE-2020-11023 jQuery: passing HTML containing <option> elements to manipulation methods could result in untrusted code execution","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["qpid-dispatch-0:1.13.0-3.el6_10","servicemesh-prometheus-0:2.14.0-14.el8","servicemesh-grafana-0:6.4.3-13.el8","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","kiali-0:v1.12.10.redhat2-1.el7","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el8","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11023.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-11022","severity":"moderate","public_date":"2020-04-23T00:00:00Z","advisories":["RHSA-2020:3247","RHSA-2020:2412","RHSA-2020:4211","RHSA-2020:3807","RHSA-2020:2362","RHSA-2020:2813","RHSA-2020:3936","RHSA-2020:2217"],"bugzilla":"1828406","bugzilla_description":"CVE-2020-11022 jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["kiali-0:v1.0.11.redhat1-1.el7","ipa-0:4.6.8-5.el7","atomic-openshift-web-console-0:3.11.219-1.git.1.9b9b889.el7","ovirt-engine-api-explorer-0:0.0.6-1.el8ev","openshift4/ose-console:v4.5.0-202007012112.p0","servicemesh-grafana-0:6.2.2-36.el8","ovirt-engine-ui-extensions-0:1.2.3-1.el8ev","ovirt-web-ui-0:1.6.4-1.el8ev","qpid-dispatch-0:1.13.0-3.el7"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-11022.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2018-18405","severity":null,"public_date":"2020-04-22T00:00:00Z","advisories":[],"bugzilla":"1837506","bugzilla_description":"CVE-2018-18405 jquery: crafted onerror attribute of an IMG element could result in XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-18405.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N"},{"CVE":"CVE-2019-11358","severity":"moderate","public_date":"2019-03-27T00:00:00Z","advisories":["RHSA-2020:2412","RHBA-2020:0402","RHSA-2019:3023","RHSA-2019:1456","RHSA-2019:3024","RHSA-2019:2587","RHBA-2019:1570","RHSA-2020:3936","RHSA-2020:1325"],"bugzilla":"1701972","bugzilla_description":"CVE-2019-11358 js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":["atomic-openshift-web-console-0:3.11.170-1.git.1.3d64e8b.el7","ipa-0:4.6.8-5.el7","python-XStatic-jQuery-0:3.4.1.0-1.el8ost","ovirt-web-ui-0:1.6.0-1.el7ev","openshift4/ose-console:v4.5.0-202007012112.p0","ovirt-engine-ui-extensions-0:1.0.10-1.el7ev","ovirt-engine-api-explorer-0:0.0.5-1.el7ev"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11358.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"5.6"},{"CVE":"CVE-2012-6708","severity":"moderate","public_date":"2017-03-21T00:00:00Z","advisories":[],"bugzilla":"1591840","bugzilla_description":"CVE-2012-6708 js-jquery: XSS via improper selector detection","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6708.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N","cvss3_score":"6.8"}]