| Package | Affected versions | Patched versions |
|---|---|---|
| ckeditor | = 4.15.0 | |
| agile product lifecycle management | = 9.3.5= 9.3.6 | |
| application express | < 21.1.0.00.01 | 21.1.0.00.01 |
| banking party management | = 2.7.0 | |
| banking platform | = 2.4.0= 2.7.0= 2.7.1= 2.8.0= 2.9.0 | |
| commerce merchandising | = 11.0.0= 11.1.0= 11.2.0= 11.3.0= 11.3.1= 11.3.2 | |
| financial services analytical applications infrastructure | = 8.1.0= 8.1.1≥ 8.0.6, ≤ 8.0.9 | |
| jd edwards enterpriseone tools | < 9.2.6.0 | 9.2.6.0 |
| peoplesoft enterprise peopletools | = 8.56= 8.57= 8.58 | |
| ckeditor4 | < 4.15.1 | 4.15.1 |
A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free