Vulnerability Name:

CVE-2016-7103 (CCN-119601)

Assigned:2016-12-08
Published:2016-12-08
Updated:2023-06-22
Summary:
CVSS v3 Severity:6.1 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
5.3 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
6.1 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
5.3 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): Required
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:4.3 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Medium
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
5.5 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): None
Vulnerability Consequences:Cross-Site Scripting
References:Source: MITRE
Type: CNA
CVE-2016-7103

Source: CCN
Type: RHSA-2016-2932
Low: python-XStatic-jquery-ui security update

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Source: CCN
Type: RHSA-2016-2933
Low: python-XStatic-jquery-ui security update

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Source: CCN
Type: RHSA-2017-0161
Low: python-XStatic-jquery-ui security update

Source: cve@mitre.org
Type: Third Party Advisory, VDB Entry
cve@mitre.org

Source: CCN
Type: IBM Security Bulletin 2013753 (Security Guardium Big Data Intelligence)
IBM Security Guardium Big Data Intelligence (SonarG) is vulnerable to using Components with Known Vulnerabilities

Source: CCN
Type: IBM Security Bulletin 2016514 (Security Guardium Big Data Intelligence)
IBM Security Guardium Big Data Intelligence (SonarG) is affected by a Using Components with Known Vulnerabilities vulnerability

Source: CCN
Type: Oracle CPUApr2019
Oracle Critical Patch Update Advisory - April 2019

Source: CCN
Type: Oracle CPUJul2018
Oracle Critical Patch Update Advisory - July 2018

Source: cve@mitre.org
Type: Patch, Third Party Advisory
cve@mitre.org

Source: CCN
Type: Oracle CPUJul2019
Oracle Critical Patch Update Advisory - July 2019

Source: CCN
Type: Oracle CPUOct2019
Oracle Critical Patch Update Advisory - October 2019

Source: CCN
Type: BID-104823
Oracle Primavera Unifier Multiple Security Vulnerabilities

Source: cve@mitre.org
Type: Broken Link, Third Party Advisory, VDB Entry
cve@mitre.org

Source: CCN
Type: Red Hat Bugzilla
Bug 1360286 - (CVE-2016-7103) CVE-2016-7103 jquery-ui: cross-site scripting in dialog closeText

Source: XF
Type: UNKNOWN
jqueryui-cve20167103-xss(119601)

Source: cve@mitre.org
Type: Exploit, Issue Tracking, Patch, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Patch, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Release Notes, Vendor Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Mailing List, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Mailing List, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Mailing List, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Mailing List, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Mailing List, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Mailing List, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Mailing List, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Mailing List, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Mailing List, Third Party Advisory
cve@mitre.org

Source: CCN
Type: Node Security Platform | Advisory
XSS in dialog closeText

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Source: CCN
Type: IBM Security Bulletin 6252853 (Cognos Analytics)
IBM Cognos Analytics has addressed multiple vulnerabilities

Source: CCN
Type: IBM Security Bulletin 6333027 (Security Identity Manager Virtual Appliance)
Multiple security vulnerabilities have been fixed in IBM Security Identity Manager Virtual Appliance

Source: CCN
Type: IBM Security Bulletin 6416391 (Spectrum Symphony)
Multiple vulnerability issues affect IBM Spectrum Symphony 7.3.1

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Source: CCN
Type: Oracle CPUApr2020
Oracle Critical Patch Update Advisory - April 2020

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Source: CCN
Type: Oracle Critical Patch Update Advisory - April 2021
Oracle Critical Patch Update Advisory - April 2021

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Source: CCN
Type: Oracle CPUJan2022
Oracle Critical Patch Update Advisory - January 2022

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Patch, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Patch, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Patch, Third Party Advisory
cve@mitre.org

Source: cve@mitre.org
Type: Third Party Advisory
cve@mitre.org

Vulnerable Configuration:Configuration CCN 1:
  • cpe:/a:jquery:jquery-ui:1.11.4:*:*:*:*:*:*:*
  • AND
  • cpe:/a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:cognos_analytics:11.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:business_intelligence:12.2.1.3.0::~~enterprise~~~:*:*:*:*:*
  • OR cpe:/a:ibm:security_guardium_big_data_intelligence:3.1:*:*:*:*:*:*:*
  • OR cpe:/a:oracle:business_intelligence:12.2.1.4.0::~~enterprise~~~:*:*:*:*:*
  • OR cpe:/a:oracle:hospitality_cruise_fleet_management:9.0.11:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:cognos_analytics:11.1:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:security_identity_manager_virtual_appliance:7.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:ibm:security_identity_manager_virtual_appliance:7.0.1:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:20167103
    V
    		CVE-2016-7103
    2022-06-30
    oval:org.opensuse.security:def:113254
    P
    		python36-XStatic-jquery-ui-1.12.1.1-2.11 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:57104
    P
    		Security update for glibc (Moderate)
    2021-10-06
    oval:org.opensuse.security:def:106666
    P
    		python36-XStatic-jquery-ui-1.12.1.1-2.11 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:57972
    P
    		Security update for linuxptp (Important)
    2021-07-21
    oval:org.opensuse.security:def:57948
    P
    		Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)
    2021-06-18
    oval:org.opensuse.security:def:56998
    P
    		Security update for graphviz (Critical)
    2021-05-19
    oval:org.opensuse.security:def:57898
    P
    		Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP3) (Important)
    2021-04-28
    oval:org.opensuse.security:def:57555
    P
    		Security update for krb5-appl (Important)
    2021-02-19
    oval:org.opensuse.security:def:57829
    P
    		Security update for mutt (Important)
    2020-12-07
    oval:org.opensuse.security:def:57755
    P
    		Security update for libX11 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:56587
    P
    		Security update for compat-openssl098 (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:57270
    P
    		Security update for Xen and libvirt
    2020-12-01
    oval:org.opensuse.security:def:56424
    P
    		Security update for mariadb (Important)
    2020-12-01
    oval:org.opensuse.security:def:56825
    P
    		Security update for webkit2gtk3 (Important)
    2020-12-01
    oval:org.opensuse.security:def:56425
    P
    		Security update for wireshark (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:57867
    P
    		libvirt on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:57663
    P
    		apache-commons-beanutils on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:56447
    P
    		Security update for libzypp, zypper (Important)
    2020-12-01
    oval:org.opensuse.security:def:80607
    P
    		Security update for python-XStatic-jquery-ui (Low)
    2017-09-05
    oval:com.ubuntu.cosmic:def:201671030000000
    V
    		CVE-2016-7103 on Ubuntu 18.10 (cosmic) - medium.
    2017-03-15
    oval:com.ubuntu.artful:def:20167103000
    V
    		CVE-2016-7103 on Ubuntu 17.10 (artful) - medium.
    2017-03-15
    oval:com.ubuntu.trusty:def:20167103000
    V
    		CVE-2016-7103 on Ubuntu 14.04 LTS (trusty) - medium.
    2017-03-15
    oval:com.ubuntu.bionic:def:201671030000000
    V
    		CVE-2016-7103 on Ubuntu 18.04 LTS (bionic) - medium.
    2017-03-15
    oval:com.ubuntu.bionic:def:20167103000
    V
    		CVE-2016-7103 on Ubuntu 18.04 LTS (bionic) - medium.
    2017-03-15
    oval:com.ubuntu.xenial:def:20167103000
    V
    		CVE-2016-7103 on Ubuntu 16.04 LTS (xenial) - medium.
    2017-03-15
    oval:com.ubuntu.xenial:def:201671030000000
    V
    		CVE-2016-7103 on Ubuntu 16.04 LTS (xenial) - medium.
    2017-03-15
    oval:com.ubuntu.cosmic:def:20167103000
    V
    		CVE-2016-7103 on Ubuntu 18.10 (cosmic) - medium.
    2017-03-15
    oval:com.ubuntu.disco:def:201671030000000
    V
    		CVE-2016-7103 on Ubuntu 19.04 (disco) - medium.
    2017-03-15
    oval:com.ubuntu.precise:def:20167103000
    V
    		CVE-2016-7103 on Ubuntu 12.04 LTS (precise) - medium.
    2017-03-15
    BACK
    jquery jquery-ui 1.11.4
    oracle weblogic server 10.3.6.0.0
    oracle weblogic server 12.1.3.0.0
    ibm cognos analytics 11.0
    oracle weblogic server 12.2.1.3.0
    oracle business intelligence 12.2.1.3.0
    ibm security guardium big data intelligence 3.1
    oracle business intelligence 12.2.1.4.0
    oracle hospitality cruise fleet management 9.0.11
    ibm cognos analytics 11.1
    ibm security identity manager virtual appliance 7.0.2
    ibm security identity manager virtual appliance 7.0.1