APEX

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

jQuery & jQueryui vulnerabilities

JeeebeZApr 29 2019 — edited May 15 2019

I had a question in regards to the following reports. They affect all versions of APEX up to 18.1 (to my knowledge).

jQuery

https://nvd.nist.gov/vuln/detail/CVE-2019-11358

https://nvd.nist.gov/vuln/detail/CVE-2015-9251

jQuery ui

https://nvd.nist.gov/vuln/detail/CVE-2016-7103

Do they cause any potential risk to an APEX instance? I don't think they could cause any issues unless, someone who had access to the developer tools actually implemented something. Is this correct or is there some potential risk that I'm not seeing?

Added on Apr 29 2019

#apex-discussions

1 comment

342 views