CVE-2021-23445
Cross-site Scripting (XSS)
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
3.1
Cross-site Scripting (XSS)
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
CVE-2021-23445- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P - Updated
- 2026-11-02
EUVDEUVD-2021-2066
3.1
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
EUVD-2021-2066- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h73q-5wmj-q8pj
6.1
Cross site scripting in datatables.net
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
GHSA-h73q-5wmj-q8pj- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
NVD
3.1
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
CVE-2021-23445- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N - CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
OSVAZL-66567
6.1
CVE-2021-23445 affecting package reaper 3.1.1-22
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
AZL-66567- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSV
6.1
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
CVE-2021-23445- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2021-23445
6.1
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
DEBIAN-CVE-2021-23445- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVGHSA-h73q-5wmj-q8pj
6.1
Cross site scripting in datatables.net
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
GHSA-h73q-5wmj-q8pj- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
OSVRHSA-2024:3559
7.4
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.17 Security update
- Record
RHSA-2024:3559- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:3560
7.4
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.17 Security update
- Record
RHSA-2024:3560- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:3561
7.4
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.17 Security update
- Record
RHSA-2024:3561- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-23445
3.1
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
UBUNTU-CVE-2021-23445- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N - CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVCLSA-2026-1780620681 No score
TuxCare security update for datatables.net (2 CVEs)
TuxCare rebuilt datatables.net to address 2 CVEs. Fixed in 1.10.13-tuxcare.1.
- Record
CLSA-2026-1780620681- Updated
- 2026-11-02
OSVCLSA-2026-1792941558 No score
TuxCare security update for datatables.net (2 CVEs)
TuxCare rebuilt datatables.net to address 2 CVEs. Fixed in 1.10.19-tuxcare.1.
- Record
CLSA-2026-1792941558- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
datatables.netnpm |
before 1.11.3 | 1.11.3 |
reaperAzure Linux:2 |
through 3.1.1-22 | None known |
datatables.netTuxCare:npm From an advisory covering 2 CVEs |
1.10.13-tuxcare.0 up to 1.10.13-tuxcare.1, plus listed versions 1.10.13 |
1.10.13-tuxcare.1 |
datatables.netTuxCare:npm From an advisory covering 2 CVEs |
1.10.19-tuxcare.0 up to 1.10.19-tuxcare.1, plus listed versions 1.10.19 |
1.10.19-tuxcare.1 |
datatables.jsDebian:12 |
before 1.10.21+dfsg-3 | 1.10.21+dfsg-3 |
datatables.jsDebian:13 |
before 1.10.21+dfsg-3 | 1.10.21+dfsg-3 |
datatables.jsDebian:14 |
before 1.10.21+dfsg-3 | 1.10.21+dfsg-3 |
datatables.jsDebian:10 |
before 1.10.19+dfsg-1+deb10u1, plus listed versions 1.10.19+dfsg-1 |
1.10.19+dfsg-1+deb10u1 |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 3 CVEs |
before 0:3.3.22-1.Final_redhat_00001.1.el7eap | 0:3.3.22-1.Final_redhat_00001.1.el7eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 3 CVEs |
before 0:1.15.23-2.Final_redhat_00001.1.el7eap | 0:1.15.23-2.Final_redhat_00001.1.el7eap |
Show 117 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 3 CVEs |
before 0:1.15.23-2.Final_redhat_00001.1.el7eap | 0:1.15.23-2.Final_redhat_00001.1.el7eap |
eap7-apache-cxfRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 3 CVEs |
before 0:3.5.8-1.redhat_00001.1.el7eap | 0:3.5.8-1.redhat_00001.1.el7eap |
eap7-apache-cxf-rtRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 3 CVEs |
before 0:3.5.8-1.redhat_00001.1.el7eap | 0:3.5.8-1.redhat_00001.1.el7eap |
eap7-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 3 CVEs |
before 0:3.5.8-1.redhat_00001.1.el7eap | 0:3.5.8-1.redhat_00001.1.el7eap |
eap7-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 3 CVEs |
before 0:3.5.8-1.redhat_00001.1.el7eap | 0:3.5.8-1.redhat_00001.1.el7eap |
eap7-apache-cxfRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:3.5.8-1.redhat_00001.1.el8eap | 0:3.5.8-1.redhat_00001.1.el8eap |
eap7-apache-cxf-rtRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:3.5.8-1.redhat_00001.1.el8eap | 0:3.5.8-1.redhat_00001.1.el8eap |
eap7-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:3.5.8-1.redhat_00001.1.el8eap | 0:3.5.8-1.redhat_00001.1.el8eap |
eap7-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:3.5.8-1.redhat_00001.1.el8eap | 0:3.5.8-1.redhat_00001.1.el8eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:3.3.22-1.Final_redhat_00001.1.el8eap | 0:3.3.22-1.Final_redhat_00001.1.el8eap |
eap7-infinispanRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-cachestore-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-cachestore-remoteRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-client-hotrodRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-commonsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-component-annotationsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-hibernate-cache-commonsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-hibernate-cache-spiRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-hibernate-cache-v53Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-jboss-ejb-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:4.0.54-3.Final_redhat_00001.1.el8eap | 0:4.0.54-3.Final_redhat_00001.1.el8eap |
eap7-jboss-jsf-api_2.3_specRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:3.0.0-8.SP08_redhat_00001.1.el8eap | 0:3.0.0-8.SP08_redhat_00001.1.el8eap |
eap7-jboss-metadataRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:13.5.0-1.Final_redhat_00001.1.el8eap | 0:13.5.0-1.Final_redhat_00001.1.el8eap |
eap7-jboss-metadata-appclientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:13.5.0-1.Final_redhat_00001.1.el8eap | 0:13.5.0-1.Final_redhat_00001.1.el8eap |
eap7-jboss-metadata-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:13.5.0-1.Final_redhat_00001.1.el8eap | 0:13.5.0-1.Final_redhat_00001.1.el8eap |
eap7-jboss-metadata-earRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:13.5.0-1.Final_redhat_00001.1.el8eap | 0:13.5.0-1.Final_redhat_00001.1.el8eap |
eap7-jboss-metadata-ejbRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:13.5.0-1.Final_redhat_00001.1.el8eap | 0:13.5.0-1.Final_redhat_00001.1.el8eap |
eap7-jboss-metadata-webRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:13.5.0-1.Final_redhat_00001.1.el8eap | 0:13.5.0-1.Final_redhat_00001.1.el8eap |
eap7-jboss-modulesRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.12.3-3.Final_redhat_00001.1.el8eap | 0:1.12.3-3.Final_redhat_00001.1.el8eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.10.0-36.Final_redhat_00035.1.el8eap | 0:1.10.0-36.Final_redhat_00035.1.el8eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.10.0-36.Final_redhat_00035.1.el8eap | 0:1.10.0-36.Final_redhat_00035.1.el8eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.10.0-36.Final_redhat_00035.1.el8eap | 0:1.10.0-36.Final_redhat_00035.1.el8eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:2.2.32-1.SP1_redhat_00001.1.el8eap | 0:2.2.32-1.SP1_redhat_00001.1.el8eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:7.4.17-2.GA_redhat_00002.1.el8eap | 0:7.4.17-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-discoveryRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.2.4-1.Final_redhat_00001.1.el8eap | 0:1.2.4-1.Final_redhat_00001.1.el8eap |
eap7-wildfly-discovery-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.2.4-1.Final_redhat_00001.1.el8eap | 0:1.2.4-1.Final_redhat_00001.1.el8eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.15.23-2.Final_redhat_00001.1.el8eap | 0:1.15.23-2.Final_redhat_00001.1.el8eap |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.15.23-2.Final_redhat_00001.1.el8eap | 0:1.15.23-2.Final_redhat_00001.1.el8eap |
eap7-wildfly-http-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.1.17-1.Final_redhat_00002.1.el8eap | 0:1.1.17-1.Final_redhat_00002.1.el8eap |
eap7-wildfly-http-client-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.1.17-1.Final_redhat_00002.1.el8eap | 0:1.1.17-1.Final_redhat_00002.1.el8eap |
eap7-wildfly-http-ejb-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.1.17-1.Final_redhat_00002.1.el8eap | 0:1.1.17-1.Final_redhat_00002.1.el8eap |
eap7-wildfly-http-naming-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.1.17-1.Final_redhat_00002.1.el8eap | 0:1.1.17-1.Final_redhat_00002.1.el8eap |
eap7-wildfly-http-transaction-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.1.17-1.Final_redhat_00002.1.el8eap | 0:1.1.17-1.Final_redhat_00002.1.el8eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:7.4.17-2.GA_redhat_00002.1.el8eap | 0:7.4.17-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:7.4.17-2.GA_redhat_00002.1.el8eap | 0:7.4.17-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:7.4.17-2.GA_redhat_00002.1.el8eap | 0:7.4.17-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:7.4.17-2.GA_redhat_00002.1.el8eap | 0:7.4.17-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:7.4.17-2.GA_redhat_00002.1.el8eap | 0:7.4.17-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-transaction-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.1.19-1.Final_redhat_00001.1.el8eap | 0:1.1.19-1.Final_redhat_00001.1.el8eap |
eap7-wss4jRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-wss4j-bindingsRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-wss4j-policyRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-wss4j-ws-security-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-wss4j-ws-security-domRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-wss4j-ws-security-policy-staxRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-wss4j-ws-security-staxRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-xml-securityRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:2.3.4-1.redhat_00002.1.el8eap | 0:2.3.4-1.redhat_00002.1.el8eap |
eap7-apache-cxfRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:3.5.8-1.redhat_00001.1.el9eap | 0:3.5.8-1.redhat_00001.1.el9eap |
eap7-apache-cxf-rtRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:3.5.8-1.redhat_00001.1.el9eap | 0:3.5.8-1.redhat_00001.1.el9eap |
eap7-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:3.5.8-1.redhat_00001.1.el9eap | 0:3.5.8-1.redhat_00001.1.el9eap |
eap7-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:3.5.8-1.redhat_00001.1.el9eap | 0:3.5.8-1.redhat_00001.1.el9eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:3.3.22-1.Final_redhat_00001.1.el9eap | 0:3.3.22-1.Final_redhat_00001.1.el9eap |
eap7-infinispanRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-cachestore-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-cachestore-remoteRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-client-hotrodRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-commonsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-component-annotationsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-hibernate-cache-commonsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-hibernate-cache-spiRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-hibernate-cache-v53Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-jboss-ejb-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:4.0.54-3.Final_redhat_00001.1.el9eap | 0:4.0.54-3.Final_redhat_00001.1.el9eap |
eap7-jboss-jsf-api_2.3_specRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:3.0.0-8.SP08_redhat_00001.1.el9eap | 0:3.0.0-8.SP08_redhat_00001.1.el9eap |
eap7-jboss-metadataRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:13.5.0-1.Final_redhat_00001.1.el9eap | 0:13.5.0-1.Final_redhat_00001.1.el9eap |
eap7-jboss-metadata-appclientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:13.5.0-1.Final_redhat_00001.1.el9eap | 0:13.5.0-1.Final_redhat_00001.1.el9eap |
eap7-jboss-metadata-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:13.5.0-1.Final_redhat_00001.1.el9eap | 0:13.5.0-1.Final_redhat_00001.1.el9eap |
eap7-jboss-metadata-earRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:13.5.0-1.Final_redhat_00001.1.el9eap | 0:13.5.0-1.Final_redhat_00001.1.el9eap |
eap7-jboss-metadata-ejbRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:13.5.0-1.Final_redhat_00001.1.el9eap | 0:13.5.0-1.Final_redhat_00001.1.el9eap |
eap7-jboss-metadata-webRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:13.5.0-1.Final_redhat_00001.1.el9eap | 0:13.5.0-1.Final_redhat_00001.1.el9eap |
eap7-jboss-modulesRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.12.3-3.Final_redhat_00001.1.el9eap | 0:1.12.3-3.Final_redhat_00001.1.el9eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.10.0-36.Final_redhat_00035.1.el9eap | 0:1.10.0-36.Final_redhat_00035.1.el9eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.10.0-36.Final_redhat_00035.1.el9eap | 0:1.10.0-36.Final_redhat_00035.1.el9eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.10.0-36.Final_redhat_00035.1.el9eap | 0:1.10.0-36.Final_redhat_00035.1.el9eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:2.2.32-1.SP1_redhat_00001.1.el9eap | 0:2.2.32-1.SP1_redhat_00001.1.el9eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:7.4.17-2.GA_redhat_00002.1.el9eap | 0:7.4.17-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-discoveryRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.2.4-1.Final_redhat_00001.1.el9eap | 0:1.2.4-1.Final_redhat_00001.1.el9eap |
eap7-wildfly-discovery-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.2.4-1.Final_redhat_00001.1.el9eap | 0:1.2.4-1.Final_redhat_00001.1.el9eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.15.23-2.Final_redhat_00001.1.el9eap | 0:1.15.23-2.Final_redhat_00001.1.el9eap |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.15.23-2.Final_redhat_00001.1.el9eap | 0:1.15.23-2.Final_redhat_00001.1.el9eap |
eap7-wildfly-http-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.1.17-1.Final_redhat_00002.1.el9eap | 0:1.1.17-1.Final_redhat_00002.1.el9eap |
eap7-wildfly-http-client-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.1.17-1.Final_redhat_00002.1.el9eap | 0:1.1.17-1.Final_redhat_00002.1.el9eap |
eap7-wildfly-http-ejb-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.1.17-1.Final_redhat_00002.1.el9eap | 0:1.1.17-1.Final_redhat_00002.1.el9eap |
eap7-wildfly-http-naming-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.1.17-1.Final_redhat_00002.1.el9eap | 0:1.1.17-1.Final_redhat_00002.1.el9eap |
eap7-wildfly-http-transaction-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.1.17-1.Final_redhat_00002.1.el9eap | 0:1.1.17-1.Final_redhat_00002.1.el9eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:7.4.17-2.GA_redhat_00002.1.el9eap | 0:7.4.17-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:7.4.17-2.GA_redhat_00002.1.el9eap | 0:7.4.17-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:7.4.17-2.GA_redhat_00002.1.el9eap | 0:7.4.17-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:7.4.17-2.GA_redhat_00002.1.el9eap | 0:7.4.17-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:7.4.17-2.GA_redhat_00002.1.el9eap | 0:7.4.17-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-transaction-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.1.19-1.Final_redhat_00001.1.el9eap | 0:1.1.19-1.Final_redhat_00001.1.el9eap |
eap7-wss4jRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-wss4j-bindingsRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-wss4j-policyRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-wss4j-ws-security-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-wss4j-ws-security-domRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-wss4j-ws-security-policy-staxRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-wss4j-ws-security-staxRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-xml-securityRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:2.3.4-1.redhat_00002.1.el9eap | 0:2.3.4-1.redhat_00002.1.el9eap |
datatables.jsUbuntu:16.04:LTS |
All versions, plus listed versions 1.10.9+dfsg-11.10.10+dfsg-11.10.10+dfsg-21.10.11+dfsg-11.10.11+dfsg-1ubuntu11.10.11+dfsg-2 |
None known |
datatables.jsUbuntu:18.04:LTS |
All versions, plus listed versions 1.10.15+dfsg-21.10.16+dfsg-1 |
None known |
datatables.jsUbuntu:20.04:LTS |
All versions, plus listed versions 1.10.19+dfsg-11.10.20+dfsg-1 |
None known |
datatables.jsUbuntu:22.04:LTS |
All versions, plus listed versions 1.10.21+dfsg-21.10.21+dfsg-31.11.4+dfsg-1 |
None known |
datatables.jsUbuntu:24.04:LTS |
All versions, plus listed versions 1.11.5+dfsg-2 |
None known |
datatables.jsUbuntu:25.10 |
All versions, plus listed versions 1.11.5+dfsg-2 |
None known |
datatables.jsUbuntu:26.10 |
All versions, plus listed versions 1.11.5+dfsg-2build1 |
None known |
datatables.jsUbuntu:26.04:LTS |
All versions, plus listed versions 1.11.5+dfsg-21.11.5+dfsg-2build1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-23445 is a low vulnerability (CVSS 3.1) in Datatables Datatables.net, published September 27, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.98%, the 80th percentile. Fixed in datatables.net 1.11.3.
References
snyk.io/vuln/SNYK-JS-DATATABLESNET-1540544
snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1715371
snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1715376
github.com/DataTables/Dist-DataTables/commit/59a8d3f8a3c1138ab08704e783bc52bfe88d7c9b
cdn.datatables.net/1.11.3
lists.debian.org/debian-lts-announce/2023/08/msg00018.html
Show 48 moreShow less
security.netapp.com/advisory/ntap-20240621-0006
nvd.nist.gov/vuln/detail/CVE-2021-23445
github.com/advisories/GHSA-h73q-5wmj-q8pj
security-tracker.debian.org/tracker/CVE-2021-23445
github.com/DataTables/Dist-DataTables
access.redhat.com/errata/RHSA-2024:3559
access.redhat.com/security/updates/classification
access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4
access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide
bugzilla.redhat.com/show_bug.cgi?id=2257732
bugzilla.redhat.com/show_bug.cgi?id=2262849
bugzilla.redhat.com/show_bug.cgi?id=2270732
issues.redhat.com/browse/JBEAP-25637
issues.redhat.com/browse/JBEAP-25786
issues.redhat.com/browse/JBEAP-26406
issues.redhat.com/browse/JBEAP-26438
issues.redhat.com/browse/JBEAP-26680
issues.redhat.com/browse/JBEAP-26692
issues.redhat.com/browse/JBEAP-26705
issues.redhat.com/browse/JBEAP-26718
issues.redhat.com/browse/JBEAP-26782
issues.redhat.com/browse/JBEAP-26815
issues.redhat.com/browse/JBEAP-26824
issues.redhat.com/browse/JBEAP-26828
issues.redhat.com/browse/JBEAP-26922
issues.redhat.com/browse/JBEAP-26944
issues.redhat.com/browse/JBEAP-26959
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3559.json
access.redhat.com/security/cve/CVE-2021-23445
cve.org/CVERecord?id=CVE-2021-23445
access.redhat.com/security/cve/CVE-2024-1233
cve.org/CVERecord?id=CVE-2024-1233
nvd.nist.gov/vuln/detail/CVE-2024-1233
github.com/advisories/GHSA-v4mm-q8fv-r2w5
github.com/wildfly/wildfly/pull/17812/commits/0c02350bc0d84287bed46e7c32f90b36e50d3523
issues.redhat.com/browse/WFLY-19226
access.redhat.com/security/cve/CVE-2024-28752
cve.org/CVERecord?id=CVE-2024-28752
nvd.nist.gov/vuln/detail/CVE-2024-28752
cxf.apache.org/security-advisories.data/CVE-2024-28752.txt
github.com/advisories/GHSA-qmgx-j96g-4428
access.redhat.com/errata/RHSA-2024:3560
issues.redhat.com/browse/JBEAP-26439
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3560.json
access.redhat.com/errata/RHSA-2024:3561
issues.redhat.com/browse/JBEAP-26440
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3561.json
ubuntu.com/security/CVE-2021-23445