CVE-2021-23445
Cross-site Scripting (XSS)
3.1 LowFix available
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- High
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
1.98%Up 0.7 points since Sep 28, 2021
What each source reports
CVE List Score used
Cross-site Scripting (XSS)
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
CVE-2021-23445- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P - Updated
- 2026-11-02
EUVDEUVD-2021-2066
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
EUVD-2021-2066- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h73q-5wmj-q8pj
Cross site scripting in datatables.net
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
GHSA-h73q-5wmj-q8pj- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
NVD
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
CVE-2021-23445- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N - CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
OSVAZL-66567
CVE-2021-23445 affecting package reaper 3.1.1-22
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
AZL-66567- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSV
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
CVE-2021-23445- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
Show 8 moreShow less
OSVDEBIAN-CVE-2021-23445
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
DEBIAN-CVE-2021-23445- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVGHSA-h73q-5wmj-q8pj
Cross site scripting in datatables.net
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
GHSA-h73q-5wmj-q8pj- CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
OSVRHSA-2024:3559
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.17 Security update
- Record
RHSA-2024:3559- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:3560
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.17 Security update
- Record
RHSA-2024:3560- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVRHSA-2024:3561
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.17 Security update
- Record
RHSA-2024:3561- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-23445
This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped.
- Record
UBUNTU-CVE-2021-23445- CVSS 3.1
- 3.1 Low
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N - CVSS 3.1
- 6.1 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - Updated
- 2026-11-02
OSVCLSA-2026-1780620681 No score
TuxCare security update for datatables.net (2 CVEs)
TuxCare rebuilt datatables.net to address 2 CVEs. Fixed in 1.10.13-tuxcare.1.
- Record
CLSA-2026-1780620681- Updated
- 2026-11-02
OSVCLSA-2026-1792941558 No score
TuxCare security update for datatables.net (2 CVEs)
TuxCare rebuilt datatables.net to address 2 CVEs. Fixed in 1.10.19-tuxcare.1.
- Record
CLSA-2026-1792941558- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
datatables.netnpm |
before 1.11.3 | 1.11.3 |
reaperAzure Linux:2 |
through 3.1.1-22 | None known |
datatables.netTuxCare:npm |
1.10.13-tuxcare.0 up to 1.10.13-tuxcare.1, plus listed versions 1.10.13 |
1.10.13-tuxcare.1 |
datatables.netTuxCare:npm |
1.10.19-tuxcare.0 up to 1.10.19-tuxcare.1, plus listed versions 1.10.19 |
1.10.19-tuxcare.1 |
datatables.jsDebian:12 |
before 1.10.21+dfsg-3 | 1.10.21+dfsg-3 |
datatables.jsDebian:13 |
before 1.10.21+dfsg-3 | 1.10.21+dfsg-3 |
datatables.jsDebian:14 |
before 1.10.21+dfsg-3 | 1.10.21+dfsg-3 |
datatables.jsDebian:10 |
before 1.10.19+dfsg-1+deb10u1, plus listed versions 1.10.19+dfsg-1 |
1.10.19+dfsg-1+deb10u1 |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el7 |
before 0:3.3.22-1.Final_redhat_00001.1.el7eap | 0:3.3.22-1.Final_redhat_00001.1.el7eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el7 |
before 0:1.15.23-2.Final_redhat_00001.1.el7eap | 0:1.15.23-2.Final_redhat_00001.1.el7eap |
Show 117 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el7 |
before 0:1.15.23-2.Final_redhat_00001.1.el7eap | 0:1.15.23-2.Final_redhat_00001.1.el7eap |
eap7-apache-cxfRed Hat:jboss_enterprise_application_platform:7.4::el7 |
before 0:3.5.8-1.redhat_00001.1.el7eap | 0:3.5.8-1.redhat_00001.1.el7eap |
eap7-apache-cxf-rtRed Hat:jboss_enterprise_application_platform:7.4::el7 |
before 0:3.5.8-1.redhat_00001.1.el7eap | 0:3.5.8-1.redhat_00001.1.el7eap |
eap7-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform:7.4::el7 |
before 0:3.5.8-1.redhat_00001.1.el7eap | 0:3.5.8-1.redhat_00001.1.el7eap |
eap7-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform:7.4::el7 |
before 0:3.5.8-1.redhat_00001.1.el7eap | 0:3.5.8-1.redhat_00001.1.el7eap |
eap7-apache-cxfRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:3.5.8-1.redhat_00001.1.el8eap | 0:3.5.8-1.redhat_00001.1.el8eap |
eap7-apache-cxf-rtRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:3.5.8-1.redhat_00001.1.el8eap | 0:3.5.8-1.redhat_00001.1.el8eap |
eap7-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:3.5.8-1.redhat_00001.1.el8eap | 0:3.5.8-1.redhat_00001.1.el8eap |
eap7-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:3.5.8-1.redhat_00001.1.el8eap | 0:3.5.8-1.redhat_00001.1.el8eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:3.3.22-1.Final_redhat_00001.1.el8eap | 0:3.3.22-1.Final_redhat_00001.1.el8eap |
eap7-infinispanRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-cachestore-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-cachestore-remoteRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-client-hotrodRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-commonsRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-component-annotationsRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-hibernate-cache-commonsRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-hibernate-cache-spiRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-infinispan-hibernate-cache-v53Red Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:11.0.19-2.Final_redhat_00001.1.el8eap | 0:11.0.19-2.Final_redhat_00001.1.el8eap |
eap7-jboss-ejb-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:4.0.54-3.Final_redhat_00001.1.el8eap | 0:4.0.54-3.Final_redhat_00001.1.el8eap |
eap7-jboss-jsf-api_2.3_specRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:3.0.0-8.SP08_redhat_00001.1.el8eap | 0:3.0.0-8.SP08_redhat_00001.1.el8eap |
eap7-jboss-metadataRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:13.5.0-1.Final_redhat_00001.1.el8eap | 0:13.5.0-1.Final_redhat_00001.1.el8eap |
eap7-jboss-metadata-appclientRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:13.5.0-1.Final_redhat_00001.1.el8eap | 0:13.5.0-1.Final_redhat_00001.1.el8eap |
eap7-jboss-metadata-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:13.5.0-1.Final_redhat_00001.1.el8eap | 0:13.5.0-1.Final_redhat_00001.1.el8eap |
eap7-jboss-metadata-earRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:13.5.0-1.Final_redhat_00001.1.el8eap | 0:13.5.0-1.Final_redhat_00001.1.el8eap |
eap7-jboss-metadata-ejbRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:13.5.0-1.Final_redhat_00001.1.el8eap | 0:13.5.0-1.Final_redhat_00001.1.el8eap |
eap7-jboss-metadata-webRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:13.5.0-1.Final_redhat_00001.1.el8eap | 0:13.5.0-1.Final_redhat_00001.1.el8eap |
eap7-jboss-modulesRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.12.3-3.Final_redhat_00001.1.el8eap | 0:1.12.3-3.Final_redhat_00001.1.el8eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.10.0-36.Final_redhat_00035.1.el8eap | 0:1.10.0-36.Final_redhat_00035.1.el8eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.10.0-36.Final_redhat_00035.1.el8eap | 0:1.10.0-36.Final_redhat_00035.1.el8eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.10.0-36.Final_redhat_00035.1.el8eap | 0:1.10.0-36.Final_redhat_00035.1.el8eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:2.2.32-1.SP1_redhat_00001.1.el8eap | 0:2.2.32-1.SP1_redhat_00001.1.el8eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:7.4.17-2.GA_redhat_00002.1.el8eap | 0:7.4.17-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-discoveryRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.2.4-1.Final_redhat_00001.1.el8eap | 0:1.2.4-1.Final_redhat_00001.1.el8eap |
eap7-wildfly-discovery-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.2.4-1.Final_redhat_00001.1.el8eap | 0:1.2.4-1.Final_redhat_00001.1.el8eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.15.23-2.Final_redhat_00001.1.el8eap | 0:1.15.23-2.Final_redhat_00001.1.el8eap |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.15.23-2.Final_redhat_00001.1.el8eap | 0:1.15.23-2.Final_redhat_00001.1.el8eap |
eap7-wildfly-http-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.1.17-1.Final_redhat_00002.1.el8eap | 0:1.1.17-1.Final_redhat_00002.1.el8eap |
eap7-wildfly-http-client-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.1.17-1.Final_redhat_00002.1.el8eap | 0:1.1.17-1.Final_redhat_00002.1.el8eap |
eap7-wildfly-http-ejb-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.1.17-1.Final_redhat_00002.1.el8eap | 0:1.1.17-1.Final_redhat_00002.1.el8eap |
eap7-wildfly-http-naming-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.1.17-1.Final_redhat_00002.1.el8eap | 0:1.1.17-1.Final_redhat_00002.1.el8eap |
eap7-wildfly-http-transaction-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.1.17-1.Final_redhat_00002.1.el8eap | 0:1.1.17-1.Final_redhat_00002.1.el8eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:7.4.17-2.GA_redhat_00002.1.el8eap | 0:7.4.17-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:7.4.17-2.GA_redhat_00002.1.el8eap | 0:7.4.17-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:7.4.17-2.GA_redhat_00002.1.el8eap | 0:7.4.17-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:7.4.17-2.GA_redhat_00002.1.el8eap | 0:7.4.17-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:7.4.17-2.GA_redhat_00002.1.el8eap | 0:7.4.17-2.GA_redhat_00002.1.el8eap |
eap7-wildfly-transaction-clientRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:1.1.19-1.Final_redhat_00001.1.el8eap | 0:1.1.19-1.Final_redhat_00001.1.el8eap |
eap7-wss4jRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-wss4j-bindingsRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-wss4j-policyRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-wss4j-ws-security-commonRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-wss4j-ws-security-domRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-wss4j-ws-security-policy-staxRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-wss4j-ws-security-staxRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:2.4.3-1.redhat_00001.1.el8eap | 0:2.4.3-1.redhat_00001.1.el8eap |
eap7-xml-securityRed Hat:jboss_enterprise_application_platform:7.4::el8 |
before 0:2.3.4-1.redhat_00002.1.el8eap | 0:2.3.4-1.redhat_00002.1.el8eap |
eap7-apache-cxfRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:3.5.8-1.redhat_00001.1.el9eap | 0:3.5.8-1.redhat_00001.1.el9eap |
eap7-apache-cxf-rtRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:3.5.8-1.redhat_00001.1.el9eap | 0:3.5.8-1.redhat_00001.1.el9eap |
eap7-apache-cxf-servicesRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:3.5.8-1.redhat_00001.1.el9eap | 0:3.5.8-1.redhat_00001.1.el9eap |
eap7-apache-cxf-toolsRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:3.5.8-1.redhat_00001.1.el9eap | 0:3.5.8-1.redhat_00001.1.el9eap |
eap7-hal-consoleRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:3.3.22-1.Final_redhat_00001.1.el9eap | 0:3.3.22-1.Final_redhat_00001.1.el9eap |
eap7-infinispanRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-cachestore-jdbcRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-cachestore-remoteRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-client-hotrodRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-commonsRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-component-annotationsRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-hibernate-cache-commonsRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-hibernate-cache-spiRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-infinispan-hibernate-cache-v53Red Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:11.0.19-2.Final_redhat_00001.1.el9eap | 0:11.0.19-2.Final_redhat_00001.1.el9eap |
eap7-jboss-ejb-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:4.0.54-3.Final_redhat_00001.1.el9eap | 0:4.0.54-3.Final_redhat_00001.1.el9eap |
eap7-jboss-jsf-api_2.3_specRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:3.0.0-8.SP08_redhat_00001.1.el9eap | 0:3.0.0-8.SP08_redhat_00001.1.el9eap |
eap7-jboss-metadataRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:13.5.0-1.Final_redhat_00001.1.el9eap | 0:13.5.0-1.Final_redhat_00001.1.el9eap |
eap7-jboss-metadata-appclientRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:13.5.0-1.Final_redhat_00001.1.el9eap | 0:13.5.0-1.Final_redhat_00001.1.el9eap |
eap7-jboss-metadata-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:13.5.0-1.Final_redhat_00001.1.el9eap | 0:13.5.0-1.Final_redhat_00001.1.el9eap |
eap7-jboss-metadata-earRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:13.5.0-1.Final_redhat_00001.1.el9eap | 0:13.5.0-1.Final_redhat_00001.1.el9eap |
eap7-jboss-metadata-ejbRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:13.5.0-1.Final_redhat_00001.1.el9eap | 0:13.5.0-1.Final_redhat_00001.1.el9eap |
eap7-jboss-metadata-webRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:13.5.0-1.Final_redhat_00001.1.el9eap | 0:13.5.0-1.Final_redhat_00001.1.el9eap |
eap7-jboss-modulesRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.12.3-3.Final_redhat_00001.1.el9eap | 0:1.12.3-3.Final_redhat_00001.1.el9eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.10.0-36.Final_redhat_00035.1.el9eap | 0:1.10.0-36.Final_redhat_00035.1.el9eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.10.0-36.Final_redhat_00035.1.el9eap | 0:1.10.0-36.Final_redhat_00035.1.el9eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.10.0-36.Final_redhat_00035.1.el9eap | 0:1.10.0-36.Final_redhat_00035.1.el9eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:2.2.32-1.SP1_redhat_00001.1.el9eap | 0:2.2.32-1.SP1_redhat_00001.1.el9eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:7.4.17-2.GA_redhat_00002.1.el9eap | 0:7.4.17-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-discoveryRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.2.4-1.Final_redhat_00001.1.el9eap | 0:1.2.4-1.Final_redhat_00001.1.el9eap |
eap7-wildfly-discovery-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.2.4-1.Final_redhat_00001.1.el9eap | 0:1.2.4-1.Final_redhat_00001.1.el9eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.15.23-2.Final_redhat_00001.1.el9eap | 0:1.15.23-2.Final_redhat_00001.1.el9eap |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.15.23-2.Final_redhat_00001.1.el9eap | 0:1.15.23-2.Final_redhat_00001.1.el9eap |
eap7-wildfly-http-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.1.17-1.Final_redhat_00002.1.el9eap | 0:1.1.17-1.Final_redhat_00002.1.el9eap |
eap7-wildfly-http-client-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.1.17-1.Final_redhat_00002.1.el9eap | 0:1.1.17-1.Final_redhat_00002.1.el9eap |
eap7-wildfly-http-ejb-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.1.17-1.Final_redhat_00002.1.el9eap | 0:1.1.17-1.Final_redhat_00002.1.el9eap |
eap7-wildfly-http-naming-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.1.17-1.Final_redhat_00002.1.el9eap | 0:1.1.17-1.Final_redhat_00002.1.el9eap |
eap7-wildfly-http-transaction-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.1.17-1.Final_redhat_00002.1.el9eap | 0:1.1.17-1.Final_redhat_00002.1.el9eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:7.4.17-2.GA_redhat_00002.1.el9eap | 0:7.4.17-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-java-jdk17Red Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:7.4.17-2.GA_redhat_00002.1.el9eap | 0:7.4.17-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:7.4.17-2.GA_redhat_00002.1.el9eap | 0:7.4.17-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:7.4.17-2.GA_redhat_00002.1.el9eap | 0:7.4.17-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:7.4.17-2.GA_redhat_00002.1.el9eap | 0:7.4.17-2.GA_redhat_00002.1.el9eap |
eap7-wildfly-transaction-clientRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:1.1.19-1.Final_redhat_00001.1.el9eap | 0:1.1.19-1.Final_redhat_00001.1.el9eap |
eap7-wss4jRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-wss4j-bindingsRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-wss4j-policyRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-wss4j-ws-security-commonRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-wss4j-ws-security-domRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-wss4j-ws-security-policy-staxRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-wss4j-ws-security-staxRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:2.4.3-1.redhat_00001.1.el9eap | 0:2.4.3-1.redhat_00001.1.el9eap |
eap7-xml-securityRed Hat:jboss_enterprise_application_platform:7.4::el9 |
before 0:2.3.4-1.redhat_00002.1.el9eap | 0:2.3.4-1.redhat_00002.1.el9eap |
datatables.jsUbuntu:16.04:LTS |
All versions, plus listed versions 1.10.9+dfsg-11.10.10+dfsg-11.10.10+dfsg-21.10.11+dfsg-11.10.11+dfsg-1ubuntu11.10.11+dfsg-2 |
None known |
datatables.jsUbuntu:18.04:LTS |
All versions, plus listed versions 1.10.15+dfsg-21.10.16+dfsg-1 |
None known |
datatables.jsUbuntu:20.04:LTS |
All versions, plus listed versions 1.10.19+dfsg-11.10.20+dfsg-1 |
None known |
datatables.jsUbuntu:22.04:LTS |
All versions, plus listed versions 1.10.21+dfsg-21.10.21+dfsg-31.11.4+dfsg-1 |
None known |
datatables.jsUbuntu:24.04:LTS |
All versions, plus listed versions 1.11.5+dfsg-2 |
None known |
datatables.jsUbuntu:25.10 |
All versions, plus listed versions 1.11.5+dfsg-2 |
None known |
datatables.jsUbuntu:26.10 |
All versions, plus listed versions 1.11.5+dfsg-2build1 |
None known |
datatables.jsUbuntu:26.04:LTS |
All versions, plus listed versions 1.11.5+dfsg-21.11.5+dfsg-2build1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, published | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-23445 is a low vulnerability (CVSS 3.1) in Datatables Datatables.net, published September 27, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.98%, the 80th percentile. Fixed in datatables.net 1.11.3.
References
snyk.io/vuln/SNYK-JS-DATATABLESNET-1540544
github.com/DataTables/Dist-DataTables/commit/59a8d3f8a3c1138ab08704e783bc52bfe88d7c9b
cdn.datatables.net/1.11.3
lists.debian.org/debian-lts-announce/2023/08/msg00018.html
Show 48 moreShow less
security.netapp.com/advisory/ntap-20240621-0006
nvd.nist.gov/vuln/detail/CVE-2021-23445
security-tracker.debian.org/tracker/CVE-2021-23445
access.redhat.com/errata/RHSA-2024:3559
bugzilla.redhat.com/show_bug.cgi?id=2257732
issues.redhat.com/browse/JBEAP-25637
security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_3559.json
cve.org/CVERecord?id=CVE-2021-23445
cxf.apache.org/security-advisories.data/CVE-2024-28752.txt
ubuntu.com/security/CVE-2021-23445