CVE-2016-10735

fonts-glyphicons-halflings: In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS ispossible in the data-target attribute, a differ...

CVE-2016-10735 is fixed in 78 products on 1 platform, first by RHSA-2020:4847, released November 4, 2020. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
6.1
Low
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0404
90th percentile

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS ispossible in the data-target attribute, a different vulnerability thanCVE-2018-14041.

Where it's fixed

ProductFixed inFixReleased
Linux
apache-commons-collections · RHEL 8 0:3.2.2-10.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
apache-commons-collections · ol 8 0:3.2.2-10.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
apache-commons-lang · RHEL 8 0:2.6-21.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
apache-commons-lang · ol 8 0:2.6-21.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
apache-commons-net · RHEL 8 0:3.6-3.module+el8.3.0+6805+72837426 RHSA-2020:4847 Nov 4, 2020
apache-commons-net · ol 8 0:3.6-3.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
bea-stax-api · RHEL 8 0:1.2.0-16.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
bea-stax-api · ol 8 0:1.2.0-16.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
bind-dyndb-ldap · RHEL 8 0:11.3-1.module+el8.3.0+6993+104f8db0 RHSA-2020:4670 Nov 4, 2020
bind-dyndb-ldap · ol 8 0:11.3-1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
custodia · RHEL 8 0:0.6.0-3.module+el8.1.0+4098+f286395e RHSA-2020:4670 Nov 4, 2020
custodia · ol 8 0:0.6.0-3.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
fonts-glyphicons-halflings · Ubuntu 24.10 (oracular) 1.009~3.4.1+dfsg-3 fonts-glyphicons-halflings 1.009~3.4.1+dfsg-3 Jan 16, 2026
fonts-glyphicons-halflings · Ubuntu 25.04 (plucky) 1.009~3.4.1+dfsg-3 fonts-glyphicons-halflings 1.009~3.4.1+dfsg-3 Jan 16, 2026
glassfish-fastinfoset · RHEL 8 0:1.2.13-9.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
glassfish-fastinfoset · ol 8 0:1.2.13-9.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
glassfish-jaxb-api · RHEL 8 0:2.2.12-8.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
glassfish-jaxb-api · ol 8 0:2.2.12-8.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
glassfish-jaxb-core · RHEL 8 0:2.2.11-11.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
glassfish-jaxb-core · ol 8 0:2.2.11-11.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
glassfish-jaxb-runtime · RHEL 8 0:2.2.11-11.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
glassfish-jaxb-runtime · ol 8 0:2.2.11-11.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
glassfish-jaxb-txw2 · RHEL 8 0:2.2.11-11.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
glassfish-jaxb-txw2 · ol 8 0:2.2.11-11.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
ipa-client · RHEL 8 0:4.8.7-12.module+el8.3.0+8223+6212645f RHSA-2020:4670 Nov 4, 2020
ipa-client · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
ipa-client-common · RHEL 8 0:4.8.7-12.module+el8.3.0+8223+6212645f RHSA-2020:4670 Nov 4, 2020
ipa-client-common · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
ipa-client-epn · RHEL 8 0:4.8.7-12.module+el8.3.0+8223+6212645f RHSA-2020:4670 Nov 4, 2020
ipa-client-epn · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
ipa-client-samba · RHEL 8 0:4.8.7-12.module+el8.3.0+8223+6212645f RHSA-2020:4670 Nov 4, 2020
ipa-client-samba · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
ipa-common · RHEL 8 0:4.8.7-12.module+el8.3.0+8223+6212645f RHSA-2020:4670 Nov 4, 2020
ipa-common · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
ipa-healthcheck · RHEL 8 0:0.4-6.module+el8.3.0+7710+e2408ce4 RHSA-2020:4670 Nov 4, 2020
ipa-healthcheck · ol 8 0:0.4-6.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
ipa-healthcheck-core · RHEL 8 0:0.4-6.module+el8.3.0+7711+c4441980 RHSA-2020:4670 Nov 4, 2020
ipa-healthcheck-core · ol 8 0:0.4-6.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
ipa-python-compat · RHEL 8 0:4.8.7-12.module+el8.3.0+8223+6212645f RHSA-2020:4670 Nov 4, 2020
ipa-python-compat · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
ipa-selinux · RHEL 8 0:4.8.7-12.module+el8.3.0+8223+6212645f RHSA-2020:4670 Nov 4, 2020
ipa-selinux · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
ipa-server · RHEL 8 0:4.8.7-12.module+el8.3.0+8222+c1bff54a RHSA-2020:4670 Nov 4, 2020
ipa-server · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
ipa-server-common · RHEL 8 0:4.8.7-12.module+el8.3.0+8222+c1bff54a RHSA-2020:4670 Nov 4, 2020
ipa-server-common · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
ipa-server-dns · RHEL 8 0:4.8.7-12.module+el8.3.0+8222+c1bff54a RHSA-2020:4670 Nov 4, 2020
ipa-server-dns · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
ipa-server-trust-ad · RHEL 8 0:4.8.7-12.module+el8.3.0+8222+c1bff54a RHSA-2020:4670 Nov 4, 2020
ipa-server-trust-ad · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
jackson-annotations · RHEL 8 0:2.10.0-1.module+el8.2.0+5059+3eb3af25 RHSA-2020:4847 Nov 4, 2020
jackson-annotations · ol 8 0:2.10.0-1.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
jackson-core · RHEL 8 0:2.10.0-1.module+el8.2.0+5059+3eb3af25 RHSA-2020:4847 Nov 4, 2020
jackson-core · ol 8 0:2.10.0-1.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
jackson-databind · RHEL 8 0:2.10.0-1.module+el8.2.0+5059+3eb3af25 RHSA-2020:4847 Nov 4, 2020
jackson-databind · ol 8 0:2.10.0-1.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
jackson-jaxrs-json-provider · RHEL 8 0:2.9.9-1.module+el8.1.0+3832+9784644d RHSA-2020:4847 Nov 4, 2020
jackson-jaxrs-json-provider · ol 8 0:2.9.9-1.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
jackson-jaxrs-providers · RHEL 8 0:2.9.9-1.module+el8.1.0+3832+9784644d RHSA-2020:4847 Nov 4, 2020
jackson-jaxrs-providers · ol 8 0:2.9.9-1.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
jackson-module-jaxb-annotations · RHEL 8 0:2.7.6-4.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
jackson-module-jaxb-annotations · ol 8 0:2.7.6-4.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
jakarta-commons-httpclient · RHEL 8 1:3.1-28.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
jakarta-commons-httpclient · ol 8 1:3.1-28.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
javassist · RHEL 8 0:3.18.1-8.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
javassist · ol 8 0:3.18.1-8.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
javassist-javadoc · RHEL 8 0:3.18.1-8.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
javassist-javadoc · ol 8 0:3.18.1-8.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
jss · RHEL 8 0:4.7.3-1.module+el8.3.0+8058+d5cd4219 RHSA-2020:4847 Nov 4, 2020
jss · ol 8 0:4.7.3-1.module+el8.3.0+7857+983338ee ELSA-2020-4847 Nov 10, 2020
jss-javadoc · RHEL 8 0:4.7.3-1.module+el8.3.0+8058+d5cd4219 RHSA-2020:4847 Nov 4, 2020
jss-javadoc · ol 8 0:4.7.3-1.module+el8.3.0+7857+983338ee ELSA-2020-4847 Nov 10, 2020
ldapjdk · RHEL 8 0:4.22.0-1.module+el8.3.0+6784+6e1e4c62 RHSA-2020:4847 Nov 4, 2020
ldapjdk · ol 8 0:4.22.0-1.module+el8.3.0+7857+983338ee ELSA-2020-4847 Nov 10, 2020
ldapjdk-javadoc · RHEL 8 0:4.22.0-1.module+el8.3.0+6784+6e1e4c62 RHSA-2020:4847 Nov 4, 2020
ldapjdk-javadoc · ol 8 0:4.22.0-1.module+el8.3.0+7857+983338ee ELSA-2020-4847 Nov 10, 2020
libjs-bootstrap · Ubuntu 24.10 (oracular) 3.4.1+dfsg-3 libjs-bootstrap 3.4.1+dfsg-3 Jan 16, 2026
libjs-bootstrap · Ubuntu 25.04 (plucky) 3.4.1+dfsg-3 libjs-bootstrap 3.4.1+dfsg-3 Jan 16, 2026
opendnssec · RHEL 8 0:2.1.6-2.module+el8.3.0+6580+328a3362 RHSA-2020:4670 Nov 4, 2020
opendnssec · ol 8 0:2.1.6-2.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
pki-base · RHEL 8 0:10.9.4-1.module+el8.3.0+8058+d5cd4219 RHSA-2020:4847 Nov 4, 2020
pki-base · ol 8 0:10.9.4-1.0.1.module+el8.3.0+7857+983338ee ELSA-2020-4847 Nov 10, 2020
pki-base-java · RHEL 8 0:10.9.4-1.module+el8.3.0+8058+d5cd4219 RHSA-2020:4847 Nov 4, 2020
pki-base-java · ol 8 0:10.9.4-1.0.1.module+el8.3.0+7857+983338ee ELSA-2020-4847 Nov 10, 2020
pki-ca · RHEL 8 0:10.9.4-1.module+el8.3.0+8058+d5cd4219 RHSA-2020:4847 Nov 4, 2020
pki-ca · ol 8 0:10.9.4-1.0.1.module+el8.3.0+7857+983338ee ELSA-2020-4847 Nov 10, 2020
pki-kra · RHEL 8 0:10.9.4-1.module+el8.3.0+8058+d5cd4219 RHSA-2020:4847 Nov 4, 2020
pki-kra · ol 8 0:10.9.4-1.0.1.module+el8.3.0+7857+983338ee ELSA-2020-4847 Nov 10, 2020
pki-server · RHEL 8 0:10.9.4-1.module+el8.3.0+8058+d5cd4219 RHSA-2020:4847 Nov 4, 2020
pki-server · ol 8 0:10.9.4-1.0.1.module+el8.3.0+7857+983338ee ELSA-2020-4847 Nov 10, 2020
pki-servlet-4.0-api · RHEL 8 1:9.0.30-1.module+el8.3.0+6730+8f9c6254 RHSA-2020:4847 Nov 4, 2020
pki-servlet-4.0-api · ol 8 1:9.0.30-1.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
pki-servlet-engine · RHEL 8 1:9.0.30-1.module+el8.3.0+6730+8f9c6254 RHSA-2020:4847 Nov 4, 2020
pki-servlet-engine · ol 8 1:9.0.30-1.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
pki-symkey · RHEL 8 0:10.9.4-1.module+el8.3.0+8058+d5cd4219 RHSA-2020:4847 Nov 4, 2020
pki-symkey · ol 8 0:10.9.4-1.0.1.module+el8.3.0+7857+983338ee ELSA-2020-4847 Nov 10, 2020
pki-tools · RHEL 8 0:10.9.4-1.module+el8.3.0+8058+d5cd4219 RHSA-2020:4847 Nov 4, 2020
pki-tools · ol 8 0:10.9.4-1.0.1.module+el8.3.0+7857+983338ee ELSA-2020-4847 Nov 10, 2020
python-nss-doc · RHEL 8 0:1.0.1-10.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
python-nss-doc · ol 8 0:1.0.1-10.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
python3-custodia · RHEL 8 0:0.6.0-3.module+el8.1.0+4098+f286395e RHSA-2020:4670 Nov 4, 2020
python3-custodia · ol 8 0:0.6.0-3.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
python3-ipaclient · RHEL 8 0:4.8.7-12.module+el8.3.0+8223+6212645f RHSA-2020:4670 Nov 4, 2020
python3-ipaclient · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
python3-ipalib · RHEL 8 0:4.8.7-12.module+el8.3.0+8223+6212645f RHSA-2020:4670 Nov 4, 2020
python3-ipalib · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
python3-ipaserver · RHEL 8 0:4.8.7-12.module+el8.3.0+8222+c1bff54a RHSA-2020:4670 Nov 4, 2020
python3-ipaserver · ol 8 0:4.8.7-12.0.1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
python3-jwcrypto · RHEL 8 0:0.5.0-1.module+el8.1.0+4107+4a66eb87 RHSA-2020:4670 Nov 4, 2020
python3-jwcrypto · ol 8 0:0.5.0-1.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
python3-kdcproxy · RHEL 8 0:0.4-5.module+el8.2.0+4691+a05b2456 RHSA-2020:4670 Nov 4, 2020
python3-kdcproxy · ol 8 0:0.4-5.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
python3-nss · RHEL 8 0:1.0.1-10.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
python3-nss · ol 8 0:1.0.1-10.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
python3-pki · RHEL 8 0:10.9.4-1.module+el8.3.0+8058+d5cd4219 RHSA-2020:4847 Nov 4, 2020
python3-pki · ol 8 0:10.9.4-1.0.1.module+el8.3.0+7857+983338ee ELSA-2020-4847 Nov 10, 2020
python3-pyusb · RHEL 8 0:1.0.0-9.module+el8.1.0+4107+4a66eb87 RHSA-2020:4670 Nov 4, 2020
python3-pyusb · ol 8 0:1.0.0-9.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
python3-qrcode · RHEL 8 0:5.1-12.module+el8.1.0+4107+4a66eb87 RHSA-2020:4670 Nov 4, 2020
python3-qrcode · ol 8 0:5.1-12.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
python3-qrcode-core · RHEL 8 0:5.1-12.module+el8.1.0+4107+4a66eb87 RHSA-2020:4670 Nov 4, 2020
python3-qrcode-core · ol 8 0:5.1-12.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
python3-yubico · RHEL 8 0:1.3.2-9.module+el8.1.0+4107+4a66eb87 RHSA-2020:4670 Nov 4, 2020
python3-yubico · ol 8 0:1.3.2-9.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
relaxngDatatype · RHEL 8 0:2011.1-7.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
relaxngDatatype · ol 8 0:2011.1-7.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
resteasy · RHEL 8 0:3.0.26-3.module+el8.2.0+5723+4574fbff RHSA-2020:4847 Nov 4, 2020
resteasy · ol 8 0:3.0.26-3.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
slapi-nis · RHEL 8 0:0.56.5-4.module+el8.3.0+8222+c1bff54a RHSA-2020:4670 Nov 4, 2020
slapi-nis · ol 8 0:0.56.5-4.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
slf4j · RHEL 8 0:1.7.25-4.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
slf4j · ol 8 0:1.7.25-4.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
slf4j-jdk14 · RHEL 8 0:1.7.25-4.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
slf4j-jdk14 · ol 8 0:1.7.25-4.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
softhsm · RHEL 8 0:2.6.0-3.module+el8.3.0+6909+fb33717d RHSA-2020:4670 Nov 4, 2020
softhsm · ol 8 0:2.6.0-3.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
softhsm-devel · RHEL 8 0:2.6.0-3.module+el8.3.0+6909+fb33717d RHSA-2020:4670 Nov 4, 2020
softhsm-devel · ol 8 0:2.6.0-3.module+el8.3.0+7868+2151076c ELSA-2020-4670 Nov 10, 2020
stax-ex · RHEL 8 0:1.7.7-8.module+el8.2.0+5723+4574fbff RHSA-2020:4847 Nov 4, 2020
stax-ex · ol 8 0:1.7.7-8.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
tomcatjss · RHEL 8 0:7.5.0-1.module+el8.3.0+7355+c59bcbd9 RHSA-2020:4847 Nov 4, 2020
tomcatjss · ol 8 0:7.5.0-1.module+el8.3.0+7857+983338ee ELSA-2020-4847 Nov 10, 2020
velocity · RHEL 8 0:1.7-24.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
velocity · ol 8 0:1.7-24.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
xalan-j2 · RHEL 8 0:2.7.1-38.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
xalan-j2 · ol 8 0:2.7.1-38.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
xerces-j2 · RHEL 8 0:2.11.0-34.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
xerces-j2 · ol 8 0:2.11.0-34.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
xml-commons-apis · RHEL 8 0:1.4.01-25.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
xml-commons-apis · ol 8 0:1.4.01-25.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
xml-commons-resolver · RHEL 8 0:1.2-26.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
xml-commons-resolver · ol 8 0:1.2-26.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
xmlstreambuffer · RHEL 8 0:1.5.4-8.module+el8.2.0+5723+4574fbff RHSA-2020:4847 Nov 4, 2020
xmlstreambuffer · ol 8 0:1.5.4-8.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020
xsom · RHEL 8 0:0-19.20110809svn.module+el8.1.0+3366+6dfb954c RHSA-2020:4847 Nov 4, 2020
xsom · ol 8 0:0-19.20110809svn.module+el8.3.0+7697+44932688 ELSA-2020-4847 Nov 10, 2020