JQuery vulnerability on SPANVA virtual appliance

Products

• CASB Gateway Advanced
• CASB Audit

Issue/Introduction

A vulnerability scanner detected a JQuery vulnerability on the SPANVA virtual appliance.  Below is the description of the vulnerability:

According to the self-reported version in the script, the version of JQuery hosted on the remote web server is greater than or equal to 1.2 and prior to 3.5.0. It is, therefore, affected by multiple cross site scripting vulnerabilities.

Resolution

The fix has been released on version "1.15.3.150.0-18rc" of SpanVA , upgrade SpanVA to that version or higher.