underscore 1.8.3 and jQuery 1.13.1

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)
• CA Unified Infrastructure Management On-Premise (Nimsoft / UIM)
• CA Unified Infrastructure Management SaaS (Nimsoft / UIM)

Issue/Introduction

Need information on addressing security vulnerabilities underscore 1.8.3 and jQuery 1.13.1.

Environment

• DX UIM 20.4

Cause

• Security vulnerabilities
  • https://nvd.nist.gov/vuln/detail/CVE-2022-31160
  • https://nvd.nist.gov/vuln/detail/CVE-2021-23358

Resolution

• jquery has been updated to 3.6.4 in DX UIM v23.4
• Underscore.js will be updated to 1.13.6 in upcoming DX UIM v23.4 CU1.The release date is currently TBD.