Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:rpm/redhat/eap7-wildfly-openssl-linux@1.0.6-15.Final_redhat_2.1.ep7?arch=el7
Typerpm
Namespaceredhat
Nameeap7-wildfly-openssl-linux
Version1.0.6-15.Final_redhat_2.1.ep7
Qualifiers
arch el7
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-2pnb-13et-y3hr
vulnerability_id VCID-2pnb-13et-y3hr
summary 
Information Exposure
It was found that while parsing the SAML messages the `StaxParserUtil` class of keycloak replaces special strings for obtaining attribute values with system property. This could allow an attacker to determine values of system properties at the attacked system by formatting the SAML request `ID` field to be the chosen system property which could be obtained in the `InResponseTo` field in the response.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2582.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-2582.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-2582
reference_id
reference_type
scores
0
value 0.00629
scoring_system epss
scoring_elements 0.70303
published_at 2026-04-16T12:55:00Z
1
value 0.00629
scoring_system epss
scoring_elements 0.70251
published_at 2026-04-08T12:55:00Z
2
value 0.00629
scoring_system epss
scoring_elements 0.70265
published_at 2026-04-09T12:55:00Z
3
value 0.00629
scoring_system epss
scoring_elements 0.70289
published_at 2026-04-11T12:55:00Z
4
value 0.00629
scoring_system epss
scoring_elements 0.70274
published_at 2026-04-12T12:55:00Z
5
value 0.00629
scoring_system epss
scoring_elements 0.70262
published_at 2026-04-13T12:55:00Z
6
value 0.00629
scoring_system epss
scoring_elements 0.70199
published_at 2026-04-01T12:55:00Z
7
value 0.00629
scoring_system epss
scoring_elements 0.70211
published_at 2026-04-02T12:55:00Z
8
value 0.00629
scoring_system epss
scoring_elements 0.70227
published_at 2026-04-04T12:55:00Z
9
value 0.00629
scoring_system epss
scoring_elements 0.70205
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-2582
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2582
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2582
3
reference_url http://www.securityfocus.com/bid/101046
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/101046
4
reference_url http://www.securitytracker.com/id/1041707
reference_id
reference_type
scores
url http://www.securitytracker.com/id/1041707
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1410481
reference_id 1410481
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1410481
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-2582
reference_id CVE-2017-2582
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2017-2582
7
reference_url https://github.com/advisories/GHSA-c77r-6f64-478q
reference_id GHSA-c77r-6f64-478q
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-c77r-6f64-478q
8
reference_url https://access.redhat.com/errata/RHSA-2017:3216
reference_id RHSA-2017:3216
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3216
9
reference_url https://access.redhat.com/errata/RHSA-2017:3217
reference_id RHSA-2017:3217
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3217
10
reference_url https://access.redhat.com/errata/RHSA-2017:3218
reference_id RHSA-2017:3218
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3218
11
reference_url https://access.redhat.com/errata/RHSA-2017:3219
reference_id RHSA-2017:3219
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3219
12
reference_url https://access.redhat.com/errata/RHSA-2017:3220
reference_id RHSA-2017:3220
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3220
13
reference_url https://access.redhat.com/errata/RHSA-2019:0136
reference_id RHSA-2019:0136
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0136
14
reference_url https://access.redhat.com/errata/RHSA-2019:0137
reference_id RHSA-2019:0137
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0137
15
reference_url https://access.redhat.com/errata/RHSA-2019:0139
reference_id RHSA-2019:0139
reference_type
scores
url https://access.redhat.com/errata/RHSA-2019:0139
fixed_packages
aliases CVE-2017-2582, GHSA-c77r-6f64-478q
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2pnb-13et-y3hr
1
url VCID-vxgb-dd12-hyba
vulnerability_id VCID-vxgb-dd12-hyba
summary The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: <transport-config confidentiality="required" trust-in-target="supported"/>
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14627.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14627.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14627
reference_id
reference_type
scores
0
value 0.00227
scoring_system epss
scoring_elements 0.45428
published_at 2026-04-01T12:55:00Z
1
value 0.00227
scoring_system epss
scoring_elements 0.45503
published_at 2026-04-02T12:55:00Z
2
value 0.00227
scoring_system epss
scoring_elements 0.45525
published_at 2026-04-08T12:55:00Z
3
value 0.00227
scoring_system epss
scoring_elements 0.4547
published_at 2026-04-07T12:55:00Z
4
value 0.00227
scoring_system epss
scoring_elements 0.45526
published_at 2026-04-09T12:55:00Z
5
value 0.00227
scoring_system epss
scoring_elements 0.45546
published_at 2026-04-11T12:55:00Z
6
value 0.00227
scoring_system epss
scoring_elements 0.45516
published_at 2026-04-12T12:55:00Z
7
value 0.00227
scoring_system epss
scoring_elements 0.45521
published_at 2026-04-13T12:55:00Z
8
value 0.00227
scoring_system epss
scoring_elements 0.45569
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14627
2
reference_url https://github.com/wildfly/wildfly/commit/883115ea2168343e870745f538a80b1ddc360914
reference_id
reference_type
scores
url https://github.com/wildfly/wildfly/commit/883115ea2168343e870745f538a80b1ddc360914
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1624664
reference_id 1624664
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1624664
4
reference_url https://access.redhat.com/errata/RHSA-2018:3527
reference_id RHSA-2018:3527
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3527
5
reference_url https://access.redhat.com/errata/RHSA-2018:3528
reference_id RHSA-2018:3528
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3528
6
reference_url https://access.redhat.com/errata/RHSA-2018:3529
reference_id RHSA-2018:3529
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3529
fixed_packages
aliases CVE-2018-14627
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vxgb-dd12-hyba
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-openssl-linux@1.0.6-15.Final_redhat_2.1.ep7%3Farch=el7