Lookup for vulnerable packages by Package URL.

Purlpkg:rpm/redhat/eap7-wildfly-elytron-tool@1.0.8-1.Final_redhat_00001.1.ep7?arch=el6
Typerpm
Namespaceredhat
Nameeap7-wildfly-elytron-tool
Version1.0.8-1.Final_redhat_00001.1.ep7
Qualifiers
arch el6
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-vxgb-dd12-hyba
vulnerability_id VCID-vxgb-dd12-hyba
summary The IIOP OpenJDK Subsystem in WildFly before version 14.0.0 does not honour configuration when SSL transport is required. Servers before this version that are configured with the following setting allow clients to create plaintext connections: <transport-config confidentiality="required" trust-in-target="supported"/>
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14627.json
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-14627.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2018-14627
reference_id
reference_type
scores
0
value 0.00227
scoring_system epss
scoring_elements 0.45428
published_at 2026-04-01T12:55:00Z
1
value 0.00227
scoring_system epss
scoring_elements 0.45503
published_at 2026-04-02T12:55:00Z
2
value 0.00227
scoring_system epss
scoring_elements 0.45525
published_at 2026-04-08T12:55:00Z
3
value 0.00227
scoring_system epss
scoring_elements 0.4547
published_at 2026-04-07T12:55:00Z
4
value 0.00227
scoring_system epss
scoring_elements 0.45526
published_at 2026-04-09T12:55:00Z
5
value 0.00227
scoring_system epss
scoring_elements 0.45546
published_at 2026-04-11T12:55:00Z
6
value 0.00227
scoring_system epss
scoring_elements 0.45516
published_at 2026-04-12T12:55:00Z
7
value 0.00227
scoring_system epss
scoring_elements 0.45521
published_at 2026-04-13T12:55:00Z
8
value 0.00227
scoring_system epss
scoring_elements 0.45569
published_at 2026-04-16T12:55:00Z
9
value 0.00227
scoring_system epss
scoring_elements 0.45565
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2018-14627
2
reference_url https://github.com/wildfly/wildfly/commit/883115ea2168343e870745f538a80b1ddc360914
reference_id
reference_type
scores
url https://github.com/wildfly/wildfly/commit/883115ea2168343e870745f538a80b1ddc360914
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1624664
reference_id 1624664
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1624664
4
reference_url https://access.redhat.com/errata/RHSA-2018:3527
reference_id RHSA-2018:3527
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3527
5
reference_url https://access.redhat.com/errata/RHSA-2018:3528
reference_id RHSA-2018:3528
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3528
6
reference_url https://access.redhat.com/errata/RHSA-2018:3529
reference_id RHSA-2018:3529
reference_type
scores
url https://access.redhat.com/errata/RHSA-2018:3529
fixed_packages
aliases CVE-2018-14627
risk_score 2.4
exploitability 0.5
weighted_severity 4.8
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vxgb-dd12-hyba
Fixing_vulnerabilities
Risk_score2.4
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-elytron-tool@1.0.8-1.Final_redhat_00001.1.ep7%3Farch=el6