Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/123017?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/123017?format=api", "purl": "pkg:rpm/redhat/jboss-as-security@7.3.1-3.Final_redhat_3.1.ep6?arch=el6", "type": "rpm", "namespace": "redhat", "name": "jboss-as-security", "version": "7.3.1-3.Final_redhat_3.1.ep6", "qualifiers": { "arch": "el6" }, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": null, "latest_non_vulnerable_version": null, "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/4628?format=api", "vulnerability_id": "VCID-h8wa-77tk-m3av", "summary": "Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attackers to cause a denial of service (memory consumption) via crafted Document Type Definitions (DTDs), related to signatures.", "references": [ { "reference_url": "http://packetstormsecurity.com/files/124554/Java-XML-Signature-Denial-Of-Service-Attack.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://packetstormsecurity.com/files/124554/Java-XML-Signature-Denial-Of-Service-Attack.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0170.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0170.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0171.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0171.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0172.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0172.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0195.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0195.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1725.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1725.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1726.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1726.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1727.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1727.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-1728.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-1728.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0675.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0850.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0850.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2015-0851.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2015-0851.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4517.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4517.json" }, { "reference_url": "http://santuario.apache.org/secadv.data/cve-2013-4517.txt.asc", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://santuario.apache.org/secadv.data/cve-2013-4517.txt.asc" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4517", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.14926", "scoring_system": "epss", "scoring_elements": "0.94548", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.14926", "scoring_system": "epss", "scoring_elements": "0.94545", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.14926", "scoring_system": "epss", "scoring_elements": "0.94529", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.14926", "scoring_system": "epss", "scoring_elements": "0.94563", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.14926", "scoring_system": "epss", "scoring_elements": "0.9455", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.14926", "scoring_system": "epss", "scoring_elements": "0.94521", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.14926", "scoring_system": "epss", "scoring_elements": "0.94531", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.14926", "scoring_system": "epss", "scoring_elements": "0.94541", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.14926", "scoring_system": "epss", "scoring_elements": "0.94514", "published_at": "2026-04-01T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-4517" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4517", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4517" }, { "reference_url": "http://seclists.org/fulldisclosure/2013/Dec/169", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://seclists.org/fulldisclosure/2013/Dec/169" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89891", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/89891" }, { "reference_url": "https://github.com/apache/santuario-java/commit/a09b9042f7759d094f2d49f40fc7bcf145164b25", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/santuario-java/commit/a09b9042f7759d094f2d49f40fc7bcf145164b25" }, { "reference_url": "https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3@%3Ccommits.santuario.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/680e6938b6412e26d5446054fd31de2011d33af11786b989127d1cc3@%3Ccommits.santuario.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd@%3Ccommits.santuario.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r1c07a561426ec5579073046ad7f4207cdcef452bb3100abaf908e0cd@%3Ccommits.santuario.apache.org%3E" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4517" }, { "reference_url": "https://www.tenable.com/security/tns-2018-15", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.tenable.com/security/tns-2018-15" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257", "reference_id": "1045257", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1045257" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733938", "reference_id": "733938", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=733938" }, { "reference_url": "https://bugzilla.redhat.com/CVE-2013-4517", "reference_id": "CVE-2013-4517", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/CVE-2013-4517" }, { "reference_url": "https://cwiki.apache.org/confluence/download/attachments/27821224/cve-2013-4517.txt.asc", "reference_id": "CVE-2013-4517.TXT.ASC", "reference_type": "", "scores": [], "url": "https://cwiki.apache.org/confluence/download/attachments/27821224/cve-2013-4517.txt.asc" }, { "reference_url": "https://github.com/advisories/GHSA-4p4w-6h54-g885", "reference_id": "GHSA-4p4w-6h54-g885", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-4p4w-6h54-g885" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0170", "reference_id": "RHSA-2014:0170", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0170" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0171", "reference_id": "RHSA-2014:0171", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0171" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0172", "reference_id": "RHSA-2014:0172", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0172" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0195", "reference_id": "RHSA-2014:0195", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0195" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0400", "reference_id": "RHSA-2014:0400", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0400" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0473", "reference_id": "RHSA-2014:0473", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0473" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0582", "reference_id": "RHSA-2014:0582", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0582" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1725", "reference_id": "RHSA-2014:1725", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1725" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1726", "reference_id": "RHSA-2014:1726", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1726" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1727", "reference_id": "RHSA-2014:1727", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1727" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1728", "reference_id": "RHSA-2014:1728", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1728" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0675", "reference_id": "RHSA-2015:0675", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0675" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0850", "reference_id": "RHSA-2015:0850", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0850" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:0851", "reference_id": "RHSA-2015:0851", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:0851" } ], "fixed_packages": [], "aliases": [ "CVE-2013-4517", "GHSA-4p4w-6h54-g885" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h8wa-77tk-m3av" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/86403?format=api", "vulnerability_id": "VCID-mpfh-7815-7bcg", "summary": "jboss-as-server: Unchecked access to MSC Service Registry under JSM", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0018.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0018.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0018", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19474", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19607", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19654", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19376", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19454", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19505", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19509", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19462", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19404", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00062", "scoring_system": "epss", "scoring_elements": "0.19365", "published_at": "2026-04-16T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2014-0018" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052783", "reference_id": "1052783", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1052783" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0170", "reference_id": "RHSA-2014:0170", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0170" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0171", "reference_id": "RHSA-2014:0171", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0171" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0172", "reference_id": "RHSA-2014:0172", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0172" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1290", "reference_id": "RHSA-2014:1290", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1290" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1291", "reference_id": "RHSA-2014:1291", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1291" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1995", "reference_id": "RHSA-2014:1995", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1995" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2015:1009", "reference_id": "RHSA-2015:1009", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2015:1009" } ], "fixed_packages": [], "aliases": [ "CVE-2014-0018" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mpfh-7815-7bcg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6899?format=api", "vulnerability_id": "VCID-z9nz-nkff-kfez", "summary": "XML eXternal Entity (XXE) flaw in ParserPool and Decrypter\nThe `BasicParserPool`, `StaticBasicParserPool`, XML Decrypter, and SAML Decrypter in this package set the expandEntityReferences property to `true`, which allows remote attackers to conduct XML external entity (XXE) attacks via a crafted XML DOCTYPE declaration.", "references": [ { "reference_url": "http://blog.sendsafely.com/post/69590974866/web-based-single-sign-on-and-the-dangers-of-saml-xml", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://blog.sendsafely.com/post/69590974866/web-based-single-sign-on-and-the-dangers-of-saml-xml" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0170.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0170.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0171.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0171.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0172.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0172.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2014-0195.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2014-0195.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6440.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-6440.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6440", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73175", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.7312", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73134", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73158", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73138", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73132", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.7308", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73089", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.7311", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.0075", "scoring_system": "epss", "scoring_elements": "0.73084", "published_at": "2026-04-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2013-6440" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1043332", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1043332" }, { "reference_url": "http://shibboleth.net/community/advisories/secadv_20131213.txt", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://shibboleth.net/community/advisories/secadv_20131213.txt" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujan2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpujan2022.html" }, { "reference_url": "https://bugzilla.redhat.com/CVE-2013-6440", "reference_id": "CVE-2013-6440", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/CVE-2013-6440" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6440", "reference_id": "CVE-2013-6440", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-6440" }, { "reference_url": "https://github.com/advisories/GHSA-v723-58jv-2qc4", "reference_id": "GHSA-v723-58jv-2qc4", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-v723-58jv-2qc4" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0170", "reference_id": "RHSA-2014:0170", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0170" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0171", "reference_id": "RHSA-2014:0171", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0171" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0172", "reference_id": "RHSA-2014:0172", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0172" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0195", "reference_id": "RHSA-2014:0195", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0195" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:0452", "reference_id": "RHSA-2014:0452", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:0452" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1290", "reference_id": "RHSA-2014:1290", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1290" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1291", "reference_id": "RHSA-2014:1291", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1291" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2014:1995", "reference_id": "RHSA-2014:1995", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2014:1995" } ], "fixed_packages": [], "aliases": [ "CVE-2013-6440", "GHSA-v723-58jv-2qc4" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z9nz-nkff-kfez" } ], "fixing_vulnerabilities": [], "risk_score": "3.1", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-as-security@7.3.1-3.Final_redhat_3.1.ep6%3Farch=el6" }