Lookup for vulnerable packages by Package URL.
| Purl | pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.13.3-1jpp.1?arch=el3 |
| Type | rpm |
| Namespace | redhat |
| Name | java-1.4.2-ibm |
| Version | 1.4.2.13.3-1jpp.1 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | null |
| Latest_non_vulnerable_version | null |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-a6gd-ytpw-duan |
| vulnerability_id |
VCID-a6gd-ytpw-duan |
| summary |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks,
including the remote execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3872 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.1173 |
| scoring_system |
epss |
| scoring_elements |
0.93656 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.1173 |
| scoring_system |
epss |
| scoring_elements |
0.93666 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.1173 |
| scoring_system |
epss |
| scoring_elements |
0.93675 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.1173 |
| scoring_system |
epss |
| scoring_elements |
0.93677 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.1173 |
| scoring_system |
epss |
| scoring_elements |
0.93686 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.1173 |
| scoring_system |
epss |
| scoring_elements |
0.93688 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.1173 |
| scoring_system |
epss |
| scoring_elements |
0.93692 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.1173 |
| scoring_system |
epss |
| scoring_elements |
0.93693 |
| published_at |
2026-04-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3872 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3872
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-a6gd-ytpw-duan |
|
| 1 |
| url |
VCID-c5un-z1f5-wuhd |
| vulnerability_id |
VCID-c5un-z1f5-wuhd |
| summary |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks,
including the remote execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3867 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.89141 |
| scoring_system |
epss |
| scoring_elements |
0.9953 |
| published_at |
2026-04-08T12:55:00Z |
|
| 1 |
| value |
0.89141 |
| scoring_system |
epss |
| scoring_elements |
0.99527 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.89141 |
| scoring_system |
epss |
| scoring_elements |
0.99529 |
| published_at |
2026-04-07T12:55:00Z |
|
| 3 |
| value |
0.89141 |
| scoring_system |
epss |
| scoring_elements |
0.99533 |
| published_at |
2026-04-13T12:55:00Z |
|
| 4 |
| value |
0.89141 |
| scoring_system |
epss |
| scoring_elements |
0.99531 |
| published_at |
2026-04-09T12:55:00Z |
|
| 5 |
| value |
0.89141 |
| scoring_system |
epss |
| scoring_elements |
0.99532 |
| published_at |
2026-04-12T12:55:00Z |
|
| 6 |
| value |
0.89244 |
| scoring_system |
epss |
| scoring_elements |
0.99533 |
| published_at |
2026-04-01T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3867 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
| 13 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3867
|
| risk_score |
1.6 |
| exploitability |
2.0 |
| weighted_severity |
0.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-c5un-z1f5-wuhd |
|
| 2 |
| url |
VCID-e7t4-rgaz-4uec |
| vulnerability_id |
VCID-e7t4-rgaz-4uec |
| summary |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks,
including the remote execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3869 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.78477 |
| scoring_system |
epss |
| scoring_elements |
0.99026 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.78477 |
| scoring_system |
epss |
| scoring_elements |
0.99027 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.78477 |
| scoring_system |
epss |
| scoring_elements |
0.9903 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.78477 |
| scoring_system |
epss |
| scoring_elements |
0.99031 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.78477 |
| scoring_system |
epss |
| scoring_elements |
0.99033 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.78477 |
| scoring_system |
epss |
| scoring_elements |
0.99034 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.78477 |
| scoring_system |
epss |
| scoring_elements |
0.99035 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.78477 |
| scoring_system |
epss |
| scoring_elements |
0.99036 |
| published_at |
2026-04-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3869 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3869
|
| risk_score |
1.4 |
| exploitability |
2.0 |
| weighted_severity |
0.7 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-e7t4-rgaz-4uec |
|
| 3 |
| url |
VCID-ju9j-bz1n-2udp |
| vulnerability_id |
VCID-ju9j-bz1n-2udp |
| summary |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks,
including the remote execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3874 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.08111 |
| scoring_system |
epss |
| scoring_elements |
0.92126 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.08111 |
| scoring_system |
epss |
| scoring_elements |
0.92133 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.08111 |
| scoring_system |
epss |
| scoring_elements |
0.9214 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.08111 |
| scoring_system |
epss |
| scoring_elements |
0.92144 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.08111 |
| scoring_system |
epss |
| scoring_elements |
0.92155 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.08111 |
| scoring_system |
epss |
| scoring_elements |
0.92158 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.16847 |
| scoring_system |
epss |
| scoring_elements |
0.94952 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.16847 |
| scoring_system |
epss |
| scoring_elements |
0.94954 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.16847 |
| scoring_system |
epss |
| scoring_elements |
0.94957 |
| published_at |
2026-04-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3874 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3874
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ju9j-bz1n-2udp |
|
| 4 |
| url |
VCID-pj8c-99t4-8khz |
| vulnerability_id |
VCID-pj8c-99t4-8khz |
| summary |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks,
including the remote execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3868 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.1314 |
| scoring_system |
epss |
| scoring_elements |
0.94079 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.1314 |
| scoring_system |
epss |
| scoring_elements |
0.94089 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.1314 |
| scoring_system |
epss |
| scoring_elements |
0.94099 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.1314 |
| scoring_system |
epss |
| scoring_elements |
0.94103 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.1314 |
| scoring_system |
epss |
| scoring_elements |
0.94112 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.1314 |
| scoring_system |
epss |
| scoring_elements |
0.94116 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.1314 |
| scoring_system |
epss |
| scoring_elements |
0.94121 |
| published_at |
2026-04-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3868 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3868
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pj8c-99t4-8khz |
|
| 5 |
| url |
VCID-pzcs-z6ju-qbcg |
| vulnerability_id |
VCID-pzcs-z6ju-qbcg |
| summary |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks,
including the remote execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3876 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.11021 |
| scoring_system |
epss |
| scoring_elements |
0.9343 |
| published_at |
2026-04-12T12:55:00Z |
|
| 1 |
| value |
0.11021 |
| scoring_system |
epss |
| scoring_elements |
0.93431 |
| published_at |
2026-04-13T12:55:00Z |
|
| 2 |
| value |
0.11696 |
| scoring_system |
epss |
| scoring_elements |
0.93664 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.11696 |
| scoring_system |
epss |
| scoring_elements |
0.93666 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.11696 |
| scoring_system |
epss |
| scoring_elements |
0.93645 |
| published_at |
2026-04-01T12:55:00Z |
|
| 5 |
| value |
0.11696 |
| scoring_system |
epss |
| scoring_elements |
0.93677 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.11696 |
| scoring_system |
epss |
| scoring_elements |
0.93674 |
| published_at |
2026-04-08T12:55:00Z |
|
| 7 |
| value |
0.11696 |
| scoring_system |
epss |
| scoring_elements |
0.93655 |
| published_at |
2026-04-02T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3876 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3876
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pzcs-z6ju-qbcg |
|
| 6 |
| url |
VCID-sakk-3wvn-tfhe |
| vulnerability_id |
VCID-sakk-3wvn-tfhe |
| summary |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks,
including the remote execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3873 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.11882 |
| scoring_system |
epss |
| scoring_elements |
0.93697 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.11882 |
| scoring_system |
epss |
| scoring_elements |
0.93706 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.11882 |
| scoring_system |
epss |
| scoring_elements |
0.93717 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.11882 |
| scoring_system |
epss |
| scoring_elements |
0.9372 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.11882 |
| scoring_system |
epss |
| scoring_elements |
0.93728 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.11882 |
| scoring_system |
epss |
| scoring_elements |
0.9373 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.11882 |
| scoring_system |
epss |
| scoring_elements |
0.93734 |
| published_at |
2026-04-12T12:55:00Z |
|
| 7 |
| value |
0.11882 |
| scoring_system |
epss |
| scoring_elements |
0.93735 |
| published_at |
2026-04-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3873 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3873
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sakk-3wvn-tfhe |
|
| 7 |
| url |
VCID-th92-rtps-jba3 |
| vulnerability_id |
VCID-th92-rtps-jba3 |
| summary |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks,
including the remote execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3871 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.12545 |
| scoring_system |
epss |
| scoring_elements |
0.93905 |
| published_at |
2026-04-01T12:55:00Z |
|
| 1 |
| value |
0.12545 |
| scoring_system |
epss |
| scoring_elements |
0.93913 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.12545 |
| scoring_system |
epss |
| scoring_elements |
0.93922 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.12545 |
| scoring_system |
epss |
| scoring_elements |
0.93926 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.12545 |
| scoring_system |
epss |
| scoring_elements |
0.93934 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.12545 |
| scoring_system |
epss |
| scoring_elements |
0.93938 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.12545 |
| scoring_system |
epss |
| scoring_elements |
0.93941 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.12545 |
| scoring_system |
epss |
| scoring_elements |
0.93942 |
| published_at |
2026-04-13T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3871 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3871
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-th92-rtps-jba3 |
|
| 8 |
| url |
VCID-txfj-uzzx-4ue7 |
| vulnerability_id |
VCID-txfj-uzzx-4ue7 |
| summary |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks,
including the remote execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3877 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.10153 |
| scoring_system |
epss |
| scoring_elements |
0.93107 |
| published_at |
2026-04-11T12:55:00Z |
|
| 1 |
| value |
0.10153 |
| scoring_system |
epss |
| scoring_elements |
0.93104 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.10153 |
| scoring_system |
epss |
| scoring_elements |
0.93106 |
| published_at |
2026-04-13T12:55:00Z |
|
| 3 |
| value |
0.14874 |
| scoring_system |
epss |
| scoring_elements |
0.94506 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.14874 |
| scoring_system |
epss |
| scoring_elements |
0.94489 |
| published_at |
2026-04-01T12:55:00Z |
|
| 5 |
| value |
0.14874 |
| scoring_system |
epss |
| scoring_elements |
0.9452 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.14874 |
| scoring_system |
epss |
| scoring_elements |
0.94516 |
| published_at |
2026-04-08T12:55:00Z |
|
| 7 |
| value |
0.14874 |
| scoring_system |
epss |
| scoring_elements |
0.94496 |
| published_at |
2026-04-02T12:55:00Z |
|
| 8 |
| value |
0.14874 |
| scoring_system |
epss |
| scoring_elements |
0.94504 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3877 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3877
|
| risk_score |
0.1 |
| exploitability |
0.5 |
| weighted_severity |
0.1 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-txfj-uzzx-4ue7 |
|
| 9 |
| url |
VCID-weda-ey6f-yuc4 |
| vulnerability_id |
VCID-weda-ey6f-yuc4 |
| summary |
Multiple vulnerabilities in the Sun JDK and JRE allow for several attacks,
including the remote execution of arbitrary code. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3875 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01651 |
| scoring_system |
epss |
| scoring_elements |
0.82032 |
| published_at |
2026-04-11T12:55:00Z |
|
| 1 |
| value |
0.01651 |
| scoring_system |
epss |
| scoring_elements |
0.82021 |
| published_at |
2026-04-12T12:55:00Z |
|
| 2 |
| value |
0.01651 |
| scoring_system |
epss |
| scoring_elements |
0.82014 |
| published_at |
2026-04-13T12:55:00Z |
|
| 3 |
| value |
0.02162 |
| scoring_system |
epss |
| scoring_elements |
0.84252 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.02162 |
| scoring_system |
epss |
| scoring_elements |
0.84219 |
| published_at |
2026-04-01T12:55:00Z |
|
| 5 |
| value |
0.02162 |
| scoring_system |
epss |
| scoring_elements |
0.84279 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.02162 |
| scoring_system |
epss |
| scoring_elements |
0.84274 |
| published_at |
2026-04-08T12:55:00Z |
|
| 7 |
| value |
0.02162 |
| scoring_system |
epss |
| scoring_elements |
0.84232 |
| published_at |
2026-04-02T12:55:00Z |
|
| 8 |
| value |
0.02162 |
| scoring_system |
epss |
| scoring_elements |
0.8425 |
| published_at |
2026-04-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2009-3875 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
|
| fixed_packages |
|
| aliases |
CVE-2009-3875
|
| risk_score |
null |
| exploitability |
0.5 |
| weighted_severity |
0.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-weda-ey6f-yuc4 |
|
|
| Fixing_vulnerabilities |
|
| Risk_score | 1.6 |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.13.3-1jpp.1%3Farch=el3 |