Lookup for vulnerable packages by Package URL.

Purlpkg:apache/tomcat@7.0.54
Typeapache
Namespace
Nametomcat
Version7.0.54
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version7.0.55
Latest_non_vulnerable_version11.0.21
Affected_by_vulnerabilities
0
url VCID-4mkw-7haq-pkgn
vulnerability_id VCID-4mkw-7haq-pkgn
summary Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which allows remote attackers to cause a denial of service (thread consumption) via a series of aborted upload attempts.
references
0
reference_url http://mail-archives.apache.org/mod_mbox/tomcat-announce/201505.mbox/%3C554949D1.8030904%40apache.org%3E
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://mail-archives.apache.org/mod_mbox/tomcat-announce/201505.mbox/%3C554949D1.8030904%40apache.org%3E
1
reference_url http://marc.info/?l=bugtraq&m=144498216801440&w=2
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=144498216801440&w=2
2
reference_url http://marc.info/?l=bugtraq&m=145974991225029&w=2
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=145974991225029&w=2
3
reference_url http://openwall.com/lists/oss-security/2015/04/10/1
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2015/04/10/1
4
reference_url http://rhn.redhat.com/errata/RHSA-2015-1622.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-1622.html
5
reference_url http://rhn.redhat.com/errata/RHSA-2016-0595.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0595.html
6
reference_url http://rhn.redhat.com/errata/RHSA-2016-0596.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0596.html
7
reference_url http://rhn.redhat.com/errata/RHSA-2016-0597.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0597.html
8
reference_url http://rhn.redhat.com/errata/RHSA-2016-0598.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2016-0598.html
9
reference_url https://access.redhat.com/errata/RHSA-2015:2659
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2015:2659
10
reference_url https://access.redhat.com/errata/RHSA-2015:2660
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2015:2660
11
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0230.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0230.json
12
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0230
reference_id
reference_type
scores
0
value 0.05655
scoring_system epss
scoring_elements 0.90379
published_at 2026-04-16T12:55:00Z
1
value 0.05655
scoring_system epss
scoring_elements 0.90324
published_at 2026-04-01T12:55:00Z
2
value 0.05655
scoring_system epss
scoring_elements 0.90326
published_at 2026-04-02T12:55:00Z
3
value 0.05655
scoring_system epss
scoring_elements 0.90338
published_at 2026-04-04T12:55:00Z
4
value 0.05655
scoring_system epss
scoring_elements 0.90342
published_at 2026-04-07T12:55:00Z
5
value 0.05655
scoring_system epss
scoring_elements 0.90356
published_at 2026-04-08T12:55:00Z
6
value 0.05655
scoring_system epss
scoring_elements 0.90363
published_at 2026-04-09T12:55:00Z
7
value 0.05655
scoring_system epss
scoring_elements 0.90371
published_at 2026-04-11T12:55:00Z
8
value 0.05655
scoring_system epss
scoring_elements 0.9037
published_at 2026-04-12T12:55:00Z
9
value 0.05655
scoring_system epss
scoring_elements 0.90364
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0230
13
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
14
reference_url https://github.com/apache/tomcat70/commit/b1c8477e3e3ee635d19cc4d5987c2b157431e0c1
reference_id
reference_type
scores
url https://github.com/apache/tomcat70/commit/b1c8477e3e3ee635d19cc4d5987c2b157431e0c1
15
reference_url https://github.com/apache/tomcat/commit/6b2cfacf749be186ea77249a979af1d4863e47ba
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/6b2cfacf749be186ea77249a979af1d4863e47ba
16
reference_url https://github.com/apache/tomcat/commit/812088583d0e60717a8fe9c6d14e12bcdc3e6c51
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/812088583d0e60717a8fe9c6d14e12bcdc3e6c51
17
reference_url https://github.com/apache/tomcat/commit/b1c8477e3e3ee635d19cc4d5987c2b157431e0c1
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/b1c8477e3e3ee635d19cc4d5987c2b157431e0c1
18
reference_url https://github.com/apache/tomcat/commit/c1357e649641844109711d60cacb98e4b5fcd3cb
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/c1357e649641844109711d60cacb98e4b5fcd3cb
19
reference_url https://github.com/apache/tomcat/commit/e28dd578fad90a6d5726ec34f3245c9f99d909a5
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/e28dd578fad90a6d5726ec34f3245c9f99d909a5
20
reference_url https://github.com/apache/tomcat/commit/e3146f4b03a2386c3e57597e86134d4ed5c31303
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/e3146f4b03a2386c3e57597e86134d4ed5c31303
21
reference_url https://github.com/apache/tomcat/commit/fc049912464f0dcf9dede3761f38049369057e16
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/fc049912464f0dcf9dede3761f38049369057e16
22
reference_url https://github.com/apache/tomcat/commit/fdd9f11dc24b95e5425076abb58e968336f320a2
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/fdd9f11dc24b95e5425076abb58e968336f320a2
23
reference_url https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013
24
reference_url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05054964
25
reference_url https://issues.jboss.org/browse/JWS-219
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.jboss.org/browse/JWS-219
26
reference_url https://issues.jboss.org/browse/JWS-220
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.jboss.org/browse/JWS-220
27
reference_url https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E
28
reference_url https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E
29
reference_url https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E
30
reference_url https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E
31
reference_url https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E
32
reference_url https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E
33
reference_url https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E
34
reference_url https://svn.apache.org/viewvc?view=rev&rev=1603770
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1603770
35
reference_url https://svn.apache.org/viewvc?view=rev&rev=1603775
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1603775
36
reference_url https://svn.apache.org/viewvc?view=rev&rev=1603779
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1603779
37
reference_url https://svn.apache.org/viewvc?view=rev&rev=1603781
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1603781
38
reference_url https://svn.apache.org/viewvc?view=rev&rev=1603811
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1603811
39
reference_url https://svn.apache.org/viewvc?view=rev&rev=1609175
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1609175
40
reference_url https://svn.apache.org/viewvc?view=rev&rev=1609176
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1609176
41
reference_url https://svn.apache.org/viewvc?view=rev&rev=1659294
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1659294
42
reference_url https://svn.apache.org/viewvc?view=rev&rev=1659295
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1659295
43
reference_url https://svn.apache.org/viewvc?view=rev&rev=1659537
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1659537
44
reference_url http://svn.apache.org/viewvc?view=revision&revision=1603770
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1603770
45
reference_url http://svn.apache.org/viewvc?view=revision&revision=1603775
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1603775
46
reference_url http://svn.apache.org/viewvc?view=revision&revision=1603779
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1603779
47
reference_url http://tomcat.apache.org/security-6.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-6.html
48
reference_url http://tomcat.apache.org/security-7.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-7.html
49
reference_url http://tomcat.apache.org/security-8.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-8.html
50
reference_url http://www.debian.org/security/2016/dsa-3447
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3447
51
reference_url http://www.debian.org/security/2016/dsa-3530
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3530
52
reference_url http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
53
reference_url http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/bulletinoct2015-2511968.html
54
reference_url http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
55
reference_url http://www.ubuntu.com/usn/USN-2654-1
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2654-1
56
reference_url http://www.ubuntu.com/usn/USN-2655-1
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2655-1
57
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1191200
reference_id 1191200
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1191200
58
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0230
reference_id CVE-2014-0230
reference_type
scores
0
value Low
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0230
59
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0230
reference_id CVE-2014-0230
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0230
60
reference_url https://github.com/advisories/GHSA-pxcx-cxq8-4mmw
reference_id GHSA-pxcx-cxq8-4mmw
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pxcx-cxq8-4mmw
61
reference_url https://access.redhat.com/errata/RHSA-2015:1621
reference_id RHSA-2015:1621
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1621
62
reference_url https://access.redhat.com/errata/RHSA-2015:1622
reference_id RHSA-2015:1622
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1622
63
reference_url https://access.redhat.com/errata/RHSA-2015:2661
reference_id RHSA-2015:2661
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:2661
64
reference_url https://access.redhat.com/errata/RHSA-2016:0595
reference_id RHSA-2016:0595
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0595
65
reference_url https://access.redhat.com/errata/RHSA-2016:0596
reference_id RHSA-2016:0596
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0596
66
reference_url https://access.redhat.com/errata/RHSA-2016:0597
reference_id RHSA-2016:0597
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0597
67
reference_url https://access.redhat.com/errata/RHSA-2016:0598
reference_id RHSA-2016:0598
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0598
68
reference_url https://access.redhat.com/errata/RHSA-2016:0599
reference_id RHSA-2016:0599
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:0599
69
reference_url https://access.redhat.com/errata/RHSA-2016:2599
reference_id RHSA-2016:2599
reference_type
scores
url https://access.redhat.com/errata/RHSA-2016:2599
70
reference_url https://usn.ubuntu.com/2654-1/
reference_id USN-2654-1
reference_type
scores
url https://usn.ubuntu.com/2654-1/
71
reference_url https://usn.ubuntu.com/2655-1/
reference_id USN-2655-1
reference_type
scores
url https://usn.ubuntu.com/2655-1/
fixed_packages
0
url pkg:apache/tomcat@7.0.55
purl pkg:apache/tomcat@7.0.55
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.55
1
url pkg:apache/tomcat@8.0.9
purl pkg:apache/tomcat@8.0.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@8.0.9
aliases CVE-2014-0230, GHSA-pxcx-cxq8-4mmw
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4mkw-7haq-pkgn
1
url VCID-a1by-zvtm-akdc
vulnerability_id VCID-a1by-zvtm-akdc
summary java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle attempts to continue reading data after an error has occurred, which allows remote attackers to conduct HTTP request smuggling attacks or cause a denial of service (resource consumption) by streaming data with malformed chunked transfer coding.
references
0
reference_url http://advisories.mageia.org/MGASA-2015-0081.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://advisories.mageia.org/MGASA-2015-0081.html
1
reference_url http://archives.neohapsis.com/archives/bugtraq/2015-02/0067.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://archives.neohapsis.com/archives/bugtraq/2015-02/0067.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-February/150282.html
3
reference_url http://marc.info/?l=bugtraq&m=143393515412274&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=143393515412274&w=2
4
reference_url http://marc.info/?l=bugtraq&m=143403519711434&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=143403519711434&w=2
5
reference_url http://rhn.redhat.com/errata/RHSA-2015-0675.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0675.html
6
reference_url http://rhn.redhat.com/errata/RHSA-2015-0720.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0720.html
7
reference_url http://rhn.redhat.com/errata/RHSA-2015-0765.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0765.html
8
reference_url http://rhn.redhat.com/errata/RHSA-2015-0983.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0983.html
9
reference_url http://rhn.redhat.com/errata/RHSA-2015-0991.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0991.html
10
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0227.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0227.json
11
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0227
reference_id
reference_type
scores
0
value 0.78235
scoring_system epss
scoring_elements 0.99018
published_at 2026-04-07T12:55:00Z
1
value 0.78235
scoring_system epss
scoring_elements 0.99024
published_at 2026-04-16T12:55:00Z
2
value 0.78235
scoring_system epss
scoring_elements 0.99023
published_at 2026-04-13T12:55:00Z
3
value 0.78235
scoring_system epss
scoring_elements 0.99022
published_at 2026-04-12T12:55:00Z
4
value 0.78235
scoring_system epss
scoring_elements 0.99021
published_at 2026-04-11T12:55:00Z
5
value 0.78235
scoring_system epss
scoring_elements 0.99019
published_at 2026-04-09T12:55:00Z
6
value 0.78235
scoring_system epss
scoring_elements 0.9902
published_at 2026-04-08T12:55:00Z
7
value 0.78235
scoring_system epss
scoring_elements 0.99016
published_at 2026-04-04T12:55:00Z
8
value 0.78235
scoring_system epss
scoring_elements 0.99013
published_at 2026-04-02T12:55:00Z
9
value 0.78235
scoring_system epss
scoring_elements 0.99012
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0227
12
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1109196
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1109196
13
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
14
reference_url https://github.com/apache/tomcat70/commit/6b23790bf7dc4233affaacec57e06cff6b6c6fd3
reference_id
reference_type
scores
url https://github.com/apache/tomcat70/commit/6b23790bf7dc4233affaacec57e06cff6b6c6fd3
15
reference_url https://github.com/apache/tomcat/commit/593a2447e6ebe465585cfa07e93b5635dffa1c70
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/593a2447e6ebe465585cfa07e93b5635dffa1c70
16
reference_url https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E
17
reference_url https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E
18
reference_url https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E
19
reference_url https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E
20
reference_url https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E
21
reference_url https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E
22
reference_url https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E
23
reference_url https://source.jboss.org/changelog/JBossWeb?cs=2455
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://source.jboss.org/changelog/JBossWeb?cs=2455
24
reference_url https://svn.apache.org/viewvc?view=rev&rev=1600984
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1600984
25
reference_url https://svn.apache.org/viewvc?view=rev&rev=1601329
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1601329
26
reference_url https://svn.apache.org/viewvc?view=rev&rev=1601330
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1601330
27
reference_url https://svn.apache.org/viewvc?view=rev&rev=1601332
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1601332
28
reference_url https://svn.apache.org/viewvc?view=rev&rev=1601333
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1601333
29
reference_url https://svn.apache.org/viewvc?view=rev&rev=1603628
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1603628
30
reference_url http://svn.apache.org/viewvc?view=revision&revision=1600984
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1600984
31
reference_url http://tomcat.apache.org/security-6.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-6.html
32
reference_url http://tomcat.apache.org/security-7.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-7.html
33
reference_url http://tomcat.apache.org/security-8.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-8.html
34
reference_url http://www.debian.org/security/2016/dsa-3447
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3447
35
reference_url http://www.debian.org/security/2016/dsa-3530
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3530
36
reference_url http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
37
reference_url http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html
38
reference_url http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/cpujul2015-2367936.html
39
reference_url http://www.ubuntu.com/usn/USN-2654-1
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2654-1
40
reference_url http://www.ubuntu.com/usn/USN-2655-1
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2655-1
41
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0227
reference_id CVE-2014-0227
reference_type
scores
0
value Important
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0227
42
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0227
reference_id CVE-2014-0227
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0227
43
reference_url https://github.com/advisories/GHSA-42j3-498q-m6vp
reference_id GHSA-42j3-498q-m6vp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-42j3-498q-m6vp
44
reference_url https://access.redhat.com/errata/RHSA-2014:1019
reference_id RHSA-2014:1019
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1019
45
reference_url https://access.redhat.com/errata/RHSA-2014:1020
reference_id RHSA-2014:1020
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1020
46
reference_url https://access.redhat.com/errata/RHSA-2014:1021
reference_id RHSA-2014:1021
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1021
47
reference_url https://access.redhat.com/errata/RHSA-2014:1086
reference_id RHSA-2014:1086
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1086
48
reference_url https://access.redhat.com/errata/RHSA-2014:1087
reference_id RHSA-2014:1087
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1087
49
reference_url https://access.redhat.com/errata/RHSA-2014:1088
reference_id RHSA-2014:1088
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1088
50
reference_url https://access.redhat.com/errata/RHSA-2014:1904
reference_id RHSA-2014:1904
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1904
51
reference_url https://access.redhat.com/errata/RHSA-2015:0091
reference_id RHSA-2015:0091
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0091
52
reference_url https://access.redhat.com/errata/RHSA-2015:0234
reference_id RHSA-2015:0234
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0234
53
reference_url https://access.redhat.com/errata/RHSA-2015:0235
reference_id RHSA-2015:0235
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0235
54
reference_url https://access.redhat.com/errata/RHSA-2015:0675
reference_id RHSA-2015:0675
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0675
55
reference_url https://access.redhat.com/errata/RHSA-2015:0720
reference_id RHSA-2015:0720
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0720
56
reference_url https://access.redhat.com/errata/RHSA-2015:0765
reference_id RHSA-2015:0765
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0765
57
reference_url https://access.redhat.com/errata/RHSA-2015:0983
reference_id RHSA-2015:0983
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0983
58
reference_url https://access.redhat.com/errata/RHSA-2015:0991
reference_id RHSA-2015:0991
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0991
59
reference_url https://access.redhat.com/errata/RHSA-2015:1009
reference_id RHSA-2015:1009
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1009
60
reference_url https://usn.ubuntu.com/2654-1/
reference_id USN-2654-1
reference_type
scores
url https://usn.ubuntu.com/2654-1/
61
reference_url https://usn.ubuntu.com/2655-1/
reference_id USN-2655-1
reference_type
scores
url https://usn.ubuntu.com/2655-1/
fixed_packages
0
url pkg:apache/tomcat@7.0.55
purl pkg:apache/tomcat@7.0.55
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.55
1
url pkg:apache/tomcat@8.0.9
purl pkg:apache/tomcat@8.0.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@8.0.9
aliases CVE-2014-0227, GHSA-42j3-498q-m6vp
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a1by-zvtm-akdc
Fixing_vulnerabilities
0
url VCID-jf7u-dvpd-b7f4
vulnerability_id VCID-jf7u-dvpd-b7f4
summary Apache Tomcat before 6.0.40, 7.x before 7.0.54, and 8.x before 8.0.6 does not properly constrain the class loader that accesses the XML parser used with an XSLT stylesheet, which allows remote attackers to (1) read arbitrary files via a crafted web application that provides an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, or (2) read files associated with different web applications on a single Tomcat instance via a crafted web application.
references
0
reference_url http://advisories.mageia.org/MGASA-2014-0268.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://advisories.mageia.org/MGASA-2014-0268.html
1
reference_url http://marc.info/?l=bugtraq&m=141017844705317&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=141017844705317&w=2
2
reference_url http://marc.info/?l=bugtraq&m=144498216801440&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=144498216801440&w=2
3
reference_url http://rhn.redhat.com/errata/RHSA-2015-0675.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0675.html
4
reference_url http://rhn.redhat.com/errata/RHSA-2015-0720.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0720.html
5
reference_url http://rhn.redhat.com/errata/RHSA-2015-0765.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0765.html
6
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0119.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0119.json
7
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-0119
reference_id
reference_type
scores
0
value 0.04351
scoring_system epss
scoring_elements 0.88938
published_at 2026-04-08T12:55:00Z
1
value 0.04351
scoring_system epss
scoring_elements 0.88917
published_at 2026-04-04T12:55:00Z
2
value 0.04351
scoring_system epss
scoring_elements 0.88901
published_at 2026-04-02T12:55:00Z
3
value 0.04351
scoring_system epss
scoring_elements 0.88919
published_at 2026-04-07T12:55:00Z
4
value 0.04351
scoring_system epss
scoring_elements 0.8896
published_at 2026-04-16T12:55:00Z
5
value 0.04351
scoring_system epss
scoring_elements 0.88947
published_at 2026-04-13T12:55:00Z
6
value 0.04351
scoring_system epss
scoring_elements 0.88948
published_at 2026-04-12T12:55:00Z
7
value 0.04351
scoring_system epss
scoring_elements 0.88954
published_at 2026-04-11T12:55:00Z
8
value 0.04351
scoring_system epss
scoring_elements 0.88943
published_at 2026-04-09T12:55:00Z
9
value 0.04351
scoring_system epss
scoring_elements 0.88893
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-0119
8
reference_url http://seclists.org/fulldisclosure/2014/Dec/23
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2014/Dec/23
9
reference_url http://seclists.org/fulldisclosure/2014/May/141
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2014/May/141
10
reference_url http://secunia.com/advisories/59732
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/59732
11
reference_url http://secunia.com/advisories/59873
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/59873
12
reference_url http://secunia.com/advisories/60729
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/60729
13
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 2.1
scoring_system cvssv2
scoring_elements AV:N/AC:H/Au:S/C:P/I:N/A:N
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
14
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
15
reference_url https://github.com/apache/tomcat70/commit/080878ea519d8c74c53721a9ebf7be6fcf6f1f2f
reference_id
reference_type
scores
url https://github.com/apache/tomcat70/commit/080878ea519d8c74c53721a9ebf7be6fcf6f1f2f
16
reference_url https://github.com/apache/tomcat70/commit/6246d8307fb5f2b4ff0b0f4d6d1b0250dff01a81
reference_id
reference_type
scores
url https://github.com/apache/tomcat70/commit/6246d8307fb5f2b4ff0b0f4d6d1b0250dff01a81
17
reference_url https://github.com/apache/tomcat70/commit/934f884f330dad192d2c5dc950e28f4cd281461b
reference_id
reference_type
scores
url https://github.com/apache/tomcat70/commit/934f884f330dad192d2c5dc950e28f4cd281461b
18
reference_url https://github.com/apache/tomcat70/commit/f8b316acbbf9fabf87cc137e9777e912eda0d834
reference_id
reference_type
scores
url https://github.com/apache/tomcat70/commit/f8b316acbbf9fabf87cc137e9777e912eda0d834
19
reference_url https://github.com/apache/tomcat80/commit/25251de791a6a7be13f2f3d3a66119a77025272d
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat80/commit/25251de791a6a7be13f2f3d3a66119a77025272d
20
reference_url https://github.com/apache/tomcat80/commit/4d90e355dc5ced4c53585c2b4700f71a52d8f447
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat80/commit/4d90e355dc5ced4c53585c2b4700f71a52d8f447
21
reference_url https://github.com/apache/tomcat80/commit/51e59532ad4c604f55575963dc7a7f0250cb420f
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat80/commit/51e59532ad4c604f55575963dc7a7f0250cb420f
22
reference_url https://github.com/apache/tomcat80/commit/69a8a72283c3395ece8b899cf8562e126de97a27
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat80/commit/69a8a72283c3395ece8b899cf8562e126de97a27
23
reference_url https://github.com/apache/tomcat80/commit/77e014cef5d5af619bcf77eaebf22c284d420802
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat80/commit/77e014cef5d5af619bcf77eaebf22c284d420802
24
reference_url https://github.com/apache/tomcat80/commit/7d33457de5fc5a652a88fb9bbc9ba4cbbda58f04
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat80/commit/7d33457de5fc5a652a88fb9bbc9ba4cbbda58f04
25
reference_url https://github.com/apache/tomcat80/commit/d59fd4398c8ae6361e0b13c491f66b51e49a7441
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat80/commit/d59fd4398c8ae6361e0b13c491f66b51e49a7441
26
reference_url https://github.com/apache/tomcat/commit/080878ea519d8c74c53721a9ebf7be6fcf6f1f2f
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/080878ea519d8c74c53721a9ebf7be6fcf6f1f2f
27
reference_url https://github.com/apache/tomcat/commit/50311bed8d87e452ff0e69838ba312c4fe899b2d
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/50311bed8d87e452ff0e69838ba312c4fe899b2d
28
reference_url https://github.com/apache/tomcat/commit/5517c5517e8a7ddb994504f0c5c05001a376b10c
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/5517c5517e8a7ddb994504f0c5c05001a376b10c
29
reference_url https://github.com/apache/tomcat/commit/5aae1323c31d643afa9f2db80713b8e97b5123af
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/5aae1323c31d643afa9f2db80713b8e97b5123af
30
reference_url https://github.com/apache/tomcat/commit/6246d8307fb5f2b4ff0b0f4d6d1b0250dff01a81
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/6246d8307fb5f2b4ff0b0f4d6d1b0250dff01a81
31
reference_url https://github.com/apache/tomcat/commit/769477b9bc8442db3f571385fa0c3e206242cbf1
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/769477b9bc8442db3f571385fa0c3e206242cbf1
32
reference_url https://github.com/apache/tomcat/commit/934f884f330dad192d2c5dc950e28f4cd281461b
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/934f884f330dad192d2c5dc950e28f4cd281461b
33
reference_url https://github.com/apache/tomcat/commit/ad3b34a290a0255d2a4c356a3611ab41ed9d04f5
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/ad3b34a290a0255d2a4c356a3611ab41ed9d04f5
34
reference_url https://github.com/apache/tomcat/commit/ce70ee6b8fe437a498a375215011056702b0c481
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/ce70ee6b8fe437a498a375215011056702b0c481
35
reference_url https://github.com/apache/tomcat/commit/ebe5c16f18ce1559e8462a94b3876a98525980d2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/ebe5c16f18ce1559e8462a94b3876a98525980d2
36
reference_url https://github.com/apache/tomcat/commit/f8b316acbbf9fabf87cc137e9777e912eda0d834
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/f8b316acbbf9fabf87cc137e9777e912eda0d834
37
reference_url https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013
38
reference_url https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113@%3Cdev.tomcat.apache.org%3E
39
reference_url https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/37220405a377c0182d2afdbc36461c4783b2930fbeae3a17f1333113%40%3Cdev.tomcat.apache.org%3E
40
reference_url https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b@%3Cdev.tomcat.apache.org%3E
41
reference_url https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/39ae1f0bd5867c15755a6f959b271ade1aea04ccdc3b2e639dcd903b%40%3Cdev.tomcat.apache.org%3E
42
reference_url https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95@%3Cdev.tomcat.apache.org%3E
43
reference_url https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b84ad1258a89de5c9c853c7f2d3ad77e5b8b2930be9e132d5cef6b95%40%3Cdev.tomcat.apache.org%3E
44
reference_url https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb@%3Cdev.tomcat.apache.org%3E
45
reference_url https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b8a1bf18155b552dcf9a928ba808cbadad84c236d85eab3033662cfb%40%3Cdev.tomcat.apache.org%3E
46
reference_url https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c@%3Cdev.tomcat.apache.org%3E
47
reference_url https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r03c597a64de790ba42c167efacfa23300c3d6c9fe589ab87fe02859c%40%3Cdev.tomcat.apache.org%3E
48
reference_url https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b@%3Cdev.tomcat.apache.org%3E
49
reference_url https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r587e50b86c1a96ee301f751d50294072d142fd6dc08a8987ae9f3a9b%40%3Cdev.tomcat.apache.org%3E
50
reference_url https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c@%3Cdev.tomcat.apache.org%3E
51
reference_url https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r9136ff5b13e4f1941360b5a309efee2c114a14855578c3a2cbe5d19c%40%3Cdev.tomcat.apache.org%3E
52
reference_url https://svn.apache.org/viewvc?view=rev&rev=1588193
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1588193
53
reference_url https://svn.apache.org/viewvc?view=rev&rev=1588199
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1588199
54
reference_url https://svn.apache.org/viewvc?view=rev&rev=1589640
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1589640
55
reference_url https://svn.apache.org/viewvc?view=rev&rev=1589837
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1589837
56
reference_url https://svn.apache.org/viewvc?view=rev&rev=1589980
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1589980
57
reference_url https://svn.apache.org/viewvc?view=rev&rev=1589983
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1589983
58
reference_url https://svn.apache.org/viewvc?view=rev&rev=1589985
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1589985
59
reference_url https://svn.apache.org/viewvc?view=rev&rev=1589990
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1589990
60
reference_url https://svn.apache.org/viewvc?view=rev&rev=1589992
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1589992
61
reference_url https://svn.apache.org/viewvc?view=rev&rev=1589997
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1589997
62
reference_url https://svn.apache.org/viewvc?view=rev&rev=1590028
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1590028
63
reference_url https://svn.apache.org/viewvc?view=rev&rev=1590036
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1590036
64
reference_url https://svn.apache.org/viewvc?view=rev&rev=1593815
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1593815
65
reference_url https://svn.apache.org/viewvc?view=rev&rev=1593821
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1593821
66
reference_url http://svn.apache.org/viewvc?view=revision&revision=1588193
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1588193
67
reference_url http://svn.apache.org/viewvc?view=revision&revision=1588199
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1588199
68
reference_url http://svn.apache.org/viewvc?view=revision&revision=1589640
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1589640
69
reference_url http://svn.apache.org/viewvc?view=revision&revision=1589837
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1589837
70
reference_url http://svn.apache.org/viewvc?view=revision&revision=1589980
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1589980
71
reference_url http://svn.apache.org/viewvc?view=revision&revision=1589983
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1589983
72
reference_url http://svn.apache.org/viewvc?view=revision&revision=1589985
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1589985
73
reference_url http://svn.apache.org/viewvc?view=revision&revision=1589990
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1589990
74
reference_url http://svn.apache.org/viewvc?view=revision&revision=1589992
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1589992
75
reference_url http://svn.apache.org/viewvc?view=revision&revision=1589997
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1589997
76
reference_url http://svn.apache.org/viewvc?view=revision&revision=1590028
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1590028
77
reference_url http://svn.apache.org/viewvc?view=revision&revision=1590036
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1590036
78
reference_url http://svn.apache.org/viewvc?view=revision&revision=1593815
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1593815
79
reference_url http://svn.apache.org/viewvc?view=revision&revision=1593821
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1593821
80
reference_url http://tomcat.apache.org/security-6.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-6.html
81
reference_url http://tomcat.apache.org/security-7.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-7.html
82
reference_url http://tomcat.apache.org/security-8.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-8.html
83
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21678231
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www-01.ibm.com/support/docview.wss?uid=swg21678231
84
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21681528
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www-01.ibm.com/support/docview.wss?uid=swg21681528
85
reference_url http://www.debian.org/security/2016/dsa-3530
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3530
86
reference_url http://www.debian.org/security/2016/dsa-3552
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3552
87
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:052
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:052
88
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:053
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:053
89
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2015:084
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2015:084
90
reference_url http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
91
reference_url http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
92
reference_url http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
93
reference_url http://www.securityfocus.com/archive/1/534161/100/0/threaded
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/archive/1/534161/100/0/threaded
94
reference_url http://www.securityfocus.com/bid/67669
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/67669
95
reference_url http://www.securitytracker.com/id/1030298
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1030298
96
reference_url http://www.ubuntu.com/usn/USN-2654-1
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2654-1
97
reference_url http://www.vmware.com/security/advisories/VMSA-2014-0012.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vmware.com/security/advisories/VMSA-2014-0012.html
98
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1102038
reference_id 1102038
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1102038
99
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0119
reference_id CVE-2014-0119
reference_type
scores
0
value Low
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0119
100
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-0119
reference_id CVE-2014-0119
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-0119
101
reference_url https://github.com/advisories/GHSA-prc3-7f44-w48j
reference_id GHSA-prc3-7f44-w48j
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-prc3-7f44-w48j
102
reference_url https://security.gentoo.org/glsa/201412-29
reference_id GLSA-201412-29
reference_type
scores
url https://security.gentoo.org/glsa/201412-29
103
reference_url https://access.redhat.com/errata/RHSA-2014:0842
reference_id RHSA-2014:0842
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0842
104
reference_url https://access.redhat.com/errata/RHSA-2014:0843
reference_id RHSA-2014:0843
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0843
105
reference_url https://access.redhat.com/errata/RHSA-2014:0895
reference_id RHSA-2014:0895
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0895
106
reference_url https://access.redhat.com/errata/RHSA-2014:1034
reference_id RHSA-2014:1034
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1034
107
reference_url https://access.redhat.com/errata/RHSA-2014:1038
reference_id RHSA-2014:1038
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1038
108
reference_url https://access.redhat.com/errata/RHSA-2014:1086
reference_id RHSA-2014:1086
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1086
109
reference_url https://access.redhat.com/errata/RHSA-2014:1087
reference_id RHSA-2014:1087
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1087
110
reference_url https://access.redhat.com/errata/RHSA-2014:1088
reference_id RHSA-2014:1088
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:1088
111
reference_url https://access.redhat.com/errata/RHSA-2015:0234
reference_id RHSA-2015:0234
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0234
112
reference_url https://access.redhat.com/errata/RHSA-2015:0235
reference_id RHSA-2015:0235
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0235
113
reference_url https://access.redhat.com/errata/RHSA-2015:0675
reference_id RHSA-2015:0675
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0675
114
reference_url https://access.redhat.com/errata/RHSA-2015:0720
reference_id RHSA-2015:0720
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0720
115
reference_url https://access.redhat.com/errata/RHSA-2015:0765
reference_id RHSA-2015:0765
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0765
116
reference_url https://access.redhat.com/errata/RHSA-2015:1009
reference_id RHSA-2015:1009
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1009
117
reference_url https://usn.ubuntu.com/2654-1/
reference_id USN-2654-1
reference_type
scores
url https://usn.ubuntu.com/2654-1/
fixed_packages
0
url pkg:apache/tomcat@6.0.41
purl pkg:apache/tomcat@6.0.41
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a1by-zvtm-akdc
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.41
1
url pkg:apache/tomcat@7.0.54
purl pkg:apache/tomcat@7.0.54
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4mkw-7haq-pkgn
1
vulnerability VCID-a1by-zvtm-akdc
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.54
2
url pkg:apache/tomcat@8.0.8
purl pkg:apache/tomcat@8.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4mkw-7haq-pkgn
1
vulnerability VCID-a1by-zvtm-akdc
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@8.0.8
aliases CVE-2014-0119, GHSA-prc3-7f44-w48j
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-jf7u-dvpd-b7f4
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.54