Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:rpm/redhat/mod_jk@1.2.40-4.redhat_2.ep6?arch=el7

Type rpm

Namespace redhat

Name mod_jk

Version 1.2.40-4.redhat_2.ep6

Qualifiers

arch	el7

Subpath

Is_vulnerable true

Next_non_vulnerable_version null

Latest_non_vulnerable_version null

Affected_by_vulnerabilities

url VCID-syn7-dsre-9qg3

vulnerability_id VCID-syn7-dsre-9qg3

summary Apache Tomcat Connectors (mod_jk) before 1.2.41 ignores JkUnmount rules for subtrees of previous JkMount rules, which allows remote attackers to access otherwise restricted artifacts via unspecified vectors.

references

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8111.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-8111.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2014-8111

reference_id

reference_type

scores

value	0.03739
scoring_system	epss
scoring_elements	0.88213
published_at	2026-06-04T12:55:00Z

value	0.03739
scoring_system	epss
scoring_elements	0.88232
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2014-8111

reference_url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8111
reference_id
reference_type
scores
url	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8111

reference_url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_id

reference_type

scores

value	5
scoring_system	cvssv2
scoring_elements	AV:N/AC:L/Au:N/C:P/I:N/A:N

url

https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1182591
reference_id	1182591
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1182591

reference_url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783233
reference_id	783233
reference_type
scores
url	https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=783233

reference_url	https://access.redhat.com/errata/RHSA-2015:0846
reference_id	RHSA-2015:0846
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2015:0846

reference_url	https://access.redhat.com/errata/RHSA-2015:0847
reference_id	RHSA-2015:0847
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2015:0847

reference_url	https://access.redhat.com/errata/RHSA-2015:0848
reference_id	RHSA-2015:0848
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2015:0848

reference_url	https://access.redhat.com/errata/RHSA-2015:0849
reference_id	RHSA-2015:0849
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2015:0849

reference_url	https://access.redhat.com/errata/RHSA-2015:1641
reference_id	RHSA-2015:1641
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2015:1641

reference_url	https://access.redhat.com/errata/RHSA-2015:1642
reference_id	RHSA-2015:1642
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2015:1642

fixed_packages

aliases CVE-2014-8111

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-syn7-dsre-9qg3

url VCID-ve9f-5kg8-yffh

vulnerability_id VCID-ve9f-5kg8-yffh

summary mod_cluster: JavaScript code injection is possible via MCMP mod_manager messages

references

reference_url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0298.json
reference_id
reference_type
scores
url	https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-0298.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2015-0298

reference_id

reference_type

scores

value	0.00322
scoring_system	epss
scoring_elements	0.55512
published_at	2026-06-04T12:55:00Z

value	0.00322
scoring_system	epss
scoring_elements	0.55569
published_at	2026-06-05T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2015-0298

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1197769
reference_id	1197769
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1197769

reference_url	https://access.redhat.com/errata/RHSA-2015:0846
reference_id	RHSA-2015:0846
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2015:0846

reference_url	https://access.redhat.com/errata/RHSA-2015:0847
reference_id	RHSA-2015:0847
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2015:0847

reference_url	https://access.redhat.com/errata/RHSA-2015:0848
reference_id	RHSA-2015:0848
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2015:0848

reference_url	https://access.redhat.com/errata/RHSA-2015:1641
reference_id	RHSA-2015:1641
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2015:1641

reference_url	https://access.redhat.com/errata/RHSA-2015:1642
reference_id	RHSA-2015:1642
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2015:1642

fixed_packages

aliases CVE-2015-0298

risk_score null

exploitability 0.5

weighted_severity 0.0

resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ve9f-5kg8-yffh

Fixing_vulnerabilities

Risk_score null

Resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mod_jk@1.2.40-4.redhat_2.ep6%3Farch=el7

Package Instance