Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.picketlink/picketlink-fed-core@1.0.4.final
Typemaven
Namespaceorg.picketlink
Namepicketlink-fed-core
Version1.0.4.final
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-cdqt-rqpk-27cm
vulnerability_id VCID-cdqt-rqpk-27cm
summary 
Information Exposure
The `org.picketlink.common.util.DocumentUtil.getDocumentBuilderFactory` method in PicketLink expands entity references, which allows remote attackers to read arbitrary code and possibly have other unspecified impact via unspecified vectors, related to an XML External Entity (XXE) issue.
references
0
reference_url http://rhn.redhat.com/errata/RHSA-2014-0883.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-0883.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2014-0884.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-0884.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2014-0885.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-0885.html
3
reference_url http://rhn.redhat.com/errata/RHSA-2014-0886.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2014-0886.html
4
reference_url http://rhn.redhat.com/errata/RHSA-2015-0091.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0091.html
5
reference_url http://rhn.redhat.com/errata/RHSA-2015-0675.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0675.html
6
reference_url http://rhn.redhat.com/errata/RHSA-2015-0720.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0720.html
7
reference_url http://rhn.redhat.com/errata/RHSA-2015-0765.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-0765.html
8
reference_url http://rhn.redhat.com/errata/RHSA-2015-1888.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2015-1888.html
9
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3530.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3530.json
10
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-3530
reference_id
reference_type
scores
0
value 0.02131
scoring_system epss
scoring_elements 0.84515
published_at 2026-06-05T12:55:00Z
1
value 0.02131
scoring_system epss
scoring_elements 0.8449
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-3530
11
reference_url https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1112987
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=1112987
12
reference_url http://secunia.com/advisories/60047
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/60047
13
reference_url http://secunia.com/advisories/60124
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/60124
14
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/94700
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/94700
15
reference_url https://github.com/picketlink/picketlink
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/picketlink/picketlink
16
reference_url https://github.com/picketlink/picketlink/commit/8c78668e4f08cf3c4ed14d8a36d402dcf02cb057
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/picketlink/picketlink/commit/8c78668e4f08cf3c4ed14d8a36d402dcf02cb057
17
reference_url https://issues.jboss.org/browse/PLINK-509
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://issues.jboss.org/browse/PLINK-509
18
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-3530
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-3530
19
reference_url http://www.securitytracker.com/id/1030607
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1030607
20
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1112987
reference_id 1112987
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1112987
21
reference_url https://bugzilla.redhat.com/CVE-2014-3530
reference_id CVE-2014-3530
reference_type
scores
url https://bugzilla.redhat.com/CVE-2014-3530
22
reference_url https://access.redhat.com/errata/RHSA-2014:0883
reference_id RHSA-2014:0883
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0883
23
reference_url https://access.redhat.com/errata/RHSA-2014:0884
reference_id RHSA-2014:0884
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0884
24
reference_url https://access.redhat.com/errata/RHSA-2014:0885
reference_id RHSA-2014:0885
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0885
25
reference_url https://access.redhat.com/errata/RHSA-2014:0886
reference_id RHSA-2014:0886
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0886
26
reference_url https://access.redhat.com/errata/RHSA-2014:0897
reference_id RHSA-2014:0897
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0897
27
reference_url https://access.redhat.com/errata/RHSA-2014:0898
reference_id RHSA-2014:0898
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0898
28
reference_url https://access.redhat.com/errata/RHSA-2014:0910
reference_id RHSA-2014:0910
reference_type
scores
url https://access.redhat.com/errata/RHSA-2014:0910
29
reference_url https://access.redhat.com/errata/RHSA-2015:0091
reference_id RHSA-2015:0091
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0091
30
reference_url https://access.redhat.com/errata/RHSA-2015:0234
reference_id RHSA-2015:0234
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0234
31
reference_url https://access.redhat.com/errata/RHSA-2015:0235
reference_id RHSA-2015:0235
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0235
32
reference_url https://access.redhat.com/errata/RHSA-2015:0675
reference_id RHSA-2015:0675
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0675
33
reference_url https://access.redhat.com/errata/RHSA-2015:0720
reference_id RHSA-2015:0720
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0720
34
reference_url https://access.redhat.com/errata/RHSA-2015:0765
reference_id RHSA-2015:0765
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:0765
35
reference_url https://access.redhat.com/errata/RHSA-2015:1009
reference_id RHSA-2015:1009
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1009
36
reference_url https://access.redhat.com/errata/RHSA-2015:1888
reference_id RHSA-2015:1888
reference_type
scores
url https://access.redhat.com/errata/RHSA-2015:1888
fixed_packages
0
url pkg:maven/org.picketlink/picketlink-fed-core@2.5.0.Final
purl pkg:maven/org.picketlink/picketlink-fed-core@2.5.0.Final
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.picketlink/picketlink-fed-core@2.5.0.Final
aliases CVE-2014-3530, GHSA-2c9q-qwrc-f486
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cdqt-rqpk-27cm
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.picketlink/picketlink-fed-core@1.0.4.final