Lookup for vulnerable packages by Package URL.

Purlpkg:maven/geronimo/geronimo-console-standard@1.0
Typemaven
Namespacegeronimo
Namegeronimo-console-standard
Version1.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_versionnull
Latest_non_vulnerable_versionnull
Affected_by_vulnerabilities
0
url VCID-6d1j-1n1r-7khr
vulnerability_id VCID-6d1j-1n1r-7khr
summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Multiple cross-site scripting (XSS) vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) time parameter to cal2.jsp and (2) any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer.
references
0
reference_url http://issues.apache.org/jira/browse/GERONIMO-1474
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://issues.apache.org/jira/browse/GERONIMO-1474
1
reference_url http://rhn.redhat.com/errata/RHSA-2008-0630.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2008-0630.html
2
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0254.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-0254.json
3
reference_url https://api.first.org/data/v1/epss?cve=CVE-2006-0254
reference_id
reference_type
scores
0
value 0.45321
scoring_system epss
scoring_elements 0.97604
published_at 2026-04-13T12:55:00Z
1
value 0.45321
scoring_system epss
scoring_elements 0.97614
published_at 2026-04-21T12:55:00Z
2
value 0.45321
scoring_system epss
scoring_elements 0.97613
published_at 2026-04-18T12:55:00Z
3
value 0.45321
scoring_system epss
scoring_elements 0.97612
published_at 2026-04-16T12:55:00Z
4
value 0.45321
scoring_system epss
scoring_elements 0.97581
published_at 2026-04-01T12:55:00Z
5
value 0.45321
scoring_system epss
scoring_elements 0.97587
published_at 2026-04-02T12:55:00Z
6
value 0.45321
scoring_system epss
scoring_elements 0.9759
published_at 2026-04-04T12:55:00Z
7
value 0.45321
scoring_system epss
scoring_elements 0.97591
published_at 2026-04-07T12:55:00Z
8
value 0.45321
scoring_system epss
scoring_elements 0.97596
published_at 2026-04-08T12:55:00Z
9
value 0.45321
scoring_system epss
scoring_elements 0.97599
published_at 2026-04-09T12:55:00Z
10
value 0.45321
scoring_system epss
scoring_elements 0.97602
published_at 2026-04-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2006-0254
4
reference_url http://secunia.com/advisories/18485
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/18485
5
reference_url http://secunia.com/advisories/31493
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://secunia.com/advisories/31493
6
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/24158
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/24158
7
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/24159
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/24159
8
reference_url https://geronimo.apache.org/GMOxDOC11/release-notes-11txt.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://geronimo.apache.org/GMOxDOC11/release-notes-11txt.html
9
reference_url https://issues.apache.org/jira/secure/attachment/12322088/GERONIMO-1474.patch
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/secure/attachment/12322088/GERONIMO-1474.patch
10
reference_url https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12310181&styleName=Html&projectId=10220&Create=Create
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/secure/ReleaseNote.jspa?version=12310181&styleName=Html&projectId=10220&Create=Create
11
reference_url http://svn.apache.org/viewvc/geronimo
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc/geronimo
12
reference_url http://svn.apache.org/viewvc?view=revision&revision=372322
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=372322
13
reference_url http://www.oliverkarow.de/research/geronimo_css.txt
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oliverkarow.de/research/geronimo_css.txt
14
reference_url http://www.redhat.com/support/errata/RHSA-2008-0261.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.redhat.com/support/errata/RHSA-2008-0261.html
15
reference_url http://www.securityfocus.com/archive/1/421996/100/0/threaded
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/archive/1/421996/100/0/threaded
16
reference_url http://www.securityfocus.com/bid/16260
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/16260
17
reference_url http://www.vupen.com/english/advisories/2006/0217
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vupen.com/english/advisories/2006/0217
18
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=430646
reference_id 430646
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=430646
19
reference_url https://nvd.nist.gov/vuln/detail/CVE-2006-0254
reference_id CVE-2006-0254
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2006-0254
20
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/27095.txt
reference_id CVE-2006-0254;OSVDB-22458
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/27095.txt
21
reference_url https://www.securityfocus.com/bid/16260/info
reference_id CVE-2006-0254;OSVDB-22458
reference_type exploit
scores
url https://www.securityfocus.com/bid/16260/info
22
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/27096.txt
reference_id CVE-2006-0254;OSVDB-22459
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/27096.txt
23
reference_url https://github.com/advisories/GHSA-2jxh-3cx8-xw65
reference_id GHSA-2jxh-3cx8-xw65
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2jxh-3cx8-xw65
24
reference_url https://access.redhat.com/errata/RHSA-2006:0161
reference_id RHSA-2006:0161
reference_type
scores
url https://access.redhat.com/errata/RHSA-2006:0161
25
reference_url https://access.redhat.com/errata/RHSA-2006:0592
reference_id RHSA-2006:0592
reference_type
scores
url https://access.redhat.com/errata/RHSA-2006:0592
26
reference_url https://access.redhat.com/errata/RHSA-2008:0630
reference_id RHSA-2008:0630
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0630
fixed_packages
0
url pkg:maven/geronimo/geronimo-console-standard@1.1
purl pkg:maven/geronimo/geronimo-console-standard@1.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/geronimo/geronimo-console-standard@1.1
aliases CVE-2006-0254, GHSA-2jxh-3cx8-xw65
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6d1j-1n1r-7khr
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/geronimo/geronimo-console-standard@1.0