Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/87197?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/87197?format=api", "purl": "pkg:apache/tomcat@6.0.35", "type": "apache", "namespace": "", "name": "tomcat", "version": "6.0.35", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "6.0.50", "latest_non_vulnerable_version": "11.0.22", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/58198?format=api", "vulnerability_id": "VCID-rbvf-c791-e7cg", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3439.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3439.json" }, { "reference_url": "https://github.com/apache/tomcat55/commit/83adfde198d8f9305edbd240e0081a2bb7902cfd", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat55/commit/83adfde198d8f9305edbd240e0081a2bb7902cfd" }, { "reference_url": "https://github.com/apache/tomcat70/commit/74a0585c82d981e80c82cd88d1cbcdb80082b77b", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/74a0585c82d981e80c82cd88d1cbcdb80082b77b" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1377807", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1377807" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1380829", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1380829" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1392248", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1392248" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1275985", "reference_id": "1275985", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1275985" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3439", "reference_id": "CVE-2012-3439", "reference_type": "", "scores": [ { "value": "Moderate", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3439" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/87196?format=api", "purl": "pkg:apache/tomcat@6.0.36", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-e72e-axdj-7qfw" }, { "vulnerability": "VCID-f4ka-47dk-zffs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.36" }, { "url": "http://public2.vulnerablecode.io/api/packages/87154?format=api", "purl": "pkg:apache/tomcat@7.0.30", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.30" } ], "aliases": [ "CVE-2012-3439" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rbvf-c791-e7cg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44179?format=api", "vulnerability_id": "VCID-redv-2x5y-8khx", "summary": "Cross-Site Request Forgery (CSRF)\norg/apache/catalina/filters/CsrfPreventionFilter.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.32 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism via a request that lacks a session identifier.", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2013-01/msg00051.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2013-01/msg00051.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2013-01/msg00080.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2013-01/msg00080.html" }, { "reference_url": "http://marc.info/?l=bugtraq&m=136612293908376&w=2", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://marc.info/?l=bugtraq&m=136612293908376&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139344343412337&w=2", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://marc.info/?l=bugtraq&m=139344343412337&w=2" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0267.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0267.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0268.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0268.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0647.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0647.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0648.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0648.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-1853.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-1853.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4431.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4431.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-4431", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.09824", "scoring_system": "epss", "scoring_elements": "0.93126", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.09824", "scoring_system": "epss", "scoring_elements": "0.93116", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.09824", "scoring_system": "epss", "scoring_elements": "0.93125", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.09824", "scoring_system": "epss", "scoring_elements": "0.93123", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.09824", "scoring_system": "epss", "scoring_elements": "0.9312", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-4431" }, { "reference_url": "https://github.com/apache/tomcat", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat" }, { "reference_url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03748878" }, { "reference_url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18541", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18541" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1393088", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1393088" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1394456", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1394456" }, { "reference_url": "http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/filters/CsrfPreventionFilter.java?r1=1393088&r2=1393087&pathrev=1393088", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/filters/CsrfPreventionFilter.java?r1=1393088&r2=1393087&pathrev=1393088" }, { "reference_url": "http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?r1=1393088&r2=1393087&pathrev=1393088", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?r1=1393088&r2=1393087&pathrev=1393088" }, { "reference_url": "http://svn.apache.org/viewvc?view=revision&revision=1393088", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://svn.apache.org/viewvc?view=revision&revision=1393088" }, { "reference_url": "http://tomcat.apache.org/security-6.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://tomcat.apache.org/security-6.html" }, { "reference_url": "http://tomcat.apache.org/security-7.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://tomcat.apache.org/security-7.html" }, { "reference_url": "http://www.ubuntu.com/usn/USN-1685-1", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.ubuntu.com/usn/USN-1685-1" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=883636", "reference_id": "883636", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=883636" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4431", "reference_id": "CVE-2012-4431", "reference_type": "", "scores": [ { "value": "Important", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4431" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4431", "reference_id": "CVE-2012-4431", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-4431" }, { "reference_url": "https://github.com/advisories/GHSA-76vr-72mv-mf3q", "reference_id": "GHSA-76vr-72mv-mf3q", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-76vr-72mv-mf3q" }, { "reference_url": "https://security.gentoo.org/glsa/201412-29", "reference_id": "GLSA-201412-29", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-29" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0265", "reference_id": "RHSA-2013:0265", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0265" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0266", "reference_id": "RHSA-2013:0266", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0266" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0267", "reference_id": "RHSA-2013:0267", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0267" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0268", "reference_id": "RHSA-2013:0268", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0268" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0647", "reference_id": "RHSA-2013:0647", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0647" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0648", "reference_id": "RHSA-2013:0648", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0648" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0665", "reference_id": "RHSA-2013:0665", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0665" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:1437", "reference_id": "RHSA-2013:1437", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:1437" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:1853", "reference_id": "RHSA-2013:1853", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:1853" }, { "reference_url": "https://usn.ubuntu.com/1685-1/", "reference_id": "USN-1685-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1685-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/87196?format=api", "purl": "pkg:apache/tomcat@6.0.36", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-e72e-axdj-7qfw" }, { "vulnerability": "VCID-f4ka-47dk-zffs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.36" }, { "url": "http://public2.vulnerablecode.io/api/packages/87149?format=api", "purl": "pkg:apache/tomcat@7.0.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-e72e-axdj-7qfw" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.32" } ], "aliases": [ "CVE-2012-4431", "GHSA-76vr-72mv-mf3q" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-redv-2x5y-8khx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/58199?format=api", "vulnerability_id": "VCID-t57j-pu79-dbbn", "summary": "", "references": [ { "reference_url": "http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html" }, { "reference_url": "http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html" }, { "reference_url": "http://marc.info/?l=bugtraq&m=136612293908376&w=2", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://marc.info/?l=bugtraq&m=136612293908376&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139344343412337&w=2", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://marc.info/?l=bugtraq&m=139344343412337&w=2" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0004.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0004.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0005.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0005.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0146.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0146.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0147.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0147.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0151.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0151.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0157.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0157.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0158.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0158.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0162.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0162.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0163.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0163.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0164.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0164.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0191.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0191.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0192.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0192.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0194.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0194.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0195.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0195.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0196.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0196.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0198.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0198.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0221.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0221.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0235.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0235.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0623.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0623.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0640.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0640.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0641.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0641.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2013-0642.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://rhn.redhat.com/errata/RHSA-2013-0642.html" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3546.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-3546.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-3546", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02215", "scoring_system": "epss", "scoring_elements": "0.84792", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.02215", "scoring_system": "epss", "scoring_elements": "0.8478", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02215", "scoring_system": "epss", "scoring_elements": "0.84804", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.02215", "scoring_system": "epss", "scoring_elements": "0.84809", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.02215", "scoring_system": "epss", "scoring_elements": "0.84803", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-3546" }, { "reference_url": "https://github.com/apache/tomcat", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat" }, { "reference_url": "https://github.com/apache/tomcat/commit/f78c0cdfc8a3c2efdfe6df6b69e5e3daafa3f588", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/f78c0cdfc8a3c2efdfe6df6b69e5e3daafa3f588" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3546", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-3546" }, { "reference_url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19305", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19305" }, { "reference_url": "https://svn.apache.org/repos/asf/tomcat/tc7.0.x/trunk@1377892", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://svn.apache.org/repos/asf/tomcat/tc7.0.x/trunk@1377892" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1377892", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1377892" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1381035", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1381035" }, { "reference_url": "http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/realm/RealmBase.java?r1=1377892&r2=1377891&pathrev=1377892", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/java/org/apache/catalina/realm/RealmBase.java?r1=1377892&r2=1377891&pathrev=1377892" }, { "reference_url": "http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?r1=1377892&r2=1377891&pathrev=1377892", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://svn.apache.org/viewvc/tomcat/tc7.0.x/trunk/webapps/docs/changelog.xml?r1=1377892&r2=1377891&pathrev=1377892" }, { "reference_url": "http://svn.apache.org/viewvc?view=revision&revision=1377892", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://svn.apache.org/viewvc?view=revision&revision=1377892" }, { "reference_url": "http://tomcat.apache.org/security-6.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://tomcat.apache.org/security-6.html" }, { "reference_url": "http://tomcat.apache.org/security-7.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://tomcat.apache.org/security-7.html" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=883634", "reference_id": "883634", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=883634" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3546", "reference_id": "CVE-2012-3546", "reference_type": "", "scores": [ { "value": "Important", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3546" }, { "reference_url": "https://github.com/advisories/GHSA-jgm2-m5cg-f66g", "reference_id": "GHSA-jgm2-m5cg-f66g", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-jgm2-m5cg-f66g" }, { "reference_url": "https://security.gentoo.org/glsa/201412-29", "reference_id": "GLSA-201412-29", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-29" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0004", "reference_id": "RHSA-2013:0004", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0004" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0005", "reference_id": "RHSA-2013:0005", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0005" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0146", "reference_id": "RHSA-2013:0146", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0146" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0147", "reference_id": "RHSA-2013:0147", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0147" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0151", "reference_id": "RHSA-2013:0151", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0151" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0157", "reference_id": "RHSA-2013:0157", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0157" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0158", "reference_id": "RHSA-2013:0158", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0158" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0162", "reference_id": "RHSA-2013:0162", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0162" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0163", "reference_id": "RHSA-2013:0163", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0163" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0164", "reference_id": "RHSA-2013:0164", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0164" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0235", "reference_id": "RHSA-2013:0235", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0235" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0623", "reference_id": "RHSA-2013:0623", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0623" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0640", "reference_id": "RHSA-2013:0640", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0640" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0641", "reference_id": "RHSA-2013:0641", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0641" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0642", "reference_id": "RHSA-2013:0642", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0642" }, { "reference_url": "https://usn.ubuntu.com/1685-1/", "reference_id": "USN-1685-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1685-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/87196?format=api", "purl": "pkg:apache/tomcat@6.0.36", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-e72e-axdj-7qfw" }, { "vulnerability": "VCID-f4ka-47dk-zffs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.36" }, { "url": "http://public2.vulnerablecode.io/api/packages/87154?format=api", "purl": "pkg:apache/tomcat@7.0.30", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.30" } ], "aliases": [ "CVE-2012-3546", "GHSA-jgm2-m5cg-f66g" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t57j-pu79-dbbn" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/58200?format=api", "vulnerability_id": "VCID-tc66-7b7t-k7h3", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2733.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-2733.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2733", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.20282", "scoring_system": "epss", "scoring_elements": "0.95632", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.20282", "scoring_system": "epss", "scoring_elements": "0.95638", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.20282", "scoring_system": "epss", "scoring_elements": "0.95642", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.20282", "scoring_system": "epss", "scoring_elements": "0.95644", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.20282", "scoring_system": "epss", "scoring_elements": "0.95645", "published_at": "2026-06-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-2733" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1350301", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1350301" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1356208", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1356208" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=873695", "reference_id": "873695", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=873695" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2733", "reference_id": "CVE-2012-2733", "reference_type": "", "scores": [ { "value": "Important", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2733" }, { "reference_url": "https://security.gentoo.org/glsa/201412-29", "reference_id": "GLSA-201412-29", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-29" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0265", "reference_id": "RHSA-2013:0265", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0265" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0266", "reference_id": "RHSA-2013:0266", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0266" }, { "reference_url": "https://usn.ubuntu.com/1637-1/", "reference_id": "USN-1637-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1637-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/87196?format=api", "purl": "pkg:apache/tomcat@6.0.36", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-e72e-axdj-7qfw" }, { "vulnerability": "VCID-f4ka-47dk-zffs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.36" }, { "url": "http://public2.vulnerablecode.io/api/packages/87106?format=api", "purl": "pkg:apache/tomcat@7.0.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-rtmv-qetu-yqfa" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.28" } ], "aliases": [ "CVE-2012-2733" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tc66-7b7t-k7h3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/58201?format=api", "vulnerability_id": "VCID-tmjv-jvfy-judb", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4534.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-4534.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-4534", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.2277", "scoring_system": "epss", "scoring_elements": "0.95979", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.2277", "scoring_system": "epss", "scoring_elements": "0.95984", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.2277", "scoring_system": "epss", "scoring_elements": "0.95987", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.2277", "scoring_system": "epss", "scoring_elements": "0.95988", "published_at": "2026-06-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-4534" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1340218", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1340218" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1372035", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1372035" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=883637", "reference_id": "883637", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=883637" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4534", "reference_id": "CVE-2012-4534", "reference_type": "", "scores": [ { "value": "Important", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4534" }, { "reference_url": "https://security.gentoo.org/glsa/201412-29", "reference_id": "GLSA-201412-29", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201412-29" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0265", "reference_id": "RHSA-2013:0265", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0265" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0266", "reference_id": "RHSA-2013:0266", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0266" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2013:0623", "reference_id": "RHSA-2013:0623", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2013:0623" }, { "reference_url": "https://usn.ubuntu.com/1685-1/", "reference_id": "USN-1685-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1685-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/87196?format=api", "purl": "pkg:apache/tomcat@6.0.36", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-e72e-axdj-7qfw" }, { "vulnerability": "VCID-f4ka-47dk-zffs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.36" }, { "url": "http://public2.vulnerablecode.io/api/packages/87106?format=api", "purl": "pkg:apache/tomcat@7.0.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-rtmv-qetu-yqfa" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.28" } ], "aliases": [ "CVE-2012-4534" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tmjv-jvfy-judb" } ], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43901?format=api", "vulnerability_id": "VCID-4t2h-jjhm-y7fq", "summary": "Apache Tomcat Allows Remote Attackers to Spoof AJP Requests\nCertain AJP protocol connector implementations in Apache Tomcat 7.0.0 through 7.0.20, 6.0.0 through 6.0.33, 5.5.0 through 5.5.33, and possibly other versions allow remote attackers to spoof AJP requests, bypass authentication, and obtain sensitive information by causing the connector to interpret a request body as a new request.", "references": [ { "reference_url": "http://marc.info/?l=bugtraq&m=132215163318824&w=2", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://marc.info/?l=bugtraq&m=132215163318824&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=133469267822771&w=2", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://marc.info/?l=bugtraq&m=133469267822771&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=136485229118404&w=2", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://marc.info/?l=bugtraq&m=136485229118404&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=139344343412337&w=2", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://marc.info/?l=bugtraq&m=139344343412337&w=2" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3190.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3190.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3190", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00872", "scoring_system": "epss", "scoring_elements": "0.75597", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00872", "scoring_system": "epss", "scoring_elements": "0.7559", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00872", "scoring_system": "epss", "scoring_elements": "0.75576", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00872", "scoring_system": "epss", "scoring_elements": "0.75569", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.00872", "scoring_system": "epss", "scoring_elements": "0.756", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3190" }, { "reference_url": "http://securityreason.com/securityalert/8362", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://securityreason.com/securityalert/8362" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69472", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/69472" }, { "reference_url": "https://github.com/apache/tomcat", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat" }, { "reference_url": "https://github.com/apache/tomcat55/commit/be3eb28f82250a5c81a1c42216570ebf892aefac", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat55/commit/be3eb28f82250a5c81a1c42216570ebf892aefac" }, { "reference_url": "https://github.com/apache/tomcat70/commit/90ec9675fa080e22df5f9e3e7019a19eb2faec14", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/90ec9675fa080e22df5f9e3e7019a19eb2faec14" }, { "reference_url": "https://github.com/apache/tomcat/commit/a2538ce78f83b7376c48d12d8247600079d789b1", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/a2538ce78f83b7376c48d12d8247600079d789b1" }, { "reference_url": "https://issues.apache.org/bugzilla/show_bug.cgi?id=51698", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://issues.apache.org/bugzilla/show_bug.cgi?id=51698" }, { "reference_url": "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14933", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14933" }, { "reference_url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19465", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19465" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1162958", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1162958" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1162959", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1162959" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1162960", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1162960" }, { "reference_url": "https://web.archive.org/web/20130121232525/http://www.securityfocus.com/archive/1/519466/100/0/threaded", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20130121232525/http://www.securityfocus.com/archive/1/519466/100/0/threaded" }, { "reference_url": "https://web.archive.org/web/20130314002148/http://www.securityfocus.com/bid/49353", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20130314002148/http://www.securityfocus.com/bid/49353" }, { "reference_url": "https://web.archive.org/web/20131214094052/http://www.securitytracker.com/id?1025993", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://web.archive.org/web/20131214094052/http://www.securitytracker.com/id?1025993" }, { "reference_url": "http://www.debian.org/security/2012/dsa-2401", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.debian.org/security/2012/dsa-2401" }, { "reference_url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:156", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2011:156" }, { "reference_url": "http://www.securityfocus.com/archive/1/519466/100/0/threaded", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/archive/1/519466/100/0/threaded" }, { "reference_url": "http://www.securityfocus.com/bid/49353", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securityfocus.com/bid/49353" }, { "reference_url": "http://www.securitytracker.com/id?1025993", "reference_id": "", "reference_type": "", "scores": [], "url": "http://www.securitytracker.com/id?1025993" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=734868", "reference_id": "734868", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=734868" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3190", "reference_id": "CVE-2011-3190", "reference_type": "", "scores": [ { "value": "Important", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3190" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3190", "reference_id": "CVE-2011-3190", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3190" }, { "reference_url": "https://github.com/advisories/GHSA-c38m-v4m2-524v", "reference_id": "GHSA-c38m-v4m2-524v", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-c38m-v4m2-524v" }, { "reference_url": "https://security.gentoo.org/glsa/201206-24", "reference_id": "GLSA-201206-24", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201206-24" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2011:1780", "reference_id": "RHSA-2011:1780", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2011:1780" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0679", "reference_id": "RHSA-2012:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0679" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0680", "reference_id": "RHSA-2012:0680", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0680" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0681", "reference_id": "RHSA-2012:0681", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0681" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0682", "reference_id": "RHSA-2012:0682", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0682" }, { "reference_url": "https://usn.ubuntu.com/1252-1/", "reference_id": "USN-1252-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1252-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/87228?format=api", "purl": "pkg:apache/tomcat@5.5.34", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-fu9h-e3jx-abe2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.34" }, { "url": "http://public2.vulnerablecode.io/api/packages/87197?format=api", "purl": "pkg:apache/tomcat@6.0.35", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-rbvf-c791-e7cg" }, { "vulnerability": "VCID-redv-2x5y-8khx" }, { "vulnerability": "VCID-t57j-pu79-dbbn" }, { "vulnerability": "VCID-tc66-7b7t-k7h3" }, { "vulnerability": "VCID-tmjv-jvfy-judb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.35" }, { "url": "http://public2.vulnerablecode.io/api/packages/87158?format=api", "purl": "pkg:apache/tomcat@7.0.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-299p-e7fh-qfa2" }, { "vulnerability": "VCID-bwbm-vktd-jbd5" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.21" } ], "aliases": [ "CVE-2011-3190", "GHSA-c38m-v4m2-524v" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-4t2h-jjhm-y7fq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/58202?format=api", "vulnerability_id": "VCID-bwbm-vktd-jbd5", "summary": "", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3375.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-3375.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3375", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02015", "scoring_system": "epss", "scoring_elements": "0.8405", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.02015", "scoring_system": "epss", "scoring_elements": "0.84062", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.02015", "scoring_system": "epss", "scoring_elements": "0.84072", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.02015", "scoring_system": "epss", "scoring_elements": "0.84076", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.02015", "scoring_system": "epss", "scoring_elements": "0.84073", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-3375" }, { "reference_url": "https://github.com/apache/tomcat", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat" }, { "reference_url": "https://github.com/apache/tomcat70/commit/9eae334e9492f55a841e6eb7ab302ff11d03ab21", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/9eae334e9492f55a841e6eb7ab302ff11d03ab21" }, { "reference_url": "https://github.com/apache/tomcat/commit/9eae334e9492f55a841e6eb7ab302ff11d03ab21", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat/commit/9eae334e9492f55a841e6eb7ab302ff11d03ab21" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3375", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-3375" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1176592", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1176592" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1185998", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1185998" }, { "reference_url": "http://tomcat.apache.org/security-6.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://tomcat.apache.org/security-6.html" }, { "reference_url": "http://tomcat.apache.org/security-7.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://tomcat.apache.org/security-7.html" }, { "reference_url": "http://www.debian.org/security/2012/dsa-2401", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.debian.org/security/2012/dsa-2401" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=782624", "reference_id": "782624", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=782624" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3375", "reference_id": "CVE-2011-3375", "reference_type": "", "scores": [ { "value": "Important", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3375" }, { "reference_url": "https://github.com/advisories/GHSA-rp8h-vr48-4j8p", "reference_id": "GHSA-rp8h-vr48-4j8p", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-rp8h-vr48-4j8p" }, { "reference_url": "https://security.gentoo.org/glsa/201206-24", "reference_id": "GLSA-201206-24", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201206-24" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0681", "reference_id": "RHSA-2012:0681", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0681" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0682", "reference_id": "RHSA-2012:0682", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0682" }, { "reference_url": "https://usn.ubuntu.com/1359-1/", "reference_id": "USN-1359-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1359-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/87197?format=api", "purl": "pkg:apache/tomcat@6.0.35", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-rbvf-c791-e7cg" }, { "vulnerability": "VCID-redv-2x5y-8khx" }, { "vulnerability": "VCID-t57j-pu79-dbbn" }, { "vulnerability": "VCID-tc66-7b7t-k7h3" }, { "vulnerability": "VCID-tmjv-jvfy-judb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.35" }, { "url": "http://public2.vulnerablecode.io/api/packages/87156?format=api", "purl": "pkg:apache/tomcat@7.0.22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-fu9h-e3jx-abe2" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.22" } ], "aliases": [ "CVE-2011-3375", "GHSA-rp8h-vr48-4j8p" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-bwbm-vktd-jbd5" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/43273?format=api", "vulnerability_id": "VCID-fu9h-e3jx-abe2", "summary": "Denial of Service in Apache Tomcat\nApache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service (CPU consumption) via a request that contains many parameters and parameter values, a different vulnerability than CVE-2011-4858.", "references": [ { "reference_url": "http://marc.info/?l=bugtraq&m=132871655717248&w=2", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://marc.info/?l=bugtraq&m=132871655717248&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=133294394108746&w=2", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://marc.info/?l=bugtraq&m=133294394108746&w=2" }, { "reference_url": "http://marc.info/?l=bugtraq&m=136485229118404&w=2", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://marc.info/?l=bugtraq&m=136485229118404&w=2" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2012-0074.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://rhn.redhat.com/errata/RHSA-2012-0074.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2012-0075.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://rhn.redhat.com/errata/RHSA-2012-0075.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2012-0076.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://rhn.redhat.com/errata/RHSA-2012-0076.html" }, { "reference_url": "http://rhn.redhat.com/errata/RHSA-2012-1331.html", "reference_id": "", "reference_type": "", "scores": [], "url": "http://rhn.redhat.com/errata/RHSA-2012-1331.html" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0074", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2012:0074" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0075", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2012:0075" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0076", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2012:0076" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:1331", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://access.redhat.com/errata/RHSA-2012:1331" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0022.json", "reference_id": "", "reference_type": "", "scores": [], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0022.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0022", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.23189", "scoring_system": "epss", "scoring_elements": "0.96048", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.23189", "scoring_system": "epss", "scoring_elements": "0.96049", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.23418", "scoring_system": "epss", "scoring_elements": "0.96065", "published_at": "2026-06-04T12:55:00Z" }, { "value": "0.23418", "scoring_system": "epss", "scoring_elements": "0.96073", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.23418", "scoring_system": "epss", "scoring_elements": "0.96069", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-0022" }, { "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72425", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/72425" }, { "reference_url": "https://github.com/apache/tomcat", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat" }, { "reference_url": "https://github.com/apache/tomcat55/commit/0314fe7743cb72e469cb395ccaaf2793a2ea0355", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat55/commit/0314fe7743cb72e469cb395ccaaf2793a2ea0355" }, { "reference_url": "https://github.com/apache/tomcat55/commit/7a1cfb6bd2f849806e7c060dda8648409ad8714e", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat55/commit/7a1cfb6bd2f849806e7c060dda8648409ad8714e" }, { "reference_url": "https://github.com/apache/tomcat55/commit/b05497eff4311a9657de6dfc53511d0309eb9db4", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/apache/tomcat55/commit/b05497eff4311a9657de6dfc53511d0309eb9db4" }, { "reference_url": "https://github.com/apache/tomcat70/commit/0351f661e9219a0682df1d2a9265c518438279c6", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/0351f661e9219a0682df1d2a9265c518438279c6" }, { "reference_url": "https://github.com/apache/tomcat70/commit/0569aa6a01a74d51b93fd0027288358825fc03d5", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/0569aa6a01a74d51b93fd0027288358825fc03d5" }, { "reference_url": "https://github.com/apache/tomcat70/commit/0c5d3a903598abd7c7ebe1b00e27a6574339c417", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/0c5d3a903598abd7c7ebe1b00e27a6574339c417" }, { "reference_url": "https://github.com/apache/tomcat70/commit/233dcc857e0faf8bc94325be5fb287aa70ee944f", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/233dcc857e0faf8bc94325be5fb287aa70ee944f" }, { "reference_url": "https://github.com/apache/tomcat70/commit/597edaab8863df03f7bdc4eafb39e754fd3cd322", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/597edaab8863df03f7bdc4eafb39e754fd3cd322" }, { "reference_url": "https://github.com/apache/tomcat70/commit/5fd94ded5ebc57926974064d9b1e82e8f44c743c", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/5fd94ded5ebc57926974064d9b1e82e8f44c743c" }, { "reference_url": "https://github.com/apache/tomcat70/commit/7b05232350c11370ab9385185a57ccd1fe7da09f", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/7b05232350c11370ab9385185a57ccd1fe7da09f" }, { "reference_url": "https://github.com/apache/tomcat70/commit/9649a2147ce04753bb0bbe2be8e66444670c6db5", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/9649a2147ce04753bb0bbe2be8e66444670c6db5" }, { "reference_url": "https://github.com/apache/tomcat70/commit/a2fede48c2d8130db216ea2261c376d723021aa4", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/a2fede48c2d8130db216ea2261c376d723021aa4" }, { "reference_url": "https://github.com/apache/tomcat70/commit/a4bfa01d4e6fd677f6831ab7b3e513c8b94c6185", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/a4bfa01d4e6fd677f6831ab7b3e513c8b94c6185" }, { "reference_url": "https://github.com/apache/tomcat70/commit/c2508191c17acd5e530d80a623a4ac28a8b23128", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/c2508191c17acd5e530d80a623a4ac28a8b23128" }, { "reference_url": "https://github.com/apache/tomcat70/commit/c7950cf9f2d7790a40113d2b50e52cbb337a8fe9", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/tomcat70/commit/c7950cf9f2d7790a40113d2b50e52cbb337a8fe9" }, { "reference_url": "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E" }, { "reference_url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16925", "reference_id": "", "reference_type": "", "scores": [], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16925" }, { "reference_url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18934", "reference_id": "", "reference_type": "", "scores": [], "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18934" }, { "reference_url": "https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:16925", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:16925" }, { "reference_url": "https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:18934", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:18934" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1189899", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1189899" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1190372", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1190372" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1190482", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1190482" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1194917", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1194917" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1195225", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1195225" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1195226", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1195226" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1195537", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1195537" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1195909", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1195909" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1195944", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1195944" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1195951", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1195951" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1195977", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1195977" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1198641", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1198641" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1200601", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1200601" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1206324", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1206324" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1221282", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1221282" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1224640", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1224640" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1228191", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1228191" }, { "reference_url": "https://svn.apache.org/viewvc?view=rev&rev=1229027", "reference_id": "", "reference_type": "", "scores": [], "url": "https://svn.apache.org/viewvc?view=rev&rev=1229027" }, { "reference_url": "http://tomcat.apache.org/security-5.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://tomcat.apache.org/security-5.html" }, { "reference_url": "http://tomcat.apache.org/security-6.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://tomcat.apache.org/security-6.html" }, { "reference_url": "http://tomcat.apache.org/security-7.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://tomcat.apache.org/security-7.html" }, { "reference_url": "http://www.debian.org/security/2012/dsa-2401", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.debian.org/security/2012/dsa-2401" }, { "reference_url": "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.oracle.com/technetwork/topics/security/cpujan2013-1515902.html" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=783359", "reference_id": "783359", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=783359" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0022", "reference_id": "CVE-2012-0022", "reference_type": "", "scores": [ { "value": "Important", "scoring_system": "apache_tomcat", "scoring_elements": "" } ], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0022" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0022", "reference_id": "CVE-2012-0022", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-0022" }, { "reference_url": "https://github.com/advisories/GHSA-8h2q-qm9x-55jc", "reference_id": "GHSA-8h2q-qm9x-55jc", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-8h2q-qm9x-55jc" }, { "reference_url": "https://security.gentoo.org/glsa/201206-24", "reference_id": "GLSA-201206-24", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/201206-24" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0077", "reference_id": "RHSA-2012:0077", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0077" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0078", "reference_id": "RHSA-2012:0078", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0078" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0325", "reference_id": "RHSA-2012:0325", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0325" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0345", "reference_id": "RHSA-2012:0345", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0345" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0474", "reference_id": "RHSA-2012:0474", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0474" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0475", "reference_id": "RHSA-2012:0475", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0475" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0679", "reference_id": "RHSA-2012:0679", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0679" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0680", "reference_id": "RHSA-2012:0680", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0680" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0681", "reference_id": "RHSA-2012:0681", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0681" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2012:0682", "reference_id": "RHSA-2012:0682", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2012:0682" }, { "reference_url": "https://usn.ubuntu.com/1359-1/", "reference_id": "USN-1359-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/1359-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/87225?format=api", "purl": "pkg:apache/tomcat@5.5.35", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-rbvf-c791-e7cg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.35" }, { "url": "http://public2.vulnerablecode.io/api/packages/87197?format=api", "purl": "pkg:apache/tomcat@6.0.35", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-rbvf-c791-e7cg" }, { "vulnerability": "VCID-redv-2x5y-8khx" }, { "vulnerability": "VCID-t57j-pu79-dbbn" }, { "vulnerability": "VCID-tc66-7b7t-k7h3" }, { "vulnerability": "VCID-tmjv-jvfy-judb" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.35" }, { "url": "http://public2.vulnerablecode.io/api/packages/87097?format=api", "purl": "pkg:apache/tomcat@7.0.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-wmb3-3j7y-due7" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.23" } ], "aliases": [ "CVE-2012-0022", "GHSA-8h2q-qm9x-55jc" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fu9h-e3jx-abe2" } ], "risk_score": "4.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.35" }