Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/11317?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/11317?format=api", "vulnerability_id": "VCID-ysp6-t713-ffgr", "summary": "Improper Input Validation in Jakarta Expression Language\nIn the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.", "aliases": [ { "alias": "CVE-2021-28170" }, { "alias": "GHSA-v6w3-2prq-h95f" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/40574?format=api", "purl": "pkg:maven/com.sun.el/el-ri@3.0.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.el/el-ri@3.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/40544?format=api", "purl": "pkg:maven/org.glassfish/jakarta.el@3.0.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/jakarta.el@3.0.4" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/250630?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/250631?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@1.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@1.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/250632?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@1.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@1.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/250633?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@1.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@1.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/250634?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@1.0.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@1.0.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/250635?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@1.0.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@1.0.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/250636?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@1.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@1.0.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/250637?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@1.0.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@1.0.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/250638?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@1.0.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@1.0.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/250639?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@1.0.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@1.0.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/250640?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@2.0.0-M1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@2.0.0-M1" }, { "url": "http://public2.vulnerablecode.io/api/packages/250641?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@2.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@2.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/250642?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@2.0.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@2.0.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/250643?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@2.0.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@2.0.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/569600?format=api", "purl": "pkg:maven/org.eclipse.ee4j/project@3.0.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.eclipse.ee4j/project@3.0.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/263461?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0-b01", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0-b01" }, { "url": "http://public2.vulnerablecode.io/api/packages/263462?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0-b02", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0-b02" }, { "url": "http://public2.vulnerablecode.io/api/packages/263463?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0-b03", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0-b03" }, { "url": "http://public2.vulnerablecode.io/api/packages/263464?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0-b04", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0-b04" }, { "url": "http://public2.vulnerablecode.io/api/packages/263465?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0-b05", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0-b05" }, { "url": "http://public2.vulnerablecode.io/api/packages/263466?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0-b06", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0-b06" }, { "url": "http://public2.vulnerablecode.io/api/packages/263467?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0-b07", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0-b07" }, { "url": "http://public2.vulnerablecode.io/api/packages/263468?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/263469?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0.1-b01", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0.1-b01" }, { "url": "http://public2.vulnerablecode.io/api/packages/263470?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0.1-b02", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0.1-b02" }, { "url": "http://public2.vulnerablecode.io/api/packages/263471?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0.1-b03", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0.1-b03" }, { "url": "http://public2.vulnerablecode.io/api/packages/263472?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0.1-b04", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0.1-b04" }, { "url": "http://public2.vulnerablecode.io/api/packages/263473?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0.1-b05", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0.1-b05" }, { "url": "http://public2.vulnerablecode.io/api/packages/263474?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0.1-b06", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0.1-b06" }, { "url": "http://public2.vulnerablecode.io/api/packages/263475?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0.1-b07", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0.1-b07" }, { "url": "http://public2.vulnerablecode.io/api/packages/263476?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0.1-b08", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0.1-b08" }, { "url": "http://public2.vulnerablecode.io/api/packages/263477?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0.1-b09", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0.1-b09" }, { "url": "http://public2.vulnerablecode.io/api/packages/263478?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0.1-b10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0.1-b10" }, { "url": "http://public2.vulnerablecode.io/api/packages/263479?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0.1-b11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0.1-b11" }, { "url": "http://public2.vulnerablecode.io/api/packages/40608?format=api", "purl": "pkg:maven/org.glassfish/javax.el@3.0.1-b12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.glassfish/javax.el@3.0.1-b12" }, { "url": "http://public2.vulnerablecode.io/api/packages/100197?format=api", "purl": "pkg:rpm/redhat/eap7-apache-commons-io@2.10.0-1.redhat_00001.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-apache-commons-io@2.10.0-1.redhat_00001.1%3Farch=el7eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100205?format=api", "purl": "pkg:rpm/redhat/eap7-apache-commons-io@2.10.0-1.redhat_00001.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-apache-commons-io@2.10.0-1.redhat_00001.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100182?format=api", "purl": "pkg:rpm/redhat/eap7-apache-commons-io@2.10.0-1.redhat_00001.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-apache-commons-io@2.10.0-1.redhat_00001.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/93738?format=api", "purl": "pkg:rpm/redhat/eap7-glassfish-el@3.0.1-4.b08_redhat_00005.1.ep7?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5585-a76n-zubf" }, { "vulnerability": "VCID-62gn-nwup-8uat" }, { "vulnerability": "VCID-6ssa-j1q1-c3cs" }, { "vulnerability": "VCID-8p4t-8f51-h3dc" }, { "vulnerability": "VCID-9p6a-t8zz-jkfd" }, { "vulnerability": "VCID-9v3p-qkzz-ukgg" }, { "vulnerability": "VCID-beaj-uk9m-17be" }, { "vulnerability": "VCID-gkzd-prsr-gqc8" }, { "vulnerability": "VCID-jz3d-vvfb-jfbw" }, { "vulnerability": "VCID-mapy-1mup-wfgx" }, { "vulnerability": "VCID-v6ek-y7cn-kycd" }, { "vulnerability": "VCID-vdv3-7dwp-suab" }, { "vulnerability": "VCID-xyc4-63ra-mfh2" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-glassfish-el@3.0.1-4.b08_redhat_00005.1.ep7%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/100173?format=api", "purl": "pkg:rpm/redhat/eap7-hal-console@3.2.16-1.Final_redhat_00001.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-hal-console@3.2.16-1.Final_redhat_00001.1%3Farch=el7eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100186?format=api", "purl": "pkg:rpm/redhat/eap7-hal-console@3.2.16-1.Final_redhat_00001.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-hal-console@3.2.16-1.Final_redhat_00001.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100203?format=api", "purl": "pkg:rpm/redhat/eap7-hal-console@3.2.16-1.Final_redhat_00001.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-hal-console@3.2.16-1.Final_redhat_00001.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/93741?format=api", "purl": "pkg:rpm/redhat/eap7-hibernate@5.1.17-3.Final_redhat_00004.1.ep7?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5585-a76n-zubf" }, { "vulnerability": "VCID-62gn-nwup-8uat" }, { "vulnerability": "VCID-6ssa-j1q1-c3cs" }, { "vulnerability": "VCID-8p4t-8f51-h3dc" }, { "vulnerability": "VCID-9p6a-t8zz-jkfd" }, { "vulnerability": "VCID-9v3p-qkzz-ukgg" }, { "vulnerability": "VCID-beaj-uk9m-17be" }, { "vulnerability": "VCID-gkzd-prsr-gqc8" }, { "vulnerability": "VCID-jz3d-vvfb-jfbw" }, { "vulnerability": "VCID-mapy-1mup-wfgx" }, { "vulnerability": "VCID-v6ek-y7cn-kycd" }, { "vulnerability": "VCID-vdv3-7dwp-suab" }, { "vulnerability": "VCID-xyc4-63ra-mfh2" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-hibernate@5.1.17-3.Final_redhat_00004.1.ep7%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/100169?format=api", "purl": "pkg:rpm/redhat/eap7-hibernate@5.3.20-4.SP2_redhat_00001.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-hibernate@5.3.20-4.SP2_redhat_00001.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100196?format=api", "purl": "pkg:rpm/redhat/eap7-hibernate@5.3.20-4.SP2_redhat_00001.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-hibernate@5.3.20-4.SP2_redhat_00001.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100181?format=api", "purl": "pkg:rpm/redhat/eap7-hibernate@5.3.20-4.SP2_redhat_00001.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-hibernate@5.3.20-4.SP2_redhat_00001.1%3Farch=el7eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100160?format=api", "purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.35-1.Final_redhat_00001.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-ironjacamar@1.4.35-1.Final_redhat_00001.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100184?format=api", "purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.35-1.Final_redhat_00001.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-ironjacamar@1.4.35-1.Final_redhat_00001.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100175?format=api", "purl": "pkg:rpm/redhat/eap7-ironjacamar@1.4.35-1.Final_redhat_00001.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-ironjacamar@1.4.35-1.Final_redhat_00001.1%3Farch=el7eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/93730?format=api", "purl": "pkg:rpm/redhat/eap7-jackson-databind@2.8.11.6-3.SP1_redhat_00003.1.ep7?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5585-a76n-zubf" }, { "vulnerability": "VCID-62gn-nwup-8uat" }, { "vulnerability": "VCID-6ssa-j1q1-c3cs" }, { "vulnerability": "VCID-8p4t-8f51-h3dc" }, { "vulnerability": "VCID-9p6a-t8zz-jkfd" }, { "vulnerability": "VCID-9v3p-qkzz-ukgg" }, { "vulnerability": "VCID-beaj-uk9m-17be" }, { "vulnerability": "VCID-gkzd-prsr-gqc8" }, { "vulnerability": "VCID-jz3d-vvfb-jfbw" }, { "vulnerability": "VCID-mapy-1mup-wfgx" }, { "vulnerability": "VCID-v6ek-y7cn-kycd" }, { "vulnerability": "VCID-vdv3-7dwp-suab" }, { "vulnerability": "VCID-xyc4-63ra-mfh2" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jackson-databind@2.8.11.6-3.SP1_redhat_00003.1.ep7%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/100166?format=api", "purl": "pkg:rpm/redhat/eap7-jakarta-el@3.0.3-2.redhat_00006.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jakarta-el@3.0.3-2.redhat_00006.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100194?format=api", "purl": "pkg:rpm/redhat/eap7-jakarta-el@3.0.3-2.redhat_00006.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jakarta-el@3.0.3-2.redhat_00006.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100202?format=api", "purl": "pkg:rpm/redhat/eap7-jakarta-el@3.0.3-2.redhat_00006.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jakarta-el@3.0.3-2.redhat_00006.1%3Farch=el7eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100199?format=api", "purl": "pkg:rpm/redhat/eap7-jberet@1.3.9-1.Final_redhat_00001.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jberet@1.3.9-1.Final_redhat_00001.1%3Farch=el7eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100162?format=api", "purl": "pkg:rpm/redhat/eap7-jberet@1.3.9-1.Final_redhat_00001.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jberet@1.3.9-1.Final_redhat_00001.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100185?format=api", "purl": "pkg:rpm/redhat/eap7-jberet@1.3.9-1.Final_redhat_00001.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jberet@1.3.9-1.Final_redhat_00001.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/93747?format=api", "purl": "pkg:rpm/redhat/eap7-jboss-ejb-client@4.0.12-1.Final_redhat_00002.1.ep7?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5585-a76n-zubf" }, { "vulnerability": "VCID-62gn-nwup-8uat" }, { "vulnerability": "VCID-6ssa-j1q1-c3cs" }, { "vulnerability": "VCID-8p4t-8f51-h3dc" }, { "vulnerability": "VCID-9p6a-t8zz-jkfd" }, { "vulnerability": "VCID-9v3p-qkzz-ukgg" }, { "vulnerability": "VCID-beaj-uk9m-17be" }, { "vulnerability": "VCID-gkzd-prsr-gqc8" }, { "vulnerability": "VCID-jz3d-vvfb-jfbw" }, { "vulnerability": "VCID-mapy-1mup-wfgx" }, { "vulnerability": "VCID-v6ek-y7cn-kycd" }, { "vulnerability": "VCID-vdv3-7dwp-suab" }, { "vulnerability": "VCID-xyc4-63ra-mfh2" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-ejb-client@4.0.12-1.Final_redhat_00002.1.ep7%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/100158?format=api", "purl": "pkg:rpm/redhat/eap7-jboss-remoting@5.0.23-2.SP1_redhat_00001.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-remoting@5.0.23-2.SP1_redhat_00001.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100189?format=api", "purl": "pkg:rpm/redhat/eap7-jboss-remoting@5.0.23-2.SP1_redhat_00001.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-remoting@5.0.23-2.SP1_redhat_00001.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100177?format=api", "purl": "pkg:rpm/redhat/eap7-jboss-remoting@5.0.23-2.SP1_redhat_00001.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-remoting@5.0.23-2.SP1_redhat_00001.1%3Farch=el7eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100165?format=api", "purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.7.2-9.Final_redhat_00010.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-server-migration@1.7.2-9.Final_redhat_00010.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100192?format=api", "purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.7.2-9.Final_redhat_00010.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-server-migration@1.7.2-9.Final_redhat_00010.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100179?format=api", "purl": "pkg:rpm/redhat/eap7-jboss-server-migration@1.7.2-9.Final_redhat_00010.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-jboss-server-migration@1.7.2-9.Final_redhat_00010.1%3Farch=el7eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100159?format=api", "purl": "pkg:rpm/redhat/eap7-narayana@5.9.12-1.Final_redhat_00001.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-narayana@5.9.12-1.Final_redhat_00001.1%3Farch=el7eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100172?format=api", "purl": "pkg:rpm/redhat/eap7-narayana@5.9.12-1.Final_redhat_00001.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-narayana@5.9.12-1.Final_redhat_00001.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100200?format=api", "purl": "pkg:rpm/redhat/eap7-narayana@5.9.12-1.Final_redhat_00001.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-narayana@5.9.12-1.Final_redhat_00001.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/93727?format=api", "purl": "pkg:rpm/redhat/eap7-netty@4.1.63-2.Final_redhat_00003.1.ep7?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5585-a76n-zubf" }, { "vulnerability": "VCID-62gn-nwup-8uat" }, { "vulnerability": "VCID-6ssa-j1q1-c3cs" }, { "vulnerability": "VCID-8p4t-8f51-h3dc" }, { "vulnerability": "VCID-9p6a-t8zz-jkfd" }, { "vulnerability": "VCID-9v3p-qkzz-ukgg" }, { "vulnerability": "VCID-beaj-uk9m-17be" }, { "vulnerability": "VCID-gkzd-prsr-gqc8" }, { "vulnerability": "VCID-jz3d-vvfb-jfbw" }, { "vulnerability": "VCID-mapy-1mup-wfgx" }, { "vulnerability": "VCID-v6ek-y7cn-kycd" }, { "vulnerability": "VCID-vdv3-7dwp-suab" }, { "vulnerability": "VCID-xyc4-63ra-mfh2" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-netty@4.1.63-2.Final_redhat_00003.1.ep7%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/100178?format=api", "purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-9.Final_redhat_00008.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-picketbox@5.0.3-9.Final_redhat_00008.1%3Farch=el7eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100190?format=api", "purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-9.Final_redhat_00008.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-picketbox@5.0.3-9.Final_redhat_00008.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100163?format=api", "purl": "pkg:rpm/redhat/eap7-picketbox@5.0.3-9.Final_redhat_00008.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-picketbox@5.0.3-9.Final_redhat_00008.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/93756?format=api", "purl": "pkg:rpm/redhat/eap7-undertow@1.4.18-16.SP14_redhat_00001.1.ep7?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5585-a76n-zubf" }, { "vulnerability": "VCID-62gn-nwup-8uat" }, { "vulnerability": "VCID-6ssa-j1q1-c3cs" }, { "vulnerability": "VCID-8p4t-8f51-h3dc" }, { "vulnerability": "VCID-9p6a-t8zz-jkfd" }, { "vulnerability": "VCID-9v3p-qkzz-ukgg" }, { "vulnerability": "VCID-beaj-uk9m-17be" }, { "vulnerability": "VCID-gkzd-prsr-gqc8" }, { "vulnerability": "VCID-jz3d-vvfb-jfbw" }, { "vulnerability": "VCID-mapy-1mup-wfgx" }, { "vulnerability": "VCID-v6ek-y7cn-kycd" }, { "vulnerability": "VCID-vdv3-7dwp-suab" }, { "vulnerability": "VCID-xyc4-63ra-mfh2" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-undertow@1.4.18-16.SP14_redhat_00001.1.ep7%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/100170?format=api", "purl": "pkg:rpm/redhat/eap7-undertow@2.0.39-1.SP2_redhat_00001.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-undertow@2.0.39-1.SP2_redhat_00001.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100191?format=api", "purl": "pkg:rpm/redhat/eap7-undertow@2.0.39-1.SP2_redhat_00001.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-undertow@2.0.39-1.SP2_redhat_00001.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100204?format=api", "purl": "pkg:rpm/redhat/eap7-undertow@2.0.39-1.SP2_redhat_00001.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-undertow@2.0.39-1.SP2_redhat_00001.1%3Farch=el7eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/93722?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly@7.1.11-4.GA_redhat_00002.1.ep7?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5585-a76n-zubf" }, { "vulnerability": "VCID-62gn-nwup-8uat" }, { "vulnerability": "VCID-6ssa-j1q1-c3cs" }, { "vulnerability": "VCID-8p4t-8f51-h3dc" }, { "vulnerability": "VCID-9p6a-t8zz-jkfd" }, { "vulnerability": "VCID-9v3p-qkzz-ukgg" }, { "vulnerability": "VCID-beaj-uk9m-17be" }, { "vulnerability": "VCID-gkzd-prsr-gqc8" }, { "vulnerability": "VCID-jz3d-vvfb-jfbw" }, { "vulnerability": "VCID-mapy-1mup-wfgx" }, { "vulnerability": "VCID-v6ek-y7cn-kycd" }, { "vulnerability": "VCID-vdv3-7dwp-suab" }, { "vulnerability": "VCID-xyc4-63ra-mfh2" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly@7.1.11-4.GA_redhat_00002.1.ep7%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/100161?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly@7.3.9-2.GA_redhat_00002.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly@7.3.9-2.GA_redhat_00002.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100187?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly@7.3.9-2.GA_redhat_00002.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly@7.3.9-2.GA_redhat_00002.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100174?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly@7.3.9-2.GA_redhat_00002.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly@7.3.9-2.GA_redhat_00002.1%3Farch=el7eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/93720?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly-elytron@1.1.14-1.Final_redhat_00001.1.ep7?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5585-a76n-zubf" }, { "vulnerability": "VCID-62gn-nwup-8uat" }, { "vulnerability": "VCID-6ssa-j1q1-c3cs" }, { "vulnerability": "VCID-8p4t-8f51-h3dc" }, { "vulnerability": "VCID-9p6a-t8zz-jkfd" }, { "vulnerability": "VCID-9v3p-qkzz-ukgg" }, { "vulnerability": "VCID-beaj-uk9m-17be" }, { "vulnerability": "VCID-gkzd-prsr-gqc8" }, { "vulnerability": "VCID-jz3d-vvfb-jfbw" }, { "vulnerability": "VCID-mapy-1mup-wfgx" }, { "vulnerability": "VCID-v6ek-y7cn-kycd" }, { "vulnerability": "VCID-vdv3-7dwp-suab" }, { "vulnerability": "VCID-xyc4-63ra-mfh2" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-elytron@1.1.14-1.Final_redhat_00001.1.ep7%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/93718?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly-http-client@1.0.21-1.Final_redhat_00001.1.ep7?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5585-a76n-zubf" }, { "vulnerability": "VCID-62gn-nwup-8uat" }, { "vulnerability": "VCID-6ssa-j1q1-c3cs" }, { "vulnerability": "VCID-8p4t-8f51-h3dc" }, { "vulnerability": "VCID-9p6a-t8zz-jkfd" }, { "vulnerability": "VCID-9v3p-qkzz-ukgg" }, { "vulnerability": "VCID-beaj-uk9m-17be" }, { "vulnerability": "VCID-gkzd-prsr-gqc8" }, { "vulnerability": "VCID-jz3d-vvfb-jfbw" }, { "vulnerability": "VCID-mapy-1mup-wfgx" }, { "vulnerability": "VCID-v6ek-y7cn-kycd" }, { "vulnerability": "VCID-vdv3-7dwp-suab" }, { "vulnerability": "VCID-xyc4-63ra-mfh2" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-http-client@1.0.21-1.Final_redhat_00001.1.ep7%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/100183?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly-http-client@1.0.29-1.Final_redhat_00002.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-http-client@1.0.29-1.Final_redhat_00002.1%3Farch=el7eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100198?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly-http-client@1.0.29-1.Final_redhat_00002.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-http-client@1.0.29-1.Final_redhat_00002.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100171?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly-http-client@1.0.29-1.Final_redhat_00002.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-http-client@1.0.29-1.Final_redhat_00002.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/93746?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly-naming-client@1.0.13-1.Final_redhat_00001.1.ep7?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5585-a76n-zubf" }, { "vulnerability": "VCID-62gn-nwup-8uat" }, { "vulnerability": "VCID-6ssa-j1q1-c3cs" }, { "vulnerability": "VCID-8p4t-8f51-h3dc" }, { "vulnerability": "VCID-9p6a-t8zz-jkfd" }, { "vulnerability": "VCID-9v3p-qkzz-ukgg" }, { "vulnerability": "VCID-beaj-uk9m-17be" }, { "vulnerability": "VCID-gkzd-prsr-gqc8" }, { "vulnerability": "VCID-jz3d-vvfb-jfbw" }, { "vulnerability": "VCID-mapy-1mup-wfgx" }, { "vulnerability": "VCID-v6ek-y7cn-kycd" }, { "vulnerability": "VCID-vdv3-7dwp-suab" }, { "vulnerability": "VCID-xyc4-63ra-mfh2" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-naming-client@1.0.13-1.Final_redhat_00001.1.ep7%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/93731?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly-openssl@1.0.12-1.Final_redhat_00001.1.ep7?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5585-a76n-zubf" }, { "vulnerability": "VCID-62gn-nwup-8uat" }, { "vulnerability": "VCID-6ssa-j1q1-c3cs" }, { "vulnerability": "VCID-8p4t-8f51-h3dc" }, { "vulnerability": "VCID-9p6a-t8zz-jkfd" }, { "vulnerability": "VCID-9v3p-qkzz-ukgg" }, { "vulnerability": "VCID-beaj-uk9m-17be" }, { "vulnerability": "VCID-gkzd-prsr-gqc8" }, { "vulnerability": "VCID-jz3d-vvfb-jfbw" }, { "vulnerability": "VCID-mapy-1mup-wfgx" }, { "vulnerability": "VCID-v6ek-y7cn-kycd" }, { "vulnerability": "VCID-vdv3-7dwp-suab" }, { "vulnerability": "VCID-xyc4-63ra-mfh2" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-openssl@1.0.12-1.Final_redhat_00001.1.ep7%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/93729?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly-openssl-linux@1.0.12-6.Final_redhat_00001.1.ep7?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-5585-a76n-zubf" }, { "vulnerability": "VCID-62gn-nwup-8uat" }, { "vulnerability": "VCID-6ssa-j1q1-c3cs" }, { "vulnerability": "VCID-8p4t-8f51-h3dc" }, { "vulnerability": "VCID-9p6a-t8zz-jkfd" }, { "vulnerability": "VCID-9v3p-qkzz-ukgg" }, { "vulnerability": "VCID-beaj-uk9m-17be" }, { "vulnerability": "VCID-gkzd-prsr-gqc8" }, { "vulnerability": "VCID-jz3d-vvfb-jfbw" }, { "vulnerability": "VCID-mapy-1mup-wfgx" }, { "vulnerability": "VCID-v6ek-y7cn-kycd" }, { "vulnerability": "VCID-vdv3-7dwp-suab" }, { "vulnerability": "VCID-xyc4-63ra-mfh2" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-openssl-linux@1.0.12-6.Final_redhat_00001.1.ep7%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/100168?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly-transaction-client@1.1.14-2.Final_redhat_00001.1?arch=el6eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-transaction-client@1.1.14-2.Final_redhat_00001.1%3Farch=el6eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100193?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly-transaction-client@1.1.14-2.Final_redhat_00001.1?arch=el8eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-transaction-client@1.1.14-2.Final_redhat_00001.1%3Farch=el8eap" }, { "url": "http://public2.vulnerablecode.io/api/packages/100206?format=api", "purl": "pkg:rpm/redhat/eap7-wildfly-transaction-client@1.1.14-2.Final_redhat_00001.1?arch=el7eap", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-14ff-vn3t-vyhy" }, { "vulnerability": "VCID-gsr8-1dea-effx" }, { "vulnerability": "VCID-msck-u3y4-tqcn" }, { "vulnerability": "VCID-ppap-96ds-9ygc" }, { "vulnerability": "VCID-ysp6-t713-ffgr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-wildfly-transaction-client@1.1.14-2.Final_redhat_00001.1%3Farch=el7eap" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-28170.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-28170.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2021-28170", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00115", "scoring_system": "epss", "scoring_elements": "0.30222", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00115", "scoring_system": "epss", "scoring_elements": "0.30058", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00115", "scoring_system": "epss", "scoring_elements": "0.30043", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00115", "scoring_system": "epss", "scoring_elements": "0.30093", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00115", "scoring_system": "epss", "scoring_elements": "0.30135", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00115", "scoring_system": "epss", "scoring_elements": "0.30132", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00115", "scoring_system": "epss", "scoring_elements": "0.30096", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00115", "scoring_system": "epss", "scoring_elements": "0.30136", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00115", "scoring_system": "epss", "scoring_elements": "0.30173", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00115", "scoring_system": "epss", "scoring_elements": "0.30036", "published_at": "2026-04-07T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2021-28170" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28170", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28170" }, { "reference_url": "https://github.com/eclipse-ee4j/el-ri", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/eclipse-ee4j/el-ri" }, { "reference_url": "https://github.com/eclipse-ee4j/el-ri/issues/155", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/eclipse-ee4j/el-ri/issues/155" }, { "reference_url": "https://github.com/eclipse-ee4j/el-ri/pull/160/commits/b6a3943ac5fba71cbc6719f092e319caa747855b", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/eclipse-ee4j/el-ri/pull/160/commits/b6a3943ac5fba71cbc6719f092e319caa747855b" }, { "reference_url": "https://securitylab.github.com/advisories/GHSL-2020-021-jakarta-el", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://securitylab.github.com/advisories/GHSL-2020-021-jakarta-el" }, { "reference_url": "https://security.snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-1297098", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-1297098" }, { "reference_url": "https://security.snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-2841368", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.snyk.io/vuln/SNYK-JAVA-ORGGLASSFISH-2841368" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuapr2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1965497", "reference_id": "1965497", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1965497" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989259", "reference_id": "989259", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=989259" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28170", "reference_id": "CVE-2021-28170", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-28170" }, { "reference_url": "https://github.com/advisories/GHSA-v6w3-2prq-h95f", "reference_id": "GHSA-v6w3-2prq-h95f", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-v6w3-2prq-h95f" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3466", "reference_id": "RHSA-2021:3466", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3466" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3467", "reference_id": "RHSA-2021:3467", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3467" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3468", "reference_id": "RHSA-2021:3468", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3468" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3471", "reference_id": "RHSA-2021:3471", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3471" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3516", "reference_id": "RHSA-2021:3516", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3516" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3534", "reference_id": "RHSA-2021:3534", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3534" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3656", "reference_id": "RHSA-2021:3656", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3656" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3658", "reference_id": "RHSA-2021:3658", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3658" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:3660", "reference_id": "RHSA-2021:3660", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:3660" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2021:5134", "reference_id": "RHSA-2021:5134", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2021:5134" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:0589", "reference_id": "RHSA-2022:0589", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:0589" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1013", "reference_id": "RHSA-2022:1013", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1013" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:1029", "reference_id": "RHSA-2022:1029", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:1029" } ], "weaknesses": [ { "cwe_id": 20, "name": "Improper Input Validation", "description": "The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly." }, { "cwe_id": 917, "name": "Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')", "description": "The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." }, { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." } ], "exploits": [], "severity_range_score": "4.0 - 7.5", "exploitability": "0.5", "weighted_severity": "6.8", "risk_score": 3.4, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ysp6-t713-ffgr" }