Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-kfr5-vfjf-xbc7
Summary
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Aliases
0
alias CVE-2008-1285
1
alias GHSA-vv6j-5x58-q2c3
Fixed_packages
0
url pkg:maven/com.sun.faces/jsf-api@2.0.4-b10
purl pkg:maven/com.sun.faces/jsf-api@2.0.4-b10
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.faces/jsf-api@2.0.4-b10
Affected_packages
0
url pkg:maven/com.sun.faces/jsf-api@1.2
purl pkg:maven/com.sun.faces/jsf-api@1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.faces/jsf-api@1.2
1
url pkg:rpm/redhat/asm@1.5.3-1jpp.ep1.2?arch=el5
purl pkg:rpm/redhat/asm@1.5.3-1jpp.ep1.2?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/asm@1.5.3-1jpp.ep1.2%3Farch=el5
2
url pkg:rpm/redhat/cglib@2.1.3-2jpp.ep1.6?arch=el5
purl pkg:rpm/redhat/cglib@2.1.3-2jpp.ep1.6?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cglib@2.1.3-2jpp.ep1.6%3Farch=el5
3
url pkg:rpm/redhat/concurrent@1.3.4-8jpp.ep1.6.el5?arch=1
purl pkg:rpm/redhat/concurrent@1.3.4-8jpp.ep1.6.el5?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/concurrent@1.3.4-8jpp.ep1.6.el5%3Farch=1
4
url pkg:rpm/redhat/glassfish-javamail@1.4.0-0jpp.ep1.9?arch=el4
purl pkg:rpm/redhat/glassfish-javamail@1.4.0-0jpp.ep1.9?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/glassfish-javamail@1.4.0-0jpp.ep1.9%3Farch=el4
5
url pkg:rpm/redhat/glassfish-jsf@1.2_08-0jpp.ep1.2?arch=el5
purl pkg:rpm/redhat/glassfish-jsf@1.2_08-0jpp.ep1.2?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/glassfish-jsf@1.2_08-0jpp.ep1.2%3Farch=el5
6
url pkg:rpm/redhat/hibernate3@1:3.2.4-1.SP1_CP03.0jpp.ep1.1?arch=el4
purl pkg:rpm/redhat/hibernate3@1:3.2.4-1.SP1_CP03.0jpp.ep1.1?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/hibernate3@1:3.2.4-1.SP1_CP03.0jpp.ep1.1%3Farch=el4
7
url pkg:rpm/redhat/hibernate3@1:3.2.4-1.SP1_CP03.0jpp.ep1.1?arch=el5
purl pkg:rpm/redhat/hibernate3@1:3.2.4-1.SP1_CP03.0jpp.ep1.1?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/hibernate3@1:3.2.4-1.SP1_CP03.0jpp.ep1.1%3Farch=el5
8
url pkg:rpm/redhat/hibernate3-annotations@3.2.1-1.patch02.1jpp.ep1.3?arch=el4
purl pkg:rpm/redhat/hibernate3-annotations@3.2.1-1.patch02.1jpp.ep1.3?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/hibernate3-annotations@3.2.1-1.patch02.1jpp.ep1.3%3Farch=el4
9
url pkg:rpm/redhat/hibernate3-annotations@3.2.1-1.patch02.1jpp.ep1.3.el5?arch=1
purl pkg:rpm/redhat/hibernate3-annotations@3.2.1-1.patch02.1jpp.ep1.3.el5?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/hibernate3-annotations@3.2.1-1.patch02.1jpp.ep1.3.el5%3Farch=1
10
url pkg:rpm/redhat/hibernate3-entitymanager@3.2.1-1jpp.ep1.7?arch=el5
purl pkg:rpm/redhat/hibernate3-entitymanager@3.2.1-1jpp.ep1.7?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/hibernate3-entitymanager@3.2.1-1jpp.ep1.7%3Farch=el5
11
url pkg:rpm/redhat/jboss-aop@1.5.5-1.CP01.0jpp.ep1.1?arch=el5
purl pkg:rpm/redhat/jboss-aop@1.5.5-1.CP01.0jpp.ep1.1?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-88v7-kc2y-bfd7
1
vulnerability VCID-kfr5-vfjf-xbc7
2
vulnerability VCID-mpr2-q1gb-p7ce
3
vulnerability VCID-phgm-ct5c-a3fu
4
vulnerability VCID-t9y6-suc2-2kcg
5
vulnerability VCID-w7g5-angw-yfcp
6
vulnerability VCID-ymqq-9gmh-6kfn
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-aop@1.5.5-1.CP01.0jpp.ep1.1%3Farch=el5
12
url pkg:rpm/redhat/jboss-aop@1.5.5-1.CP01.0jpp.ep1.1?arch=el4
purl pkg:rpm/redhat/jboss-aop@1.5.5-1.CP01.0jpp.ep1.1?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-88v7-kc2y-bfd7
1
vulnerability VCID-kfr5-vfjf-xbc7
2
vulnerability VCID-mpr2-q1gb-p7ce
3
vulnerability VCID-phgm-ct5c-a3fu
4
vulnerability VCID-t9y6-suc2-2kcg
5
vulnerability VCID-w7g5-angw-yfcp
6
vulnerability VCID-ymqq-9gmh-6kfn
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-aop@1.5.5-1.CP01.0jpp.ep1.1%3Farch=el4
13
url pkg:rpm/redhat/jbossas@4.2.0-3.GA_CP03.ep1.9?arch=el4
purl pkg:rpm/redhat/jbossas@4.2.0-3.GA_CP03.ep1.9?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossas@4.2.0-3.GA_CP03.ep1.9%3Farch=el4
14
url pkg:rpm/redhat/jbossas@4.2.0-4.GA_CP03.ep1.8.el5?arch=1
purl pkg:rpm/redhat/jbossas@4.2.0-4.GA_CP03.ep1.8.el5?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossas@4.2.0-4.GA_CP03.ep1.8.el5%3Farch=1
15
url pkg:rpm/redhat/jbossas@4.3.0-2.GA_CP01.ep1.6.el5?arch=1
purl pkg:rpm/redhat/jbossas@4.3.0-2.GA_CP01.ep1.6.el5?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossas@4.3.0-2.GA_CP01.ep1.6.el5%3Farch=1
16
url pkg:rpm/redhat/jbossas@4.3.0-2.GA_CP01.ep1.7?arch=el4
purl pkg:rpm/redhat/jbossas@4.3.0-2.GA_CP01.ep1.7?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossas@4.3.0-2.GA_CP01.ep1.7%3Farch=el4
17
url pkg:rpm/redhat/jboss-cache@1.4.1-4.SP9.1jpp.ep1.1?arch=el5
purl pkg:rpm/redhat/jboss-cache@1.4.1-4.SP9.1jpp.ep1.1?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-cache@1.4.1-4.SP9.1jpp.ep1.1%3Farch=el5
18
url pkg:rpm/redhat/jboss-cache@1.4.1-4.SP9.1jpp.ep1.1?arch=el4
purl pkg:rpm/redhat/jboss-cache@1.4.1-4.SP9.1jpp.ep1.1?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-cache@1.4.1-4.SP9.1jpp.ep1.1%3Farch=el4
19
url pkg:rpm/redhat/jboss-messaging@1.4.0-1.SP3_CP02.0jpp.ep1.6?arch=el4
purl pkg:rpm/redhat/jboss-messaging@1.4.0-1.SP3_CP02.0jpp.ep1.6?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-messaging@1.4.0-1.SP3_CP02.0jpp.ep1.6%3Farch=el4
20
url pkg:rpm/redhat/jboss-messaging@1.4.0-1.SP3_CP02.0jpp.ep1.6?arch=el5
purl pkg:rpm/redhat/jboss-messaging@1.4.0-1.SP3_CP02.0jpp.ep1.6?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-messaging@1.4.0-1.SP3_CP02.0jpp.ep1.6%3Farch=el5
21
url pkg:rpm/redhat/jboss-remoting@2.2.2-3.SP7.0jpp.ep1.3?arch=el4
purl pkg:rpm/redhat/jboss-remoting@2.2.2-3.SP7.0jpp.ep1.3?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-remoting@2.2.2-3.SP7.0jpp.ep1.3%3Farch=el4
22
url pkg:rpm/redhat/jboss-remoting@2.2.2-3.SP7.0jpp.ep1.3?arch=el5
purl pkg:rpm/redhat/jboss-remoting@2.2.2-3.SP7.0jpp.ep1.3?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-remoting@2.2.2-3.SP7.0jpp.ep1.3%3Farch=el5
23
url pkg:rpm/redhat/jboss-seam@1.2.1-1.ep1.6?arch=el5
purl pkg:rpm/redhat/jboss-seam@1.2.1-1.ep1.6?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-seam@1.2.1-1.ep1.6%3Farch=el5
24
url pkg:rpm/redhat/jboss-seam@1.2.1-1.ep1.7?arch=el4
purl pkg:rpm/redhat/jboss-seam@1.2.1-1.ep1.7?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-seam@1.2.1-1.ep1.7%3Farch=el4
25
url pkg:rpm/redhat/jboss-seam@1.2.1-3.JBPAPP_4_3_0_GA.ep1.5.el5?arch=1
purl pkg:rpm/redhat/jboss-seam@1.2.1-3.JBPAPP_4_3_0_GA.ep1.5.el5?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-seam@1.2.1-3.JBPAPP_4_3_0_GA.ep1.5.el5%3Farch=1
26
url pkg:rpm/redhat/jboss-seam@1.2.1-3.JBPAPP_4_3_0_GA.ep1.7?arch=el4
purl pkg:rpm/redhat/jboss-seam@1.2.1-3.JBPAPP_4_3_0_GA.ep1.7?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-seam@1.2.1-3.JBPAPP_4_3_0_GA.ep1.7%3Farch=el4
27
url pkg:rpm/redhat/jbossts@1:4.2.3-1.SP5_CP01.1jpp.ep1.1?arch=el5
purl pkg:rpm/redhat/jbossts@1:4.2.3-1.SP5_CP01.1jpp.ep1.1?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossts@1:4.2.3-1.SP5_CP01.1jpp.ep1.1%3Farch=el5
28
url pkg:rpm/redhat/jbossts@1:4.2.3-1.SP5_CP01.1jpp.ep1.1?arch=el4
purl pkg:rpm/redhat/jbossts@1:4.2.3-1.SP5_CP01.1jpp.ep1.1?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossts@1:4.2.3-1.SP5_CP01.1jpp.ep1.1%3Farch=el4
29
url pkg:rpm/redhat/jbossws@2.0.1-2.SP2_CP01.0jpp.ep1.2?arch=el4
purl pkg:rpm/redhat/jbossws@2.0.1-2.SP2_CP01.0jpp.ep1.2?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossws@2.0.1-2.SP2_CP01.0jpp.ep1.2%3Farch=el4
30
url pkg:rpm/redhat/jbossws@2.0.1-2.SP2_CP01.0jpp.ep1.2?arch=el5
purl pkg:rpm/redhat/jbossws@2.0.1-2.SP2_CP01.0jpp.ep1.2?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossws@2.0.1-2.SP2_CP01.0jpp.ep1.2%3Farch=el5
31
url pkg:rpm/redhat/jbossxb@1.0.0-2.SP1.0jpp.ep1.2.el5?arch=1
purl pkg:rpm/redhat/jbossxb@1.0.0-2.SP1.0jpp.ep1.2.el5?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossxb@1.0.0-2.SP1.0jpp.ep1.2.el5%3Farch=1
32
url pkg:rpm/redhat/jcommon@1.0.12-1jpp.ep1.3?arch=el5
purl pkg:rpm/redhat/jcommon@1.0.12-1jpp.ep1.3?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jcommon@1.0.12-1jpp.ep1.3%3Farch=el5
33
url pkg:rpm/redhat/jcommon@1.0.12-1jpp.ep1.3?arch=el4
purl pkg:rpm/redhat/jcommon@1.0.12-1jpp.ep1.3?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jcommon@1.0.12-1jpp.ep1.3%3Farch=el4
34
url pkg:rpm/redhat/jfreechart@1.0.9-1jpp.ep1.3?arch=el4
purl pkg:rpm/redhat/jfreechart@1.0.9-1jpp.ep1.3?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jfreechart@1.0.9-1jpp.ep1.3%3Farch=el4
35
url pkg:rpm/redhat/jfreechart@1.0.9-1jpp.ep1.3.el5?arch=1
purl pkg:rpm/redhat/jfreechart@1.0.9-1jpp.ep1.3.el5?arch=1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jfreechart@1.0.9-1jpp.ep1.3.el5%3Farch=1
36
url pkg:rpm/redhat/jgroups@1:2.4.2-1.GA_CP01.0jpp.ep1.1?arch=el4
purl pkg:rpm/redhat/jgroups@1:2.4.2-1.GA_CP01.0jpp.ep1.1?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jgroups@1:2.4.2-1.GA_CP01.0jpp.ep1.1%3Farch=el4
37
url pkg:rpm/redhat/jgroups@1:2.4.2-1.GA_CP01.0jpp.ep1.1?arch=el5
purl pkg:rpm/redhat/jgroups@1:2.4.2-1.GA_CP01.0jpp.ep1.1?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jgroups@1:2.4.2-1.GA_CP01.0jpp.ep1.1%3Farch=el5
38
url pkg:rpm/redhat/rh-eap-docs@4.2.0-3.GA_CP03.ep1.5?arch=el4
purl pkg:rpm/redhat/rh-eap-docs@4.2.0-3.GA_CP03.ep1.5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-eap-docs@4.2.0-3.GA_CP03.ep1.5%3Farch=el4
39
url pkg:rpm/redhat/rh-eap-docs@4.2.0-3.GA_CP03.ep1.5?arch=el5
purl pkg:rpm/redhat/rh-eap-docs@4.2.0-3.GA_CP03.ep1.5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-eap-docs@4.2.0-3.GA_CP03.ep1.5%3Farch=el5
40
url pkg:rpm/redhat/rh-eap-docs@4.3.0-2.GA_CP01.ep1.4?arch=el4
purl pkg:rpm/redhat/rh-eap-docs@4.3.0-2.GA_CP01.ep1.4?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-eap-docs@4.3.0-2.GA_CP01.ep1.4%3Farch=el4
41
url pkg:rpm/redhat/rh-eap-docs@4.3.0-2.GA_CP01.ep1.4?arch=el5
purl pkg:rpm/redhat/rh-eap-docs@4.3.0-2.GA_CP01.ep1.4?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kfr5-vfjf-xbc7
1
vulnerability VCID-mpr2-q1gb-p7ce
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-eap-docs@4.3.0-2.GA_CP01.ep1.4%3Farch=el5
References
0
reference_url http://rhn.redhat.com/errata/RHSA-2008-0828.html
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2008-0828.html
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1285.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1285.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2008-1285
reference_id
reference_type
scores
0
value 0.00559
scoring_system epss
scoring_elements 0.6821
published_at 2026-04-04T12:55:00Z
1
value 0.00559
scoring_system epss
scoring_elements 0.68192
published_at 2026-04-02T12:55:00Z
2
value 0.00559
scoring_system epss
scoring_elements 0.68169
published_at 2026-04-01T12:55:00Z
3
value 0.00637
scoring_system epss
scoring_elements 0.70531
published_at 2026-04-18T12:55:00Z
4
value 0.00637
scoring_system epss
scoring_elements 0.70425
published_at 2026-04-07T12:55:00Z
5
value 0.00637
scoring_system epss
scoring_elements 0.7047
published_at 2026-04-08T12:55:00Z
6
value 0.00637
scoring_system epss
scoring_elements 0.70486
published_at 2026-04-09T12:55:00Z
7
value 0.00637
scoring_system epss
scoring_elements 0.7051
published_at 2026-04-11T12:55:00Z
8
value 0.00637
scoring_system epss
scoring_elements 0.70495
published_at 2026-04-12T12:55:00Z
9
value 0.00637
scoring_system epss
scoring_elements 0.70481
published_at 2026-04-13T12:55:00Z
10
value 0.00637
scoring_system epss
scoring_elements 0.70523
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2008-1285
3
reference_url https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=437082
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=437082
4
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/41081
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/41081
5
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=437082
reference_id 437082
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=437082
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2008-1285
reference_id CVE-2008-1285
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2008-1285
7
reference_url https://github.com/advisories/GHSA-vv6j-5x58-q2c3
reference_id GHSA-vv6j-5x58-q2c3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vv6j-5x58-q2c3
8
reference_url https://access.redhat.com/errata/RHSA-2008:0825
reference_id RHSA-2008:0825
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0825
9
reference_url https://access.redhat.com/errata/RHSA-2008:0826
reference_id RHSA-2008:0826
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0826
10
reference_url https://access.redhat.com/errata/RHSA-2008:0827
reference_id RHSA-2008:0827
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0827
11
reference_url https://access.redhat.com/errata/RHSA-2008:0828
reference_id RHSA-2008:0828
reference_type
scores
url https://access.redhat.com/errata/RHSA-2008:0828
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-kfr5-vfjf-xbc7