Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-zbbr-wded-9ffj
Summary
Improper Input Validation in Apache Tomcat
Apache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
Aliases
0
alias CVE-2011-4858
1
alias GHSA-wr3m-gw98-mc3j
Fixed_packages
0
url pkg:ebuild/www-servers/tomcat@7.0.23
purl pkg:ebuild/www-servers/tomcat@7.0.23
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/tomcat@7.0.23
Affected_packages
0
url pkg:maven/org.apache.tomcat/tomcat@5.5.0
purl pkg:maven/org.apache.tomcat/tomcat@5.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-18j8-kwdv-dyak
2
vulnerability VCID-1qt3-ctae-sfgw
3
vulnerability VCID-1v6c-f56v-hqh1
4
vulnerability VCID-241m-q6vd-kudk
5
vulnerability VCID-27q8-96un-9fbk
6
vulnerability VCID-2jnv-segx-zkfd
7
vulnerability VCID-4rcx-xfn5-7kdb
8
vulnerability VCID-6epr-2hbd-skcz
9
vulnerability VCID-6p3e-4u8s-17ep
10
vulnerability VCID-7969-7a8h-zyhh
11
vulnerability VCID-7kjm-p97s-zuh8
12
vulnerability VCID-86ur-vudp-4yc2
13
vulnerability VCID-87p8-zvvf-y7dm
14
vulnerability VCID-88v7-kc2y-bfd7
15
vulnerability VCID-8ebv-6941-jqdy
16
vulnerability VCID-a9cu-fxqw-xkdg
17
vulnerability VCID-acmu-9eqb-fya5
18
vulnerability VCID-bhq7-d545-27bj
19
vulnerability VCID-bung-pa58-ayfv
20
vulnerability VCID-d9ys-kxh6-nkgr
21
vulnerability VCID-dcrp-rae1-zfcm
22
vulnerability VCID-dhun-hj5q-dfch
23
vulnerability VCID-egye-da2v-4ybh
24
vulnerability VCID-f2zy-gq57-ufat
25
vulnerability VCID-fvvt-kufu-k3a6
26
vulnerability VCID-g7eg-s99s-xqe7
27
vulnerability VCID-g998-xymt-fudu
28
vulnerability VCID-hhk9-cr54-8fgc
29
vulnerability VCID-mctd-9zgv-5qgp
30
vulnerability VCID-mnf8-t3ew-4fgb
31
vulnerability VCID-n76n-ywja-rbhh
32
vulnerability VCID-peya-mr7j-vugf
33
vulnerability VCID-q7jp-hn4a-4kec
34
vulnerability VCID-qdck-q54n-rkcv
35
vulnerability VCID-quwu-ep21-cyew
36
vulnerability VCID-qxkf-4ddv-j3b7
37
vulnerability VCID-r5rc-rdd9-bfbk
38
vulnerability VCID-r84b-7ay9-ekcm
39
vulnerability VCID-rrdj-ssn7-zfdj
40
vulnerability VCID-rwvj-tq6x-2ubs
41
vulnerability VCID-skar-qk57-qkdv
42
vulnerability VCID-su1y-2bxh-9qe2
43
vulnerability VCID-tcju-3rvu-wkht
44
vulnerability VCID-tfn5-6ckq-wyce
45
vulnerability VCID-v94p-bxm3-akfd
46
vulnerability VCID-vm4b-26sq-tfev
47
vulnerability VCID-wsn2-pd9b-b3g8
48
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.0
1
url pkg:maven/org.apache.tomcat/tomcat@6.0.0
purl pkg:maven/org.apache.tomcat/tomcat@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-18q4-zark-s7a7
2
vulnerability VCID-1k8f-vsg1-k3d6
3
vulnerability VCID-1qt3-ctae-sfgw
4
vulnerability VCID-1v6c-f56v-hqh1
5
vulnerability VCID-241m-q6vd-kudk
6
vulnerability VCID-27q8-96un-9fbk
7
vulnerability VCID-3cr9-g81m-4ugy
8
vulnerability VCID-3n4t-bvb1-5qer
9
vulnerability VCID-3r3s-q21j-c3au
10
vulnerability VCID-4mkw-7haq-pkgn
11
vulnerability VCID-4rcx-xfn5-7kdb
12
vulnerability VCID-68fk-4g86-ekbp
13
vulnerability VCID-6epr-2hbd-skcz
14
vulnerability VCID-6p3e-4u8s-17ep
15
vulnerability VCID-7969-7a8h-zyhh
16
vulnerability VCID-7cpu-h5fr-8ffd
17
vulnerability VCID-7ej8-5f77-cybb
18
vulnerability VCID-7kjm-p97s-zuh8
19
vulnerability VCID-7pd9-1r19-73fe
20
vulnerability VCID-87p8-zvvf-y7dm
21
vulnerability VCID-88v7-kc2y-bfd7
22
vulnerability VCID-8ebv-6941-jqdy
23
vulnerability VCID-95d1-arxd-hkd1
24
vulnerability VCID-a1by-zvtm-akdc
25
vulnerability VCID-a9cu-fxqw-xkdg
26
vulnerability VCID-acmu-9eqb-fya5
27
vulnerability VCID-bung-pa58-ayfv
28
vulnerability VCID-d9ys-kxh6-nkgr
29
vulnerability VCID-dcrp-rae1-zfcm
30
vulnerability VCID-dhun-hj5q-dfch
31
vulnerability VCID-egup-27ub-6uaf
32
vulnerability VCID-egye-da2v-4ybh
33
vulnerability VCID-f2zy-gq57-ufat
34
vulnerability VCID-fpuc-fe6m-47c6
35
vulnerability VCID-g7eg-s99s-xqe7
36
vulnerability VCID-g998-xymt-fudu
37
vulnerability VCID-h9ds-trhx-m7aj
38
vulnerability VCID-hhk9-cr54-8fgc
39
vulnerability VCID-hhkg-mfp5-2kax
40
vulnerability VCID-jau7-gfz8-dkfa
41
vulnerability VCID-jf7u-dvpd-b7f4
42
vulnerability VCID-jtg7-217a-qqhk
43
vulnerability VCID-kagr-74d9-kyhx
44
vulnerability VCID-kgd1-bzst-muh7
45
vulnerability VCID-kzzv-rhya-j7dd
46
vulnerability VCID-m1zd-uytj-3bej
47
vulnerability VCID-mctd-9zgv-5qgp
48
vulnerability VCID-mnf8-t3ew-4fgb
49
vulnerability VCID-mwk8-b5c9-kbb9
50
vulnerability VCID-n76n-ywja-rbhh
51
vulnerability VCID-p4dn-y54m-8fd1
52
vulnerability VCID-p6ch-pc73-b3ck
53
vulnerability VCID-peya-mr7j-vugf
54
vulnerability VCID-qdck-q54n-rkcv
55
vulnerability VCID-quwu-ep21-cyew
56
vulnerability VCID-qxkf-4ddv-j3b7
57
vulnerability VCID-r5rc-rdd9-bfbk
58
vulnerability VCID-r84b-7ay9-ekcm
59
vulnerability VCID-rrdj-ssn7-zfdj
60
vulnerability VCID-rwvj-tq6x-2ubs
61
vulnerability VCID-su1y-2bxh-9qe2
62
vulnerability VCID-t9y6-suc2-2kcg
63
vulnerability VCID-ta1m-dh8x-nubc
64
vulnerability VCID-tcbc-3kgt-muam
65
vulnerability VCID-tcju-3rvu-wkht
66
vulnerability VCID-tfn5-6ckq-wyce
67
vulnerability VCID-tfrs-d458-tfaq
68
vulnerability VCID-twh8-87va-juf9
69
vulnerability VCID-v94p-bxm3-akfd
70
vulnerability VCID-vd1s-m27a-8ucc
71
vulnerability VCID-vm4b-26sq-tfev
72
vulnerability VCID-w82a-7kk2-p3f1
73
vulnerability VCID-wsn2-pd9b-b3g8
74
vulnerability VCID-xf8r-kqxb-7qdy
75
vulnerability VCID-ygvw-69am-s7ae
76
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.0
2
url pkg:maven/org.apache.tomcat/tomcat@7.0.0
purl pkg:maven/org.apache.tomcat/tomcat@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-18q4-zark-s7a7
2
vulnerability VCID-1k8f-vsg1-k3d6
3
vulnerability VCID-1v6c-f56v-hqh1
4
vulnerability VCID-241m-q6vd-kudk
5
vulnerability VCID-2sbh-sy57-3uez
6
vulnerability VCID-3cr9-g81m-4ugy
7
vulnerability VCID-3n4t-bvb1-5qer
8
vulnerability VCID-3r3s-q21j-c3au
9
vulnerability VCID-4aaa-errb-2qdw
10
vulnerability VCID-4mkw-7haq-pkgn
11
vulnerability VCID-5eqm-218u-p7gq
12
vulnerability VCID-618c-ar98-qfcr
13
vulnerability VCID-66kh-s6cr-tqf9
14
vulnerability VCID-68fk-4g86-ekbp
15
vulnerability VCID-7cpu-h5fr-8ffd
16
vulnerability VCID-7ej8-5f77-cybb
17
vulnerability VCID-886n-1vzv-syc6
18
vulnerability VCID-8ebv-6941-jqdy
19
vulnerability VCID-95d1-arxd-hkd1
20
vulnerability VCID-95fn-d2ad-qyg6
21
vulnerability VCID-9exq-fhv6-bbea
22
vulnerability VCID-a1by-zvtm-akdc
23
vulnerability VCID-a8gk-n8bq-87cp
24
vulnerability VCID-afm2-uj45-xkgx
25
vulnerability VCID-arkn-bca7-hqam
26
vulnerability VCID-c4jv-ws83-x7g2
27
vulnerability VCID-d9ys-kxh6-nkgr
28
vulnerability VCID-dhun-hj5q-dfch
29
vulnerability VCID-dzpn-w4b3-vbcm
30
vulnerability VCID-e2kr-7pmg-gfc9
31
vulnerability VCID-eb37-mkxf-7fgw
32
vulnerability VCID-egye-da2v-4ybh
33
vulnerability VCID-f2zy-gq57-ufat
34
vulnerability VCID-fpuc-fe6m-47c6
35
vulnerability VCID-fyfz-6tr5-2fc7
36
vulnerability VCID-g7bk-891a-uufy
37
vulnerability VCID-g7eg-s99s-xqe7
38
vulnerability VCID-gv12-4ruf-kfhq
39
vulnerability VCID-gyed-x6s8-ybhr
40
vulnerability VCID-h9ds-trhx-m7aj
41
vulnerability VCID-hhk9-cr54-8fgc
42
vulnerability VCID-hmbm-5ysw-77bu
43
vulnerability VCID-hves-r5bg-yfes
44
vulnerability VCID-hxj6-mupf-abbc
45
vulnerability VCID-j2j9-avuw-n3eq
46
vulnerability VCID-jau7-gfz8-dkfa
47
vulnerability VCID-jf7u-dvpd-b7f4
48
vulnerability VCID-kagr-74d9-kyhx
49
vulnerability VCID-kgd1-bzst-muh7
50
vulnerability VCID-kwab-3s4q-eka4
51
vulnerability VCID-kyb8-rvyw-s7b1
52
vulnerability VCID-kzzv-rhya-j7dd
53
vulnerability VCID-m1zd-uytj-3bej
54
vulnerability VCID-mctd-9zgv-5qgp
55
vulnerability VCID-mwk8-b5c9-kbb9
56
vulnerability VCID-n3ab-nk7c-hqc9
57
vulnerability VCID-n76n-ywja-rbhh
58
vulnerability VCID-p4dn-y54m-8fd1
59
vulnerability VCID-p6ch-pc73-b3ck
60
vulnerability VCID-pqxe-tfhk-47b7
61
vulnerability VCID-q6hm-mmfs-zka5
62
vulnerability VCID-quwu-ep21-cyew
63
vulnerability VCID-r5rc-rdd9-bfbk
64
vulnerability VCID-rrdj-ssn7-zfdj
65
vulnerability VCID-ruuh-g3fa-m7d8
66
vulnerability VCID-ryha-ndms-afbn
67
vulnerability VCID-ta1m-dh8x-nubc
68
vulnerability VCID-tcbc-3kgt-muam
69
vulnerability VCID-tfn5-6ckq-wyce
70
vulnerability VCID-tfrs-d458-tfaq
71
vulnerability VCID-vd1s-m27a-8ucc
72
vulnerability VCID-vdnj-sqmx-e3ep
73
vulnerability VCID-w82a-7kk2-p3f1
74
vulnerability VCID-xf8r-kqxb-7qdy
75
vulnerability VCID-xqrn-wuv5-x7de
76
vulnerability VCID-yfx4-4gsc-2kgh
77
vulnerability VCID-ygvw-69am-s7ae
78
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.0
3
url pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5?arch=el5
purl pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1v6c-f56v-hqh1
1
vulnerability VCID-241m-q6vd-kudk
2
vulnerability VCID-8ebv-6941-jqdy
3
vulnerability VCID-d9ys-kxh6-nkgr
4
vulnerability VCID-egye-da2v-4ybh
5
vulnerability VCID-hhk9-cr54-8fgc
6
vulnerability VCID-mynk-ej6t-jygf
7
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5%3Farch=el5
4
url pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5?arch=el6
purl pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1v6c-f56v-hqh1
1
vulnerability VCID-241m-q6vd-kudk
2
vulnerability VCID-8ebv-6941-jqdy
3
vulnerability VCID-d9ys-kxh6-nkgr
4
vulnerability VCID-egye-da2v-4ybh
5
vulnerability VCID-hhk9-cr54-8fgc
6
vulnerability VCID-mynk-ej6t-jygf
7
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5%3Farch=el6
5
url pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5?arch=el4
purl pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1v6c-f56v-hqh1
1
vulnerability VCID-241m-q6vd-kudk
2
vulnerability VCID-8ebv-6941-jqdy
3
vulnerability VCID-d9ys-kxh6-nkgr
4
vulnerability VCID-egye-da2v-4ybh
5
vulnerability VCID-hhk9-cr54-8fgc
6
vulnerability VCID-mynk-ej6t-jygf
7
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5%3Farch=el4
6
url pkg:rpm/redhat/tomcat5@5.5.23-0jpp.31?arch=el5_8
purl pkg:rpm/redhat/tomcat5@5.5.23-0jpp.31?arch=el5_8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hhk9-cr54-8fgc
1
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.23-0jpp.31%3Farch=el5_8
7
url pkg:rpm/redhat/tomcat5@5.5.33-27_patch_07.ep5?arch=el5
purl pkg:rpm/redhat/tomcat5@5.5.33-27_patch_07.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1v6c-f56v-hqh1
1
vulnerability VCID-241m-q6vd-kudk
2
vulnerability VCID-8ebv-6941-jqdy
3
vulnerability VCID-d9ys-kxh6-nkgr
4
vulnerability VCID-egye-da2v-4ybh
5
vulnerability VCID-hhk9-cr54-8fgc
6
vulnerability VCID-mctd-9zgv-5qgp
7
vulnerability VCID-quwu-ep21-cyew
8
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.33-27_patch_07.ep5%3Farch=el5
8
url pkg:rpm/redhat/tomcat5@5.5.33-28_patch_07.ep5?arch=el6
purl pkg:rpm/redhat/tomcat5@5.5.33-28_patch_07.ep5?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1v6c-f56v-hqh1
1
vulnerability VCID-241m-q6vd-kudk
2
vulnerability VCID-8ebv-6941-jqdy
3
vulnerability VCID-d9ys-kxh6-nkgr
4
vulnerability VCID-egye-da2v-4ybh
5
vulnerability VCID-hhk9-cr54-8fgc
6
vulnerability VCID-mctd-9zgv-5qgp
7
vulnerability VCID-quwu-ep21-cyew
8
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.33-28_patch_07.ep5%3Farch=el6
9
url pkg:rpm/redhat/tomcat6@6.0.24-36?arch=el6_2
purl pkg:rpm/redhat/tomcat6@6.0.24-36?arch=el6_2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hhk9-cr54-8fgc
1
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat6@6.0.24-36%3Farch=el6_2
10
url pkg:rpm/redhat/tomcat6@6.0.32-24_patch_07.ep5?arch=el6
purl pkg:rpm/redhat/tomcat6@6.0.32-24_patch_07.ep5?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1v6c-f56v-hqh1
1
vulnerability VCID-241m-q6vd-kudk
2
vulnerability VCID-8ebv-6941-jqdy
3
vulnerability VCID-d9ys-kxh6-nkgr
4
vulnerability VCID-egye-da2v-4ybh
5
vulnerability VCID-hhk9-cr54-8fgc
6
vulnerability VCID-hxj6-mupf-abbc
7
vulnerability VCID-mctd-9zgv-5qgp
8
vulnerability VCID-quwu-ep21-cyew
9
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat6@6.0.32-24_patch_07.ep5%3Farch=el6
11
url pkg:rpm/redhat/tomcat6@6.0.32-24_patch_07.ep5?arch=el5
purl pkg:rpm/redhat/tomcat6@6.0.32-24_patch_07.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1v6c-f56v-hqh1
1
vulnerability VCID-241m-q6vd-kudk
2
vulnerability VCID-8ebv-6941-jqdy
3
vulnerability VCID-d9ys-kxh6-nkgr
4
vulnerability VCID-egye-da2v-4ybh
5
vulnerability VCID-hhk9-cr54-8fgc
6
vulnerability VCID-hxj6-mupf-abbc
7
vulnerability VCID-mctd-9zgv-5qgp
8
vulnerability VCID-quwu-ep21-cyew
9
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat6@6.0.32-24_patch_07.ep5%3Farch=el5
References
0
reference_url http://mail-archives.apache.org/mod_mbox/tomcat-announce/201112.mbox/%3c4EFB9800.5010106@apache.org%3e
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://mail-archives.apache.org/mod_mbox/tomcat-announce/201112.mbox/%3c4EFB9800.5010106@apache.org%3e
1
reference_url http://marc.info/?l=bugtraq&m=132871655717248&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=132871655717248&w=2
2
reference_url http://marc.info/?l=bugtraq&m=133294394108746&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=133294394108746&w=2
3
reference_url http://marc.info/?l=bugtraq&m=136485229118404&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=136485229118404&w=2
4
reference_url http://rhn.redhat.com/errata/RHSA-2012-0074.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2012-0074.html
5
reference_url http://rhn.redhat.com/errata/RHSA-2012-0075.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2012-0075.html
6
reference_url http://rhn.redhat.com/errata/RHSA-2012-0076.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2012-0076.html
7
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4858.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4858.json
8
reference_url https://api.first.org/data/v1/epss?cve=CVE-2011-4858
reference_id
reference_type
scores
0
value 0.766
scoring_system epss
scoring_elements 0.98936
published_at 2026-04-02T12:55:00Z
1
value 0.766
scoring_system epss
scoring_elements 0.98947
published_at 2026-04-16T12:55:00Z
2
value 0.766
scoring_system epss
scoring_elements 0.98945
published_at 2026-04-13T12:55:00Z
3
value 0.766
scoring_system epss
scoring_elements 0.98944
published_at 2026-04-12T12:55:00Z
4
value 0.766
scoring_system epss
scoring_elements 0.98938
published_at 2026-04-04T12:55:00Z
5
value 0.766
scoring_system epss
scoring_elements 0.98934
published_at 2026-04-01T12:55:00Z
6
value 0.766
scoring_system epss
scoring_elements 0.98942
published_at 2026-04-09T12:55:00Z
7
value 0.766
scoring_system epss
scoring_elements 0.9894
published_at 2026-04-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2011-4858
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=750521
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=750521
10
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
11
reference_url https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py
12
reference_url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18886
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18886
13
reference_url http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/tomcat-7.0-doc/changelog.html
14
reference_url http://www.debian.org/security/2012/dsa-2401
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2012/dsa-2401
15
reference_url http://www.kb.cert.org/vuls/id/903934
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.kb.cert.org/vuls/id/903934
16
reference_url http://www.nruns.com/_downloads/advisory28122011.pdf
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.nruns.com/_downloads/advisory28122011.pdf
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2011-4858
reference_id CVE-2011-4858
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2011-4858
18
reference_url http://www.ocert.org/advisories/ocert-2011-003.html
reference_id CVE-2011-4885;OSVDB-78115
reference_type exploit
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ocert.org/advisories/ocert-2011-003.html
19
reference_url https://github.com/advisories/GHSA-wr3m-gw98-mc3j
reference_id GHSA-wr3m-gw98-mc3j
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wr3m-gw98-mc3j
20
reference_url https://security.gentoo.org/glsa/201206-24
reference_id GLSA-201206-24
reference_type
scores
url https://security.gentoo.org/glsa/201206-24
21
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/2012.php
reference_id OSVDB-84803;CVE-2011-5035;CVE-2011-5034;CVE-2011-4885;CVE-2011-4858;CVE-2011-4084;CVE-2006-3775;OSVDB-84802;OSVDB-78115;OSVDB-78114;OSVDB-78113;OSVDB-78112;OSVDB-27335
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/2012.php
22
reference_url https://access.redhat.com/errata/RHSA-2012:0041
reference_id RHSA-2012:0041
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0041
23
reference_url https://access.redhat.com/errata/RHSA-2012:0077
reference_id RHSA-2012:0077
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0077
24
reference_url https://access.redhat.com/errata/RHSA-2012:0078
reference_id RHSA-2012:0078
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0078
25
reference_url https://access.redhat.com/errata/RHSA-2012:0089
reference_id RHSA-2012:0089
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0089
26
reference_url https://access.redhat.com/errata/RHSA-2012:0091
reference_id RHSA-2012:0091
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0091
27
reference_url https://access.redhat.com/errata/RHSA-2012:0325
reference_id RHSA-2012:0325
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0325
28
reference_url https://access.redhat.com/errata/RHSA-2012:0406
reference_id RHSA-2012:0406
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0406
29
reference_url https://access.redhat.com/errata/RHSA-2012:0474
reference_id RHSA-2012:0474
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0474
30
reference_url https://access.redhat.com/errata/RHSA-2012:0475
reference_id RHSA-2012:0475
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0475
31
reference_url https://access.redhat.com/errata/RHSA-2012:0679
reference_id RHSA-2012:0679
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0679
32
reference_url https://access.redhat.com/errata/RHSA-2012:0680
reference_id RHSA-2012:0680
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0680
33
reference_url https://access.redhat.com/errata/RHSA-2012:0681
reference_id RHSA-2012:0681
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0681
34
reference_url https://access.redhat.com/errata/RHSA-2012:0682
reference_id RHSA-2012:0682
reference_type
scores
url https://access.redhat.com/errata/RHSA-2012:0682
35
reference_url https://usn.ubuntu.com/1359-1/
reference_id USN-1359-1
reference_type
scores
url https://usn.ubuntu.com/1359-1/
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 399
name Resource Management Errors
description Weaknesses in this category are related to improper management of system resources.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Exploits
0
date_added 2006-07-14
description MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2006-07-15
exploit_type webapps
platform php
source_date_updated 2016-11-09
data_source Exploit-DB
source_url
1
date_added null
description 
This module uses a denial-of-service (DoS) condition appearing in a variety of
          programming languages. This vulnerability occurs when storing multiple values
          in a hash table and all values have the same hash value. This can cause a web server
          parsing the POST parameters issued with a request into a hash table to consume
          hours of CPU with a single HTTP request.

          Currently, only the hash functions for PHP and Java are implemented.
          This module was tested with PHP + httpd, Tomcat, Glassfish and Geronimo.
          It also generates a random payload to bypass some IDS signatures.
required_action null
due_date null
notes 
Stability:
  - crash-service-down
SideEffects: []
Reliability: []
known_ransomware_campaign_use false
source_date_published 2011-12-28
exploit_type null
platform
source_date_updated null
data_source Metasploit
source_url https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/dos/http/hashcollision_dos.rb
Severity_range_score4.0 - 6.9
Exploitability2.0
Weighted_severity6.2
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-zbbr-wded-9ffj