GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/15602?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/15602?format=api",
    "vulnerability_id": "VCID-zbbr-wded-9ffj",
    "summary": "Improper Input Validation in Apache Tomcat\nApache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.",
    "aliases": [
        {
            "alias": "CVE-2011-4858"
        },
        {
            "alias": "GHSA-wr3m-gw98-mc3j"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/71829?format=api",
            "purl": "pkg:ebuild/www-servers/tomcat@7.0.23",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/tomcat@7.0.23"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1436?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@5.5.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-12du-1vyt-bkgx"
                },
                {
                    "vulnerability": "VCID-18j8-kwdv-dyak"
                },
                {
                    "vulnerability": "VCID-1qt3-ctae-sfgw"
                },
                {
                    "vulnerability": "VCID-1v6c-f56v-hqh1"
                },
                {
                    "vulnerability": "VCID-241m-q6vd-kudk"
                },
                {
                    "vulnerability": "VCID-27q8-96un-9fbk"
                },
                {
                    "vulnerability": "VCID-2jnv-segx-zkfd"
                },
                {
                    "vulnerability": "VCID-4rcx-xfn5-7kdb"
                },
                {
                    "vulnerability": "VCID-6epr-2hbd-skcz"
                },
                {
                    "vulnerability": "VCID-6p3e-4u8s-17ep"
                },
                {
                    "vulnerability": "VCID-7969-7a8h-zyhh"
                },
                {
                    "vulnerability": "VCID-7kjm-p97s-zuh8"
                },
                {
                    "vulnerability": "VCID-86ur-vudp-4yc2"
                },
                {
                    "vulnerability": "VCID-87p8-zvvf-y7dm"
                },
                {
                    "vulnerability": "VCID-88v7-kc2y-bfd7"
                },
                {
                    "vulnerability": "VCID-8ebv-6941-jqdy"
                },
                {
                    "vulnerability": "VCID-a9cu-fxqw-xkdg"
                },
                {
                    "vulnerability": "VCID-acmu-9eqb-fya5"
                },
                {
                    "vulnerability": "VCID-bhq7-d545-27bj"
                },
                {
                    "vulnerability": "VCID-bung-pa58-ayfv"
                },
                {
                    "vulnerability": "VCID-d9ys-kxh6-nkgr"
                },
                {
                    "vulnerability": "VCID-dcrp-rae1-zfcm"
                },
                {
                    "vulnerability": "VCID-dhun-hj5q-dfch"
                },
                {
                    "vulnerability": "VCID-egye-da2v-4ybh"
                },
                {
                    "vulnerability": "VCID-f2zy-gq57-ufat"
                },
                {
                    "vulnerability": "VCID-fvvt-kufu-k3a6"
                },
                {
                    "vulnerability": "VCID-g7eg-s99s-xqe7"
                },
                {
                    "vulnerability": "VCID-g998-xymt-fudu"
                },
                {
                    "vulnerability": "VCID-hhk9-cr54-8fgc"
                },
                {
                    "vulnerability": "VCID-mctd-9zgv-5qgp"
                },
                {
                    "vulnerability": "VCID-mnf8-t3ew-4fgb"
                },
                {
                    "vulnerability": "VCID-n76n-ywja-rbhh"
                },
                {
                    "vulnerability": "VCID-peya-mr7j-vugf"
                },
                {
                    "vulnerability": "VCID-q7jp-hn4a-4kec"
                },
                {
                    "vulnerability": "VCID-qdck-q54n-rkcv"
                },
                {
                    "vulnerability": "VCID-quwu-ep21-cyew"
                },
                {
                    "vulnerability": "VCID-qxkf-4ddv-j3b7"
                },
                {
                    "vulnerability": "VCID-r5rc-rdd9-bfbk"
                },
                {
                    "vulnerability": "VCID-r84b-7ay9-ekcm"
                },
                {
                    "vulnerability": "VCID-rrdj-ssn7-zfdj"
                },
                {
                    "vulnerability": "VCID-rwvj-tq6x-2ubs"
                },
                {
                    "vulnerability": "VCID-skar-qk57-qkdv"
                },
                {
                    "vulnerability": "VCID-su1y-2bxh-9qe2"
                },
                {
                    "vulnerability": "VCID-tcju-3rvu-wkht"
                },
                {
                    "vulnerability": "VCID-tfn5-6ckq-wyce"
                },
                {
                    "vulnerability": "VCID-v94p-bxm3-akfd"
                },
                {
                    "vulnerability": "VCID-vm4b-26sq-tfev"
                },
                {
                    "vulnerability": "VCID-wsn2-pd9b-b3g8"
                },
                {
                    "vulnerability": "VCID-zbbr-wded-9ffj"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1364?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@6.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-12du-1vyt-bkgx"
                },
                {
                    "vulnerability": "VCID-18q4-zark-s7a7"
                },
                {
                    "vulnerability": "VCID-1k8f-vsg1-k3d6"
                },
                {
                    "vulnerability": "VCID-1qt3-ctae-sfgw"
                },
                {
                    "vulnerability": "VCID-1v6c-f56v-hqh1"
                },
                {
                    "vulnerability": "VCID-241m-q6vd-kudk"
                },
                {
                    "vulnerability": "VCID-27q8-96un-9fbk"
                },
                {
                    "vulnerability": "VCID-3cr9-g81m-4ugy"
                },
                {
                    "vulnerability": "VCID-3n4t-bvb1-5qer"
                },
                {
                    "vulnerability": "VCID-3r3s-q21j-c3au"
                },
                {
                    "vulnerability": "VCID-4mkw-7haq-pkgn"
                },
                {
                    "vulnerability": "VCID-4rcx-xfn5-7kdb"
                },
                {
                    "vulnerability": "VCID-68fk-4g86-ekbp"
                },
                {
                    "vulnerability": "VCID-6epr-2hbd-skcz"
                },
                {
                    "vulnerability": "VCID-6p3e-4u8s-17ep"
                },
                {
                    "vulnerability": "VCID-7969-7a8h-zyhh"
                },
                {
                    "vulnerability": "VCID-7cpu-h5fr-8ffd"
                },
                {
                    "vulnerability": "VCID-7ej8-5f77-cybb"
                },
                {
                    "vulnerability": "VCID-7kjm-p97s-zuh8"
                },
                {
                    "vulnerability": "VCID-7pd9-1r19-73fe"
                },
                {
                    "vulnerability": "VCID-87p8-zvvf-y7dm"
                },
                {
                    "vulnerability": "VCID-88v7-kc2y-bfd7"
                },
                {
                    "vulnerability": "VCID-8ebv-6941-jqdy"
                },
                {
                    "vulnerability": "VCID-95d1-arxd-hkd1"
                },
                {
                    "vulnerability": "VCID-a1by-zvtm-akdc"
                },
                {
                    "vulnerability": "VCID-a9cu-fxqw-xkdg"
                },
                {
                    "vulnerability": "VCID-acmu-9eqb-fya5"
                },
                {
                    "vulnerability": "VCID-bung-pa58-ayfv"
                },
                {
                    "vulnerability": "VCID-d9ys-kxh6-nkgr"
                },
                {
                    "vulnerability": "VCID-dcrp-rae1-zfcm"
                },
                {
                    "vulnerability": "VCID-dhun-hj5q-dfch"
                },
                {
                    "vulnerability": "VCID-egup-27ub-6uaf"
                },
                {
                    "vulnerability": "VCID-egye-da2v-4ybh"
                },
                {
                    "vulnerability": "VCID-f2zy-gq57-ufat"
                },
                {
                    "vulnerability": "VCID-fpuc-fe6m-47c6"
                },
                {
                    "vulnerability": "VCID-g7eg-s99s-xqe7"
                },
                {
                    "vulnerability": "VCID-g998-xymt-fudu"
                },
                {
                    "vulnerability": "VCID-h9ds-trhx-m7aj"
                },
                {
                    "vulnerability": "VCID-hhk9-cr54-8fgc"
                },
                {
                    "vulnerability": "VCID-hhkg-mfp5-2kax"
                },
                {
                    "vulnerability": "VCID-jau7-gfz8-dkfa"
                },
                {
                    "vulnerability": "VCID-jf7u-dvpd-b7f4"
                },
                {
                    "vulnerability": "VCID-jtg7-217a-qqhk"
                },
                {
                    "vulnerability": "VCID-kagr-74d9-kyhx"
                },
                {
                    "vulnerability": "VCID-kgd1-bzst-muh7"
                },
                {
                    "vulnerability": "VCID-kzzv-rhya-j7dd"
                },
                {
                    "vulnerability": "VCID-m1zd-uytj-3bej"
                },
                {
                    "vulnerability": "VCID-mctd-9zgv-5qgp"
                },
                {
                    "vulnerability": "VCID-mnf8-t3ew-4fgb"
                },
                {
                    "vulnerability": "VCID-mwk8-b5c9-kbb9"
                },
                {
                    "vulnerability": "VCID-n76n-ywja-rbhh"
                },
                {
                    "vulnerability": "VCID-p4dn-y54m-8fd1"
                },
                {
                    "vulnerability": "VCID-p6ch-pc73-b3ck"
                },
                {
                    "vulnerability": "VCID-peya-mr7j-vugf"
                },
                {
                    "vulnerability": "VCID-qdck-q54n-rkcv"
                },
                {
                    "vulnerability": "VCID-quwu-ep21-cyew"
                },
                {
                    "vulnerability": "VCID-qxkf-4ddv-j3b7"
                },
                {
                    "vulnerability": "VCID-r5rc-rdd9-bfbk"
                },
                {
                    "vulnerability": "VCID-r84b-7ay9-ekcm"
                },
                {
                    "vulnerability": "VCID-rrdj-ssn7-zfdj"
                },
                {
                    "vulnerability": "VCID-rwvj-tq6x-2ubs"
                },
                {
                    "vulnerability": "VCID-su1y-2bxh-9qe2"
                },
                {
                    "vulnerability": "VCID-t9y6-suc2-2kcg"
                },
                {
                    "vulnerability": "VCID-ta1m-dh8x-nubc"
                },
                {
                    "vulnerability": "VCID-tcbc-3kgt-muam"
                },
                {
                    "vulnerability": "VCID-tcju-3rvu-wkht"
                },
                {
                    "vulnerability": "VCID-tfn5-6ckq-wyce"
                },
                {
                    "vulnerability": "VCID-tfrs-d458-tfaq"
                },
                {
                    "vulnerability": "VCID-twh8-87va-juf9"
                },
                {
                    "vulnerability": "VCID-v94p-bxm3-akfd"
                },
                {
                    "vulnerability": "VCID-vd1s-m27a-8ucc"
                },
                {
                    "vulnerability": "VCID-vm4b-26sq-tfev"
                },
                {
                    "vulnerability": "VCID-w82a-7kk2-p3f1"
                },
                {
                    "vulnerability": "VCID-wsn2-pd9b-b3g8"
                },
                {
                    "vulnerability": "VCID-xf8r-kqxb-7qdy"
                },
                {
                    "vulnerability": "VCID-ygvw-69am-s7ae"
                },
                {
                    "vulnerability": "VCID-zbbr-wded-9ffj"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1212?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@7.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-12du-1vyt-bkgx"
                },
                {
                    "vulnerability": "VCID-18q4-zark-s7a7"
                },
                {
                    "vulnerability": "VCID-1k8f-vsg1-k3d6"
                },
                {
                    "vulnerability": "VCID-1v6c-f56v-hqh1"
                },
                {
                    "vulnerability": "VCID-241m-q6vd-kudk"
                },
                {
                    "vulnerability": "VCID-2sbh-sy57-3uez"
                },
                {
                    "vulnerability": "VCID-3cr9-g81m-4ugy"
                },
                {
                    "vulnerability": "VCID-3n4t-bvb1-5qer"
                },
                {
                    "vulnerability": "VCID-3r3s-q21j-c3au"
                },
                {
                    "vulnerability": "VCID-4aaa-errb-2qdw"
                },
                {
                    "vulnerability": "VCID-4mkw-7haq-pkgn"
                },
                {
                    "vulnerability": "VCID-5eqm-218u-p7gq"
                },
                {
                    "vulnerability": "VCID-618c-ar98-qfcr"
                },
                {
                    "vulnerability": "VCID-66kh-s6cr-tqf9"
                },
                {
                    "vulnerability": "VCID-68fk-4g86-ekbp"
                },
                {
                    "vulnerability": "VCID-7cpu-h5fr-8ffd"
                },
                {
                    "vulnerability": "VCID-7ej8-5f77-cybb"
                },
                {
                    "vulnerability": "VCID-886n-1vzv-syc6"
                },
                {
                    "vulnerability": "VCID-8ebv-6941-jqdy"
                },
                {
                    "vulnerability": "VCID-95d1-arxd-hkd1"
                },
                {
                    "vulnerability": "VCID-95fn-d2ad-qyg6"
                },
                {
                    "vulnerability": "VCID-9exq-fhv6-bbea"
                },
                {
                    "vulnerability": "VCID-a1by-zvtm-akdc"
                },
                {
                    "vulnerability": "VCID-a8gk-n8bq-87cp"
                },
                {
                    "vulnerability": "VCID-afm2-uj45-xkgx"
                },
                {
                    "vulnerability": "VCID-arkn-bca7-hqam"
                },
                {
                    "vulnerability": "VCID-c4jv-ws83-x7g2"
                },
                {
                    "vulnerability": "VCID-d9ys-kxh6-nkgr"
                },
                {
                    "vulnerability": "VCID-dhun-hj5q-dfch"
                },
                {
                    "vulnerability": "VCID-dzpn-w4b3-vbcm"
                },
                {
                    "vulnerability": "VCID-e2kr-7pmg-gfc9"
                },
                {
                    "vulnerability": "VCID-eb37-mkxf-7fgw"
                },
                {
                    "vulnerability": "VCID-egye-da2v-4ybh"
                },
                {
                    "vulnerability": "VCID-f2zy-gq57-ufat"
                },
                {
                    "vulnerability": "VCID-fpuc-fe6m-47c6"
                },
                {
                    "vulnerability": "VCID-fyfz-6tr5-2fc7"
                },
                {
                    "vulnerability": "VCID-g7bk-891a-uufy"
                },
                {
                    "vulnerability": "VCID-g7eg-s99s-xqe7"
                },
                {
                    "vulnerability": "VCID-gv12-4ruf-kfhq"
                },
                {
                    "vulnerability": "VCID-gyed-x6s8-ybhr"
                },
                {
                    "vulnerability": "VCID-h9ds-trhx-m7aj"
                },
                {
                    "vulnerability": "VCID-hhk9-cr54-8fgc"
                },
                {
                    "vulnerability": "VCID-hmbm-5ysw-77bu"
                },
                {
                    "vulnerability": "VCID-hves-r5bg-yfes"
                },
                {
                    "vulnerability": "VCID-hxj6-mupf-abbc"
                },
                {
                    "vulnerability": "VCID-j2j9-avuw-n3eq"
                },
                {
                    "vulnerability": "VCID-jau7-gfz8-dkfa"
                },
                {
                    "vulnerability": "VCID-jf7u-dvpd-b7f4"
                },
                {
                    "vulnerability": "VCID-kagr-74d9-kyhx"
                },
                {
                    "vulnerability": "VCID-kgd1-bzst-muh7"
                },
                {
                    "vulnerability": "VCID-kwab-3s4q-eka4"
                },
                {
                    "vulnerability": "VCID-kyb8-rvyw-s7b1"
                },
                {
                    "vulnerability": "VCID-kzzv-rhya-j7dd"
                },
                {
                    "vulnerability": "VCID-m1zd-uytj-3bej"
                },
                {
                    "vulnerability": "VCID-mctd-9zgv-5qgp"
                },
                {
                    "vulnerability": "VCID-mwk8-b5c9-kbb9"
                },
                {
                    "vulnerability": "VCID-n3ab-nk7c-hqc9"
                },
                {
                    "vulnerability": "VCID-n76n-ywja-rbhh"
                },
                {
                    "vulnerability": "VCID-p4dn-y54m-8fd1"
                },
                {
                    "vulnerability": "VCID-p6ch-pc73-b3ck"
                },
                {
                    "vulnerability": "VCID-pqxe-tfhk-47b7"
                },
                {
                    "vulnerability": "VCID-q6hm-mmfs-zka5"
                },
                {
                    "vulnerability": "VCID-quwu-ep21-cyew"
                },
                {
                    "vulnerability": "VCID-r5rc-rdd9-bfbk"
                },
                {
                    "vulnerability": "VCID-rrdj-ssn7-zfdj"
                },
                {
                    "vulnerability": "VCID-ruuh-g3fa-m7d8"
                },
                {
                    "vulnerability": "VCID-ryha-ndms-afbn"
                },
                {
                    "vulnerability": "VCID-ta1m-dh8x-nubc"
                },
                {
                    "vulnerability": "VCID-tcbc-3kgt-muam"
                },
                {
                    "vulnerability": "VCID-tfn5-6ckq-wyce"
                },
                {
                    "vulnerability": "VCID-tfrs-d458-tfaq"
                },
                {
                    "vulnerability": "VCID-vd1s-m27a-8ucc"
                },
                {
                    "vulnerability": "VCID-vdnj-sqmx-e3ep"
                },
                {
                    "vulnerability": "VCID-w82a-7kk2-p3f1"
                },
                {
                    "vulnerability": "VCID-xf8r-kqxb-7qdy"
                },
                {
                    "vulnerability": "VCID-xqrn-wuv5-x7de"
                },
                {
                    "vulnerability": "VCID-yfx4-4gsc-2kgh"
                },
                {
                    "vulnerability": "VCID-ygvw-69am-s7ae"
                },
                {
                    "vulnerability": "VCID-zbbr-wded-9ffj"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/126203?format=api",
            "purl": "pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5?arch=el5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1v6c-f56v-hqh1"
                },
                {
                    "vulnerability": "VCID-241m-q6vd-kudk"
                },
                {
                    "vulnerability": "VCID-8ebv-6941-jqdy"
                },
                {
                    "vulnerability": "VCID-d9ys-kxh6-nkgr"
                },
                {
                    "vulnerability": "VCID-egye-da2v-4ybh"
                },
                {
                    "vulnerability": "VCID-hhk9-cr54-8fgc"
                },
                {
                    "vulnerability": "VCID-mynk-ej6t-jygf"
                },
                {
                    "vulnerability": "VCID-zbbr-wded-9ffj"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5%3Farch=el5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/126204?format=api",
            "purl": "pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5?arch=el6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1v6c-f56v-hqh1"
                },
                {
                    "vulnerability": "VCID-241m-q6vd-kudk"
                },
                {
                    "vulnerability": "VCID-8ebv-6941-jqdy"
                },
                {
                    "vulnerability": "VCID-d9ys-kxh6-nkgr"
                },
                {
                    "vulnerability": "VCID-egye-da2v-4ybh"
                },
                {
                    "vulnerability": "VCID-hhk9-cr54-8fgc"
                },
                {
                    "vulnerability": "VCID-mynk-ej6t-jygf"
                },
                {
                    "vulnerability": "VCID-zbbr-wded-9ffj"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5%3Farch=el6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/126205?format=api",
            "purl": "pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5?arch=el4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1v6c-f56v-hqh1"
                },
                {
                    "vulnerability": "VCID-241m-q6vd-kudk"
                },
                {
                    "vulnerability": "VCID-8ebv-6941-jqdy"
                },
                {
                    "vulnerability": "VCID-d9ys-kxh6-nkgr"
                },
                {
                    "vulnerability": "VCID-egye-da2v-4ybh"
                },
                {
                    "vulnerability": "VCID-hhk9-cr54-8fgc"
                },
                {
                    "vulnerability": "VCID-mynk-ej6t-jygf"
                },
                {
                    "vulnerability": "VCID-zbbr-wded-9ffj"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@2.1.12-3_patch_03.2.ep5%3Farch=el4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/126241?format=api",
            "purl": "pkg:rpm/redhat/tomcat5@5.5.23-0jpp.31?arch=el5_8",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-hhk9-cr54-8fgc"
                },
                {
                    "vulnerability": "VCID-zbbr-wded-9ffj"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.23-0jpp.31%3Farch=el5_8"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/126239?format=api",
            "purl": "pkg:rpm/redhat/tomcat5@5.5.33-27_patch_07.ep5?arch=el5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1v6c-f56v-hqh1"
                },
                {
                    "vulnerability": "VCID-241m-q6vd-kudk"
                },
                {
                    "vulnerability": "VCID-8ebv-6941-jqdy"
                },
                {
                    "vulnerability": "VCID-d9ys-kxh6-nkgr"
                },
                {
                    "vulnerability": "VCID-egye-da2v-4ybh"
                },
                {
                    "vulnerability": "VCID-hhk9-cr54-8fgc"
                },
                {
                    "vulnerability": "VCID-mctd-9zgv-5qgp"
                },
                {
                    "vulnerability": "VCID-quwu-ep21-cyew"
                },
                {
                    "vulnerability": "VCID-zbbr-wded-9ffj"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.33-27_patch_07.ep5%3Farch=el5"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/126242?format=api",
            "purl": "pkg:rpm/redhat/tomcat5@5.5.33-28_patch_07.ep5?arch=el6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1v6c-f56v-hqh1"
                },
                {
                    "vulnerability": "VCID-241m-q6vd-kudk"
                },
                {
                    "vulnerability": "VCID-8ebv-6941-jqdy"
                },
                {
                    "vulnerability": "VCID-d9ys-kxh6-nkgr"
                },
                {
                    "vulnerability": "VCID-egye-da2v-4ybh"
                },
                {
                    "vulnerability": "VCID-hhk9-cr54-8fgc"
                },
                {
                    "vulnerability": "VCID-mctd-9zgv-5qgp"
                },
                {
                    "vulnerability": "VCID-quwu-ep21-cyew"
                },
                {
                    "vulnerability": "VCID-zbbr-wded-9ffj"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.33-28_patch_07.ep5%3Farch=el6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/126240?format=api",
            "purl": "pkg:rpm/redhat/tomcat6@6.0.24-36?arch=el6_2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-hhk9-cr54-8fgc"
                },
                {
                    "vulnerability": "VCID-zbbr-wded-9ffj"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat6@6.0.24-36%3Farch=el6_2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/126237?format=api",
            "purl": "pkg:rpm/redhat/tomcat6@6.0.32-24_patch_07.ep5?arch=el6",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1v6c-f56v-hqh1"
                },
                {
                    "vulnerability": "VCID-241m-q6vd-kudk"
                },
                {
                    "vulnerability": "VCID-8ebv-6941-jqdy"
                },
                {
                    "vulnerability": "VCID-d9ys-kxh6-nkgr"
                },
                {
                    "vulnerability": "VCID-egye-da2v-4ybh"
                },
                {
                    "vulnerability": "VCID-hhk9-cr54-8fgc"
                },
                {
                    "vulnerability": "VCID-hxj6-mupf-abbc"
                },
                {
                    "vulnerability": "VCID-mctd-9zgv-5qgp"
                },
                {
                    "vulnerability": "VCID-quwu-ep21-cyew"
                },
                {
                    "vulnerability": "VCID-zbbr-wded-9ffj"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat6@6.0.32-24_patch_07.ep5%3Farch=el6"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/126238?format=api",
            "purl": "pkg:rpm/redhat/tomcat6@6.0.32-24_patch_07.ep5?arch=el5",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1v6c-f56v-hqh1"
                },
                {
                    "vulnerability": "VCID-241m-q6vd-kudk"
                },
                {
                    "vulnerability": "VCID-8ebv-6941-jqdy"
                },
                {
                    "vulnerability": "VCID-d9ys-kxh6-nkgr"
                },
                {
                    "vulnerability": "VCID-egye-da2v-4ybh"
                },
                {
                    "vulnerability": "VCID-hhk9-cr54-8fgc"
                },
                {
                    "vulnerability": "VCID-hxj6-mupf-abbc"
                },
                {
                    "vulnerability": "VCID-mctd-9zgv-5qgp"
                },
                {
                    "vulnerability": "VCID-quwu-ep21-cyew"
                },
                {
                    "vulnerability": "VCID-zbbr-wded-9ffj"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat6@6.0.32-24_patch_07.ep5%3Farch=el5"
        }
    ],
    "references": [
        {
            "reference_url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/201112.mbox/%3c4EFB9800.5010106@apache.org%3e",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/201112.mbox/%3c4EFB9800.5010106@apache.org%3e"
        },
        {
            "reference_url": "http://marc.info/?l=bugtraq&m=132871655717248&w=2",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://marc.info/?l=bugtraq&m=132871655717248&w=2"
        },
        {
            "reference_url": "http://marc.info/?l=bugtraq&m=133294394108746&w=2",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://marc.info/?l=bugtraq&m=133294394108746&w=2"
        },
        {
            "reference_url": "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://marc.info/?l=bugtraq&m=136485229118404&w=2"
        },
        {
            "reference_url": "http://rhn.redhat.com/errata/RHSA-2012-0074.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0074.html"
        },
        {
            "reference_url": "http://rhn.redhat.com/errata/RHSA-2012-0075.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0075.html"
        },
        {
            "reference_url": "http://rhn.redhat.com/errata/RHSA-2012-0076.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0076.html"
        },
        {
            "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4858.json",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-4858.json"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4858",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.766",
                    "scoring_system": "epss",
                    "scoring_elements": "0.98936",
                    "published_at": "2026-04-02T12:55:00Z"
                },
                {
                    "value": "0.766",
                    "scoring_system": "epss",
                    "scoring_elements": "0.98947",
                    "published_at": "2026-04-16T12:55:00Z"
                },
                {
                    "value": "0.766",
                    "scoring_system": "epss",
                    "scoring_elements": "0.98945",
                    "published_at": "2026-04-13T12:55:00Z"
                },
                {
                    "value": "0.766",
                    "scoring_system": "epss",
                    "scoring_elements": "0.98944",
                    "published_at": "2026-04-12T12:55:00Z"
                },
                {
                    "value": "0.766",
                    "scoring_system": "epss",
                    "scoring_elements": "0.98938",
                    "published_at": "2026-04-04T12:55:00Z"
                },
                {
                    "value": "0.766",
                    "scoring_system": "epss",
                    "scoring_elements": "0.98934",
                    "published_at": "2026-04-01T12:55:00Z"
                },
                {
                    "value": "0.766",
                    "scoring_system": "epss",
                    "scoring_elements": "0.98942",
                    "published_at": "2026-04-09T12:55:00Z"
                },
                {
                    "value": "0.766",
                    "scoring_system": "epss",
                    "scoring_elements": "0.9894",
                    "published_at": "2026-04-07T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4858"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=750521",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=750521"
        },
        {
            "reference_url": "https://github.com/apache/tomcat",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/apache/tomcat"
        },
        {
            "reference_url": "https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py"
        },
        {
            "reference_url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18886",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18886"
        },
        {
            "reference_url": "http://tomcat.apache.org/tomcat-7.0-doc/changelog.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://tomcat.apache.org/tomcat-7.0-doc/changelog.html"
        },
        {
            "reference_url": "http://www.debian.org/security/2012/dsa-2401",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.debian.org/security/2012/dsa-2401"
        },
        {
            "reference_url": "http://www.kb.cert.org/vuls/id/903934",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.kb.cert.org/vuls/id/903934"
        },
        {
            "reference_url": "http://www.nruns.com/_downloads/advisory28122011.pdf",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.nruns.com/_downloads/advisory28122011.pdf"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4858",
            "reference_id": "CVE-2011-4858",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4858"
        },
        {
            "reference_url": "http://www.ocert.org/advisories/ocert-2011-003.html",
            "reference_id": "CVE-2011-4885;OSVDB-78115",
            "reference_type": "exploit",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.ocert.org/advisories/ocert-2011-003.html"
        },
        {
            "reference_url": "https://github.com/advisories/GHSA-wr3m-gw98-mc3j",
            "reference_id": "GHSA-wr3m-gw98-mc3j",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "cvssv3.1_qr",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/advisories/GHSA-wr3m-gw98-mc3j"
        },
        {
            "reference_url": "https://security.gentoo.org/glsa/201206-24",
            "reference_id": "GLSA-201206-24",
            "reference_type": "",
            "scores": [],
            "url": "https://security.gentoo.org/glsa/201206-24"
        },
        {
            "reference_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/2012.php",
            "reference_id": "OSVDB-84803;CVE-2011-5035;CVE-2011-5034;CVE-2011-4885;CVE-2011-4858;CVE-2011-4084;CVE-2006-3775;OSVDB-84802;OSVDB-78115;OSVDB-78114;OSVDB-78113;OSVDB-78112;OSVDB-27335",
            "reference_type": "exploit",
            "scores": [],
            "url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/webapps/2012.php"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2012:0041",
            "reference_id": "RHSA-2012:0041",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2012:0041"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2012:0077",
            "reference_id": "RHSA-2012:0077",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2012:0077"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2012:0078",
            "reference_id": "RHSA-2012:0078",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2012:0078"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2012:0089",
            "reference_id": "RHSA-2012:0089",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2012:0089"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2012:0091",
            "reference_id": "RHSA-2012:0091",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2012:0091"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2012:0325",
            "reference_id": "RHSA-2012:0325",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2012:0325"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2012:0406",
            "reference_id": "RHSA-2012:0406",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2012:0406"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2012:0474",
            "reference_id": "RHSA-2012:0474",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2012:0474"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2012:0475",
            "reference_id": "RHSA-2012:0475",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2012:0475"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2012:0679",
            "reference_id": "RHSA-2012:0679",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2012:0679"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2012:0680",
            "reference_id": "RHSA-2012:0680",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2012:0680"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2012:0681",
            "reference_id": "RHSA-2012:0681",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2012:0681"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2012:0682",
            "reference_id": "RHSA-2012:0682",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2012:0682"
        },
        {
            "reference_url": "https://usn.ubuntu.com/1359-1/",
            "reference_id": "USN-1359-1",
            "reference_type": "",
            "scores": [],
            "url": "https://usn.ubuntu.com/1359-1/"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 1035,
            "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."
        },
        {
            "cwe_id": 399,
            "name": "Resource Management Errors",
            "description": "Weaknesses in this category are related to improper management of system resources."
        },
        {
            "cwe_id": 937,
            "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."
        },
        {
            "cwe_id": 20,
            "name": "Improper Input Validation",
            "description": "The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly."
        }
    ],
    "exploits": [
        {
            "date_added": "2006-07-14",
            "description": "MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection",
            "required_action": null,
            "due_date": null,
            "notes": null,
            "known_ransomware_campaign_use": true,
            "source_date_published": "2006-07-15",
            "exploit_type": "webapps",
            "platform": "php",
            "source_date_updated": "2016-11-09",
            "data_source": "Exploit-DB",
            "source_url": ""
        },
        {
            "date_added": null,
            "description": "This module uses a denial-of-service (DoS) condition appearing in a variety of\n          programming languages. This vulnerability occurs when storing multiple values\n          in a hash table and all values have the same hash value. This can cause a web server\n          parsing the POST parameters issued with a request into a hash table to consume\n          hours of CPU with a single HTTP request.\n\n          Currently, only the hash functions for PHP and Java are implemented.\n          This module was tested with PHP + httpd, Tomcat, Glassfish and Geronimo.\n          It also generates a random payload to bypass some IDS signatures.",
            "required_action": null,
            "due_date": null,
            "notes": "Stability:\n  - crash-service-down\nSideEffects: []\nReliability: []\n",
            "known_ransomware_campaign_use": false,
            "source_date_published": "2011-12-28",
            "exploit_type": null,
            "platform": "",
            "source_date_updated": null,
            "data_source": "Metasploit",
            "source_url": "https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/dos/http/hashcollision_dos.rb"
        }
    ],
    "severity_range_score": "4.0 - 6.9",
    "exploitability": "2.0",
    "weighted_severity": "6.2",
    "risk_score": 10.0,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zbbr-wded-9ffj"
}