GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/16407?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/16407?format=api",
    "vulnerability_id": "VCID-zus9-yf6s-vfb1",
    "summary": "Improper Input Validation in Apache Tomcat\nApache Tomcat before 5.5.35, 6.x before 6.0.35, and 7.x before 7.0.23 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.",
    "aliases": [
        {
            "alias": "CVE-2011-4858"
        },
        {
            "alias": "GHSA-wr3m-gw98-mc3j"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/171221?format=api",
            "purl": "pkg:ebuild/www-servers/tomcat@7.0.23",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/tomcat@7.0.23"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5459?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@5.5.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-12ue-np81-1bhx"
                },
                {
                    "vulnerability": "VCID-2396-qnkz-vqg5"
                },
                {
                    "vulnerability": "VCID-2881-5hq5-p7hq"
                },
                {
                    "vulnerability": "VCID-451n-a18k-5kdv"
                },
                {
                    "vulnerability": "VCID-4ma9-urc9-bubh"
                },
                {
                    "vulnerability": "VCID-5d3r-x7a4-zygx"
                },
                {
                    "vulnerability": "VCID-5g5r-v8rj-5bgb"
                },
                {
                    "vulnerability": "VCID-6tqf-ypf4-a7hg"
                },
                {
                    "vulnerability": "VCID-8xre-qq1w-a7bb"
                },
                {
                    "vulnerability": "VCID-938j-55jz-fyf1"
                },
                {
                    "vulnerability": "VCID-9yfe-v9b9-8key"
                },
                {
                    "vulnerability": "VCID-b5tj-a1a5-bfaz"
                },
                {
                    "vulnerability": "VCID-b6dz-e575-xudf"
                },
                {
                    "vulnerability": "VCID-b9kc-tb5j-tfh6"
                },
                {
                    "vulnerability": "VCID-daym-ybtj-g3h4"
                },
                {
                    "vulnerability": "VCID-dpjc-z3md-pqgu"
                },
                {
                    "vulnerability": "VCID-e8n9-5f72-8ybb"
                },
                {
                    "vulnerability": "VCID-edsn-q94f-skax"
                },
                {
                    "vulnerability": "VCID-f2vk-cyeq-y3ar"
                },
                {
                    "vulnerability": "VCID-fqj2-k7e7-rydn"
                },
                {
                    "vulnerability": "VCID-fup1-zz6e-eyh4"
                },
                {
                    "vulnerability": "VCID-fwx8-jbgc-3ua5"
                },
                {
                    "vulnerability": "VCID-gve5-fam7-g7eh"
                },
                {
                    "vulnerability": "VCID-h1uu-cmta-83c1"
                },
                {
                    "vulnerability": "VCID-j51f-82vz-2kcs"
                },
                {
                    "vulnerability": "VCID-ja59-geuc-vue8"
                },
                {
                    "vulnerability": "VCID-kypf-ay1s-6bah"
                },
                {
                    "vulnerability": "VCID-mq75-d7z2-yygg"
                },
                {
                    "vulnerability": "VCID-n8tq-vwye-puh8"
                },
                {
                    "vulnerability": "VCID-qur2-b72r-nff2"
                },
                {
                    "vulnerability": "VCID-rdaa-zvr3-jfdz"
                },
                {
                    "vulnerability": "VCID-svq9-dst7-bbac"
                },
                {
                    "vulnerability": "VCID-tpjz-rzwt-m3af"
                },
                {
                    "vulnerability": "VCID-ttnn-f8f2-2ugz"
                },
                {
                    "vulnerability": "VCID-uq27-qyvn-hfar"
                },
                {
                    "vulnerability": "VCID-vwjr-b3tg-6kc6"
                },
                {
                    "vulnerability": "VCID-w6uy-d145-gkf3"
                },
                {
                    "vulnerability": "VCID-y8dz-8914-pydr"
                },
                {
                    "vulnerability": "VCID-ynaa-xm41-e3b9"
                },
                {
                    "vulnerability": "VCID-ytw6-k6vk-akc9"
                },
                {
                    "vulnerability": "VCID-yvhh-6p4j-1bdp"
                },
                {
                    "vulnerability": "VCID-z45k-rmyd-dyen"
                },
                {
                    "vulnerability": "VCID-zfr1-8ew7-vkad"
                },
                {
                    "vulnerability": "VCID-zhnq-jrve-q3f4"
                },
                {
                    "vulnerability": "VCID-zus9-yf6s-vfb1"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5387?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@6.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-12ue-np81-1bhx"
                },
                {
                    "vulnerability": "VCID-1j3b-sg7h-v3dz"
                },
                {
                    "vulnerability": "VCID-2396-qnkz-vqg5"
                },
                {
                    "vulnerability": "VCID-26b5-gfew-m3bn"
                },
                {
                    "vulnerability": "VCID-2881-5hq5-p7hq"
                },
                {
                    "vulnerability": "VCID-2ay7-rfpg-gffa"
                },
                {
                    "vulnerability": "VCID-2yt2-fybp-ruct"
                },
                {
                    "vulnerability": "VCID-369y-mv58-vqbu"
                },
                {
                    "vulnerability": "VCID-451n-a18k-5kdv"
                },
                {
                    "vulnerability": "VCID-49e2-f39a-d7at"
                },
                {
                    "vulnerability": "VCID-4ma9-urc9-bubh"
                },
                {
                    "vulnerability": "VCID-5d3r-x7a4-zygx"
                },
                {
                    "vulnerability": "VCID-5g5r-v8rj-5bgb"
                },
                {
                    "vulnerability": "VCID-6e56-827h-afb8"
                },
                {
                    "vulnerability": "VCID-6n8m-bprk-1fbk"
                },
                {
                    "vulnerability": "VCID-6tqf-ypf4-a7hg"
                },
                {
                    "vulnerability": "VCID-7crr-qxzd-sfbn"
                },
                {
                    "vulnerability": "VCID-8xre-qq1w-a7bb"
                },
                {
                    "vulnerability": "VCID-938j-55jz-fyf1"
                },
                {
                    "vulnerability": "VCID-9yfe-v9b9-8key"
                },
                {
                    "vulnerability": "VCID-9zgk-pw69-4kdb"
                },
                {
                    "vulnerability": "VCID-b5tj-a1a5-bfaz"
                },
                {
                    "vulnerability": "VCID-b6dz-e575-xudf"
                },
                {
                    "vulnerability": "VCID-bb6z-a8sb-rkdb"
                },
                {
                    "vulnerability": "VCID-bhwy-a7r9-4ubc"
                },
                {
                    "vulnerability": "VCID-bkcg-64ws-afcf"
                },
                {
                    "vulnerability": "VCID-btm2-f9dc-yqem"
                },
                {
                    "vulnerability": "VCID-c8ja-3gs3-wuaa"
                },
                {
                    "vulnerability": "VCID-cpx4-6msu-ruef"
                },
                {
                    "vulnerability": "VCID-czvy-t2cc-4kgt"
                },
                {
                    "vulnerability": "VCID-daym-ybtj-g3h4"
                },
                {
                    "vulnerability": "VCID-dmrz-z2gw-8yfv"
                },
                {
                    "vulnerability": "VCID-dpjc-z3md-pqgu"
                },
                {
                    "vulnerability": "VCID-e8n9-5f72-8ybb"
                },
                {
                    "vulnerability": "VCID-f2vk-cyeq-y3ar"
                },
                {
                    "vulnerability": "VCID-f8s4-weeq-jqg1"
                },
                {
                    "vulnerability": "VCID-fqj2-k7e7-rydn"
                },
                {
                    "vulnerability": "VCID-fup1-zz6e-eyh4"
                },
                {
                    "vulnerability": "VCID-fwx8-jbgc-3ua5"
                },
                {
                    "vulnerability": "VCID-h1uu-cmta-83c1"
                },
                {
                    "vulnerability": "VCID-j51f-82vz-2kcs"
                },
                {
                    "vulnerability": "VCID-j99d-fa2v-zyh8"
                },
                {
                    "vulnerability": "VCID-ja59-geuc-vue8"
                },
                {
                    "vulnerability": "VCID-k1jy-xthq-hyek"
                },
                {
                    "vulnerability": "VCID-ks1k-tzue-w3ax"
                },
                {
                    "vulnerability": "VCID-mq75-d7z2-yygg"
                },
                {
                    "vulnerability": "VCID-n9v8-hdbp-quca"
                },
                {
                    "vulnerability": "VCID-qkqd-btjr-nkan"
                },
                {
                    "vulnerability": "VCID-qur2-b72r-nff2"
                },
                {
                    "vulnerability": "VCID-rdaa-zvr3-jfdz"
                },
                {
                    "vulnerability": "VCID-ruvk-p5t4-tqbh"
                },
                {
                    "vulnerability": "VCID-rvtm-48ms-hkdq"
                },
                {
                    "vulnerability": "VCID-rwwv-g43z-dkd1"
                },
                {
                    "vulnerability": "VCID-rwzy-thwa-audb"
                },
                {
                    "vulnerability": "VCID-snnx-sf66-vyc2"
                },
                {
                    "vulnerability": "VCID-svq9-dst7-bbac"
                },
                {
                    "vulnerability": "VCID-tpjz-rzwt-m3af"
                },
                {
                    "vulnerability": "VCID-ttnn-f8f2-2ugz"
                },
                {
                    "vulnerability": "VCID-uq27-qyvn-hfar"
                },
                {
                    "vulnerability": "VCID-vdva-mymp-nkes"
                },
                {
                    "vulnerability": "VCID-vf5e-e3z9-r3cu"
                },
                {
                    "vulnerability": "VCID-vwjr-b3tg-6kc6"
                },
                {
                    "vulnerability": "VCID-w6uy-d145-gkf3"
                },
                {
                    "vulnerability": "VCID-xusu-g16c-3uha"
                },
                {
                    "vulnerability": "VCID-y3ba-g4qn-93hg"
                },
                {
                    "vulnerability": "VCID-ynaa-xm41-e3b9"
                },
                {
                    "vulnerability": "VCID-ytw6-k6vk-akc9"
                },
                {
                    "vulnerability": "VCID-z45k-rmyd-dyen"
                },
                {
                    "vulnerability": "VCID-zfr1-8ew7-vkad"
                },
                {
                    "vulnerability": "VCID-zhnq-jrve-q3f4"
                },
                {
                    "vulnerability": "VCID-zsuz-c5yt-ukca"
                },
                {
                    "vulnerability": "VCID-zus9-yf6s-vfb1"
                },
                {
                    "vulnerability": "VCID-zyvy-3tq7-7fcm"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/5235?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@7.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1j3b-sg7h-v3dz"
                },
                {
                    "vulnerability": "VCID-2396-qnkz-vqg5"
                },
                {
                    "vulnerability": "VCID-2ay7-rfpg-gffa"
                },
                {
                    "vulnerability": "VCID-2scg-4ctu-nub4"
                },
                {
                    "vulnerability": "VCID-2yt2-fybp-ruct"
                },
                {
                    "vulnerability": "VCID-369y-mv58-vqbu"
                },
                {
                    "vulnerability": "VCID-3ft6-jaeb-cfd9"
                },
                {
                    "vulnerability": "VCID-3kty-d2c1-bufb"
                },
                {
                    "vulnerability": "VCID-49e2-f39a-d7at"
                },
                {
                    "vulnerability": "VCID-4mmj-yd4b-bqc9"
                },
                {
                    "vulnerability": "VCID-579s-dxd6-f3ek"
                },
                {
                    "vulnerability": "VCID-5d3r-x7a4-zygx"
                },
                {
                    "vulnerability": "VCID-6e56-827h-afb8"
                },
                {
                    "vulnerability": "VCID-6n8m-bprk-1fbk"
                },
                {
                    "vulnerability": "VCID-6tqf-ypf4-a7hg"
                },
                {
                    "vulnerability": "VCID-7duy-zbjz-pkh2"
                },
                {
                    "vulnerability": "VCID-7gsw-zdtu-9yd3"
                },
                {
                    "vulnerability": "VCID-7xsb-2wmy-syd8"
                },
                {
                    "vulnerability": "VCID-8xre-qq1w-a7bb"
                },
                {
                    "vulnerability": "VCID-9kef-ww6g-47df"
                },
                {
                    "vulnerability": "VCID-9yfe-v9b9-8key"
                },
                {
                    "vulnerability": "VCID-9zgk-pw69-4kdb"
                },
                {
                    "vulnerability": "VCID-a156-e8a1-pufm"
                },
                {
                    "vulnerability": "VCID-bb6z-a8sb-rkdb"
                },
                {
                    "vulnerability": "VCID-bhwy-a7r9-4ubc"
                },
                {
                    "vulnerability": "VCID-bkcg-64ws-afcf"
                },
                {
                    "vulnerability": "VCID-c8ja-3gs3-wuaa"
                },
                {
                    "vulnerability": "VCID-cpx4-6msu-ruef"
                },
                {
                    "vulnerability": "VCID-cvz2-m9hs-7ker"
                },
                {
                    "vulnerability": "VCID-czvy-t2cc-4kgt"
                },
                {
                    "vulnerability": "VCID-daym-ybtj-g3h4"
                },
                {
                    "vulnerability": "VCID-dmrz-z2gw-8yfv"
                },
                {
                    "vulnerability": "VCID-dpjc-z3md-pqgu"
                },
                {
                    "vulnerability": "VCID-e8n9-5f72-8ybb"
                },
                {
                    "vulnerability": "VCID-ehm9-u634-tqgb"
                },
                {
                    "vulnerability": "VCID-erf4-k7u3-9ug9"
                },
                {
                    "vulnerability": "VCID-evbs-epz4-ekdy"
                },
                {
                    "vulnerability": "VCID-f5cj-hyb5-6bd1"
                },
                {
                    "vulnerability": "VCID-f8s4-weeq-jqg1"
                },
                {
                    "vulnerability": "VCID-fup1-zz6e-eyh4"
                },
                {
                    "vulnerability": "VCID-fwx8-jbgc-3ua5"
                },
                {
                    "vulnerability": "VCID-g11a-wp5s-2qdh"
                },
                {
                    "vulnerability": "VCID-g8re-u2zv-t7ep"
                },
                {
                    "vulnerability": "VCID-hbvh-qnuc-b3fc"
                },
                {
                    "vulnerability": "VCID-j384-wyej-27g8"
                },
                {
                    "vulnerability": "VCID-j99d-fa2v-zyh8"
                },
                {
                    "vulnerability": "VCID-jc5s-xjv7-6yf8"
                },
                {
                    "vulnerability": "VCID-ks1k-tzue-w3ax"
                },
                {
                    "vulnerability": "VCID-mqyj-2e2e-63ep"
                },
                {
                    "vulnerability": "VCID-n1ww-2xbj-k7dn"
                },
                {
                    "vulnerability": "VCID-n9v8-hdbp-quca"
                },
                {
                    "vulnerability": "VCID-p384-yv4k-nyam"
                },
                {
                    "vulnerability": "VCID-ruvk-p5t4-tqbh"
                },
                {
                    "vulnerability": "VCID-rwwv-g43z-dkd1"
                },
                {
                    "vulnerability": "VCID-rwzy-thwa-audb"
                },
                {
                    "vulnerability": "VCID-snnx-sf66-vyc2"
                },
                {
                    "vulnerability": "VCID-ua1q-91gq-pyaj"
                },
                {
                    "vulnerability": "VCID-ue3g-snbm-b7ah"
                },
                {
                    "vulnerability": "VCID-v6kq-kg7h-p3bq"
                },
                {
                    "vulnerability": "VCID-vajk-ub9q-b7a1"
                },
                {
                    "vulnerability": "VCID-vdva-mymp-nkes"
                },
                {
                    "vulnerability": "VCID-vf5e-e3z9-r3cu"
                },
                {
                    "vulnerability": "VCID-w6uy-d145-gkf3"
                },
                {
                    "vulnerability": "VCID-xqpc-truy-2fhv"
                },
                {
                    "vulnerability": "VCID-xusu-g16c-3uha"
                },
                {
                    "vulnerability": "VCID-y3ba-g4qn-93hg"
                },
                {
                    "vulnerability": "VCID-yfzu-smkm-5qc9"
                },
                {
                    "vulnerability": "VCID-ynaa-xm41-e3b9"
                },
                {
                    "vulnerability": "VCID-zadr-jyrc-p3hk"
                },
                {
                    "vulnerability": "VCID-zd9x-yf4u-eqgf"
                },
                {
                    "vulnerability": "VCID-zpvv-4hjw-g3bt"
                },
                {
                    "vulnerability": "VCID-zsuz-c5yt-ukca"
                },
                {
                    "vulnerability": "VCID-zus9-yf6s-vfb1"
                },
                {
                    "vulnerability": "VCID-zyvy-3tq7-7fcm"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.0"
        }
    ],
    "references": [
        {
            "reference_url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/201112.mbox/%3c4EFB9800.5010106@apache.org%3e",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://mail-archives.apache.org/mod_mbox/tomcat-announce/201112.mbox/%3c4EFB9800.5010106@apache.org%3e"
        },
        {
            "reference_url": "http://marc.info/?l=bugtraq&m=132871655717248&w=2",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://marc.info/?l=bugtraq&m=132871655717248&w=2"
        },
        {
            "reference_url": "http://marc.info/?l=bugtraq&m=133294394108746&w=2",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://marc.info/?l=bugtraq&m=133294394108746&w=2"
        },
        {
            "reference_url": "http://marc.info/?l=bugtraq&m=136485229118404&w=2",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://marc.info/?l=bugtraq&m=136485229118404&w=2"
        },
        {
            "reference_url": "http://rhn.redhat.com/errata/RHSA-2012-0074.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0074.html"
        },
        {
            "reference_url": "http://rhn.redhat.com/errata/RHSA-2012-0075.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0075.html"
        },
        {
            "reference_url": "http://rhn.redhat.com/errata/RHSA-2012-0076.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2012-0076.html"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4858",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.766",
                    "scoring_system": "epss",
                    "scoring_elements": "0.98967",
                    "published_at": "2026-05-30T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2011-4858"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=750521",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=750521"
        },
        {
            "reference_url": "https://github.com/apache/tomcat",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/apache/tomcat"
        },
        {
            "reference_url": "https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/FireFart/HashCollision-DOS-POC/blob/master/HashtablePOC.py"
        },
        {
            "reference_url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18886",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18886"
        },
        {
            "reference_url": "http://tomcat.apache.org/tomcat-7.0-doc/changelog.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://tomcat.apache.org/tomcat-7.0-doc/changelog.html"
        },
        {
            "reference_url": "http://www.debian.org/security/2012/dsa-2401",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.debian.org/security/2012/dsa-2401"
        },
        {
            "reference_url": "http://www.kb.cert.org/vuls/id/903934",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.kb.cert.org/vuls/id/903934"
        },
        {
            "reference_url": "http://www.nruns.com/_downloads/advisory28122011.pdf",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.nruns.com/_downloads/advisory28122011.pdf"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4858",
            "reference_id": "CVE-2011-4858",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-4858"
        },
        {
            "reference_url": "http://www.ocert.org/advisories/ocert-2011-003.html",
            "reference_id": "CVE-2011-4885;OSVDB-78115",
            "reference_type": "exploit",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.ocert.org/advisories/ocert-2011-003.html"
        },
        {
            "reference_url": "https://github.com/advisories/GHSA-wr3m-gw98-mc3j",
            "reference_id": "GHSA-wr3m-gw98-mc3j",
            "reference_type": "",
            "scores": [],
            "url": "https://github.com/advisories/GHSA-wr3m-gw98-mc3j"
        },
        {
            "reference_url": "https://security.gentoo.org/glsa/201206-24",
            "reference_id": "GLSA-201206-24",
            "reference_type": "",
            "scores": [],
            "url": "https://security.gentoo.org/glsa/201206-24"
        },
        {
            "reference_url": "https://usn.ubuntu.com/1359-1/",
            "reference_id": "USN-1359-1",
            "reference_type": "",
            "scores": [],
            "url": "https://usn.ubuntu.com/1359-1/"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 1035,
            "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."
        },
        {
            "cwe_id": 399,
            "name": "Resource Management Errors",
            "description": "Weaknesses in this category are related to improper management of system resources."
        },
        {
            "cwe_id": 937,
            "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."
        },
        {
            "cwe_id": 20,
            "name": "Improper Input Validation",
            "description": "The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly."
        }
    ],
    "exploits": [
        {
            "date_added": null,
            "description": "This module uses a denial-of-service (DoS) condition appearing in a variety of\n          programming languages. This vulnerability occurs when storing multiple values\n          in a hash table and all values have the same hash value. This can cause a web server\n          parsing the POST parameters issued with a request into a hash table to consume\n          hours of CPU with a single HTTP request.\n\n          Currently, only the hash functions for PHP and Java are implemented.\n          This module was tested with PHP + httpd, Tomcat, Glassfish and Geronimo.\n          It also generates a random payload to bypass some IDS signatures.",
            "required_action": null,
            "due_date": null,
            "notes": "Stability:\n  - crash-service-down\nSideEffects: []\nReliability: []\n",
            "known_ransomware_campaign_use": false,
            "source_date_published": "2011-12-28",
            "exploit_type": null,
            "platform": "",
            "source_date_updated": null,
            "data_source": "Metasploit",
            "source_url": "https://github.com/rapid7/metasploit-framework/tree/master/modules/auxiliary/dos/http/hashcollision_dos.rb"
        },
        {
            "date_added": "2006-07-14",
            "description": "MyBulletinBoard (MyBB) 1.1.5 - 'CLIENT-IP' SQL Injection",
            "required_action": null,
            "due_date": null,
            "notes": null,
            "known_ransomware_campaign_use": true,
            "source_date_published": "2006-07-15",
            "exploit_type": "webapps",
            "platform": "php",
            "source_date_updated": "2016-11-09",
            "data_source": "Exploit-DB",
            "source_url": ""
        }
    ],
    "severity_range_score": "4.0 - 6.9",
    "exploitability": "0.5",
    "weighted_severity": "0.7",
    "risk_score": 0.3,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zus9-yf6s-vfb1"
}