Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-b19y-wyyt-4ff9
Summary
Improper Restriction of XML External Entity Reference
Apache Tika does not properly initialize the XML parser or choose handlers, which might allow remote attackers to conduct XML External Entity (XXE) attacks via vectors involving (1) spreadsheets in OOXML files and (2) XMP metadata in PDF and other file formats, a related issue to CVE-2016-2175.
Aliases
0
alias CVE-2016-4434
1
alias GHSA-4xr4-4c65-hj7f
Fixed_packages
0
url pkg:deb/debian/tika@1.18-1?distro=sid
purl pkg:deb/debian/tika@1.18-1?distro=sid
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tika@1.18-1%3Fdistro=sid
1
url pkg:deb/debian/tika@1.20-1
purl pkg:deb/debian/tika@1.20-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-dc2n-xs2k-abbz
2
vulnerability VCID-q319-5s6s-aqab
3
vulnerability VCID-r5jk-9f46-rygg
4
vulnerability VCID-uj1b-pk9r-ryhz
5
vulnerability VCID-yetb-gykm-nyhf
6
vulnerability VCID-yt8m-g5bf-wkf7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tika@1.20-1
2
url pkg:deb/debian/tika@1.22-2?distro=sid
purl pkg:deb/debian/tika@1.22-2?distro=sid
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-q319-5s6s-aqab
1
vulnerability VCID-yetb-gykm-nyhf
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tika@1.22-2%3Fdistro=sid
3
url pkg:maven/org.apache.tika/tika-bundle@1.13
purl pkg:maven/org.apache.tika/tika-bundle@1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-42ad-sh45-7fev
1
vulnerability VCID-8qc9-3mxe-8ydp
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-bundle@1.13
4
url pkg:maven/org.apache.tika/tika-core@1.13
purl pkg:maven/org.apache.tika/tika-core@1.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-7d9k-ekje-fbe1
4
vulnerability VCID-7snd-ac5u-bydy
5
vulnerability VCID-8qc9-3mxe-8ydp
6
vulnerability VCID-98bu-vqgb-x7a8
7
vulnerability VCID-c7gc-egj2-2yb9
8
vulnerability VCID-dc2n-xs2k-abbz
9
vulnerability VCID-j6j1-yp44-hqdt
10
vulnerability VCID-jyak-stwf-f3gw
11
vulnerability VCID-q319-5s6s-aqab
12
vulnerability VCID-r5jk-9f46-rygg
13
vulnerability VCID-uj1b-pk9r-ryhz
14
vulnerability VCID-uyg4-mswu-s3f5
15
vulnerability VCID-x3y9-rbfc-47b8
16
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.13
Affected_packages
0
url pkg:deb/debian/tika@1.5-1
purl pkg:deb/debian/tika@1.5-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-7d9k-ekje-fbe1
3
vulnerability VCID-7snd-ac5u-bydy
4
vulnerability VCID-98bu-vqgb-x7a8
5
vulnerability VCID-b19y-wyyt-4ff9
6
vulnerability VCID-dc2n-xs2k-abbz
7
vulnerability VCID-j6j1-yp44-hqdt
8
vulnerability VCID-jyak-stwf-f3gw
9
vulnerability VCID-q319-5s6s-aqab
10
vulnerability VCID-r5jk-9f46-rygg
11
vulnerability VCID-uj1b-pk9r-ryhz
12
vulnerability VCID-uyg4-mswu-s3f5
13
vulnerability VCID-x3y9-rbfc-47b8
14
vulnerability VCID-yetb-gykm-nyhf
15
vulnerability VCID-yt8m-g5bf-wkf7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tika@1.5-1
1
url pkg:maven/org.apache.tika/tika-bundle@1.12
purl pkg:maven/org.apache.tika/tika-bundle@1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-42ad-sh45-7fev
1
vulnerability VCID-8qc9-3mxe-8ydp
2
vulnerability VCID-b19y-wyyt-4ff9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-bundle@1.12
2
url pkg:maven/org.apache.tika/tika-core@0.4
purl pkg:maven/org.apache.tika/tika-core@0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-42ad-sh45-7fev
1
vulnerability VCID-7d9k-ekje-fbe1
2
vulnerability VCID-7snd-ac5u-bydy
3
vulnerability VCID-8qc9-3mxe-8ydp
4
vulnerability VCID-98bu-vqgb-x7a8
5
vulnerability VCID-b19y-wyyt-4ff9
6
vulnerability VCID-c7gc-egj2-2yb9
7
vulnerability VCID-x3y9-rbfc-47b8
8
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@0.4
3
url pkg:maven/org.apache.tika/tika-core@0.5
purl pkg:maven/org.apache.tika/tika-core@0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-42ad-sh45-7fev
1
vulnerability VCID-7d9k-ekje-fbe1
2
vulnerability VCID-7snd-ac5u-bydy
3
vulnerability VCID-8qc9-3mxe-8ydp
4
vulnerability VCID-98bu-vqgb-x7a8
5
vulnerability VCID-b19y-wyyt-4ff9
6
vulnerability VCID-c7gc-egj2-2yb9
7
vulnerability VCID-x3y9-rbfc-47b8
8
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@0.5
4
url pkg:maven/org.apache.tika/tika-core@0.6
purl pkg:maven/org.apache.tika/tika-core@0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-42ad-sh45-7fev
1
vulnerability VCID-7d9k-ekje-fbe1
2
vulnerability VCID-7snd-ac5u-bydy
3
vulnerability VCID-8qc9-3mxe-8ydp
4
vulnerability VCID-98bu-vqgb-x7a8
5
vulnerability VCID-b19y-wyyt-4ff9
6
vulnerability VCID-c7gc-egj2-2yb9
7
vulnerability VCID-x3y9-rbfc-47b8
8
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@0.6
5
url pkg:maven/org.apache.tika/tika-core@0.7
purl pkg:maven/org.apache.tika/tika-core@0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-42ad-sh45-7fev
1
vulnerability VCID-7d9k-ekje-fbe1
2
vulnerability VCID-7snd-ac5u-bydy
3
vulnerability VCID-8qc9-3mxe-8ydp
4
vulnerability VCID-98bu-vqgb-x7a8
5
vulnerability VCID-b19y-wyyt-4ff9
6
vulnerability VCID-c7gc-egj2-2yb9
7
vulnerability VCID-x3y9-rbfc-47b8
8
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@0.7
6
url pkg:maven/org.apache.tika/tika-core@0.8
purl pkg:maven/org.apache.tika/tika-core@0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-42ad-sh45-7fev
1
vulnerability VCID-7d9k-ekje-fbe1
2
vulnerability VCID-7snd-ac5u-bydy
3
vulnerability VCID-8qc9-3mxe-8ydp
4
vulnerability VCID-98bu-vqgb-x7a8
5
vulnerability VCID-b19y-wyyt-4ff9
6
vulnerability VCID-c7gc-egj2-2yb9
7
vulnerability VCID-x3y9-rbfc-47b8
8
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@0.8
7
url pkg:maven/org.apache.tika/tika-core@0.9
purl pkg:maven/org.apache.tika/tika-core@0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-42ad-sh45-7fev
1
vulnerability VCID-7d9k-ekje-fbe1
2
vulnerability VCID-7snd-ac5u-bydy
3
vulnerability VCID-8qc9-3mxe-8ydp
4
vulnerability VCID-98bu-vqgb-x7a8
5
vulnerability VCID-b19y-wyyt-4ff9
6
vulnerability VCID-c7gc-egj2-2yb9
7
vulnerability VCID-j6j1-yp44-hqdt
8
vulnerability VCID-x3y9-rbfc-47b8
9
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@0.9
8
url pkg:maven/org.apache.tika/tika-core@0.10
purl pkg:maven/org.apache.tika/tika-core@0.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-42ad-sh45-7fev
1
vulnerability VCID-7d9k-ekje-fbe1
2
vulnerability VCID-7snd-ac5u-bydy
3
vulnerability VCID-8qc9-3mxe-8ydp
4
vulnerability VCID-98bu-vqgb-x7a8
5
vulnerability VCID-b19y-wyyt-4ff9
6
vulnerability VCID-c7gc-egj2-2yb9
7
vulnerability VCID-j6j1-yp44-hqdt
8
vulnerability VCID-x3y9-rbfc-47b8
9
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@0.10
9
url pkg:maven/org.apache.tika/tika-core@1.0
purl pkg:maven/org.apache.tika/tika-core@1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-42ad-sh45-7fev
2
vulnerability VCID-7d9k-ekje-fbe1
3
vulnerability VCID-7snd-ac5u-bydy
4
vulnerability VCID-8qc9-3mxe-8ydp
5
vulnerability VCID-98bu-vqgb-x7a8
6
vulnerability VCID-b19y-wyyt-4ff9
7
vulnerability VCID-c7gc-egj2-2yb9
8
vulnerability VCID-j6j1-yp44-hqdt
9
vulnerability VCID-uj1b-pk9r-ryhz
10
vulnerability VCID-x3y9-rbfc-47b8
11
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.0
10
url pkg:maven/org.apache.tika/tika-core@1.1
purl pkg:maven/org.apache.tika/tika-core@1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-42ad-sh45-7fev
2
vulnerability VCID-7d9k-ekje-fbe1
3
vulnerability VCID-7snd-ac5u-bydy
4
vulnerability VCID-8qc9-3mxe-8ydp
5
vulnerability VCID-98bu-vqgb-x7a8
6
vulnerability VCID-b19y-wyyt-4ff9
7
vulnerability VCID-c7gc-egj2-2yb9
8
vulnerability VCID-j6j1-yp44-hqdt
9
vulnerability VCID-uj1b-pk9r-ryhz
10
vulnerability VCID-x3y9-rbfc-47b8
11
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.1
11
url pkg:maven/org.apache.tika/tika-core@1.2
purl pkg:maven/org.apache.tika/tika-core@1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-42ad-sh45-7fev
2
vulnerability VCID-7d9k-ekje-fbe1
3
vulnerability VCID-7snd-ac5u-bydy
4
vulnerability VCID-8qc9-3mxe-8ydp
5
vulnerability VCID-98bu-vqgb-x7a8
6
vulnerability VCID-b19y-wyyt-4ff9
7
vulnerability VCID-c7gc-egj2-2yb9
8
vulnerability VCID-j6j1-yp44-hqdt
9
vulnerability VCID-jyak-stwf-f3gw
10
vulnerability VCID-uj1b-pk9r-ryhz
11
vulnerability VCID-x3y9-rbfc-47b8
12
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.2
12
url pkg:maven/org.apache.tika/tika-core@1.3
purl pkg:maven/org.apache.tika/tika-core@1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-42ad-sh45-7fev
2
vulnerability VCID-7d9k-ekje-fbe1
3
vulnerability VCID-7snd-ac5u-bydy
4
vulnerability VCID-8qc9-3mxe-8ydp
5
vulnerability VCID-98bu-vqgb-x7a8
6
vulnerability VCID-b19y-wyyt-4ff9
7
vulnerability VCID-c7gc-egj2-2yb9
8
vulnerability VCID-j6j1-yp44-hqdt
9
vulnerability VCID-jyak-stwf-f3gw
10
vulnerability VCID-uj1b-pk9r-ryhz
11
vulnerability VCID-x3y9-rbfc-47b8
12
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.3
13
url pkg:maven/org.apache.tika/tika-core@1.4
purl pkg:maven/org.apache.tika/tika-core@1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-42ad-sh45-7fev
2
vulnerability VCID-7d9k-ekje-fbe1
3
vulnerability VCID-7snd-ac5u-bydy
4
vulnerability VCID-8qc9-3mxe-8ydp
5
vulnerability VCID-98bu-vqgb-x7a8
6
vulnerability VCID-b19y-wyyt-4ff9
7
vulnerability VCID-c7gc-egj2-2yb9
8
vulnerability VCID-j6j1-yp44-hqdt
9
vulnerability VCID-jyak-stwf-f3gw
10
vulnerability VCID-uj1b-pk9r-ryhz
11
vulnerability VCID-x3y9-rbfc-47b8
12
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.4
14
url pkg:maven/org.apache.tika/tika-core@1.5
purl pkg:maven/org.apache.tika/tika-core@1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-42ad-sh45-7fev
2
vulnerability VCID-7d9k-ekje-fbe1
3
vulnerability VCID-7snd-ac5u-bydy
4
vulnerability VCID-8qc9-3mxe-8ydp
5
vulnerability VCID-98bu-vqgb-x7a8
6
vulnerability VCID-b19y-wyyt-4ff9
7
vulnerability VCID-c7gc-egj2-2yb9
8
vulnerability VCID-j6j1-yp44-hqdt
9
vulnerability VCID-jyak-stwf-f3gw
10
vulnerability VCID-uj1b-pk9r-ryhz
11
vulnerability VCID-x3y9-rbfc-47b8
12
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.5
15
url pkg:maven/org.apache.tika/tika-core@1.6
purl pkg:maven/org.apache.tika/tika-core@1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-42ad-sh45-7fev
2
vulnerability VCID-7d9k-ekje-fbe1
3
vulnerability VCID-7snd-ac5u-bydy
4
vulnerability VCID-8qc9-3mxe-8ydp
5
vulnerability VCID-98bu-vqgb-x7a8
6
vulnerability VCID-b19y-wyyt-4ff9
7
vulnerability VCID-c7gc-egj2-2yb9
8
vulnerability VCID-j6j1-yp44-hqdt
9
vulnerability VCID-jyak-stwf-f3gw
10
vulnerability VCID-uj1b-pk9r-ryhz
11
vulnerability VCID-x3y9-rbfc-47b8
12
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.6
16
url pkg:maven/org.apache.tika/tika-core@1.7
purl pkg:maven/org.apache.tika/tika-core@1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-42ad-sh45-7fev
2
vulnerability VCID-7d9k-ekje-fbe1
3
vulnerability VCID-7snd-ac5u-bydy
4
vulnerability VCID-8qc9-3mxe-8ydp
5
vulnerability VCID-98bu-vqgb-x7a8
6
vulnerability VCID-b19y-wyyt-4ff9
7
vulnerability VCID-c7gc-egj2-2yb9
8
vulnerability VCID-dc2n-xs2k-abbz
9
vulnerability VCID-j6j1-yp44-hqdt
10
vulnerability VCID-jyak-stwf-f3gw
11
vulnerability VCID-r5jk-9f46-rygg
12
vulnerability VCID-uj1b-pk9r-ryhz
13
vulnerability VCID-uyg4-mswu-s3f5
14
vulnerability VCID-x3y9-rbfc-47b8
15
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.7
17
url pkg:maven/org.apache.tika/tika-core@1.8
purl pkg:maven/org.apache.tika/tika-core@1.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-7d9k-ekje-fbe1
4
vulnerability VCID-7snd-ac5u-bydy
5
vulnerability VCID-8qc9-3mxe-8ydp
6
vulnerability VCID-98bu-vqgb-x7a8
7
vulnerability VCID-b19y-wyyt-4ff9
8
vulnerability VCID-c7gc-egj2-2yb9
9
vulnerability VCID-dc2n-xs2k-abbz
10
vulnerability VCID-j6j1-yp44-hqdt
11
vulnerability VCID-jyak-stwf-f3gw
12
vulnerability VCID-r5jk-9f46-rygg
13
vulnerability VCID-uj1b-pk9r-ryhz
14
vulnerability VCID-uyg4-mswu-s3f5
15
vulnerability VCID-x3y9-rbfc-47b8
16
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.8
18
url pkg:maven/org.apache.tika/tika-core@1.9
purl pkg:maven/org.apache.tika/tika-core@1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-7d9k-ekje-fbe1
4
vulnerability VCID-7snd-ac5u-bydy
5
vulnerability VCID-8qc9-3mxe-8ydp
6
vulnerability VCID-98bu-vqgb-x7a8
7
vulnerability VCID-b19y-wyyt-4ff9
8
vulnerability VCID-c7gc-egj2-2yb9
9
vulnerability VCID-dc2n-xs2k-abbz
10
vulnerability VCID-j6j1-yp44-hqdt
11
vulnerability VCID-jyak-stwf-f3gw
12
vulnerability VCID-r5jk-9f46-rygg
13
vulnerability VCID-uj1b-pk9r-ryhz
14
vulnerability VCID-uyg4-mswu-s3f5
15
vulnerability VCID-x3y9-rbfc-47b8
16
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.9
19
url pkg:maven/org.apache.tika/tika-core@1.10
purl pkg:maven/org.apache.tika/tika-core@1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-7d9k-ekje-fbe1
4
vulnerability VCID-7snd-ac5u-bydy
5
vulnerability VCID-8qc9-3mxe-8ydp
6
vulnerability VCID-98bu-vqgb-x7a8
7
vulnerability VCID-b19y-wyyt-4ff9
8
vulnerability VCID-c7gc-egj2-2yb9
9
vulnerability VCID-dc2n-xs2k-abbz
10
vulnerability VCID-j6j1-yp44-hqdt
11
vulnerability VCID-jyak-stwf-f3gw
12
vulnerability VCID-r5jk-9f46-rygg
13
vulnerability VCID-uj1b-pk9r-ryhz
14
vulnerability VCID-uyg4-mswu-s3f5
15
vulnerability VCID-x3y9-rbfc-47b8
16
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.10
20
url pkg:maven/org.apache.tika/tika-core@1.11
purl pkg:maven/org.apache.tika/tika-core@1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-7d9k-ekje-fbe1
4
vulnerability VCID-7snd-ac5u-bydy
5
vulnerability VCID-8qc9-3mxe-8ydp
6
vulnerability VCID-98bu-vqgb-x7a8
7
vulnerability VCID-b19y-wyyt-4ff9
8
vulnerability VCID-c7gc-egj2-2yb9
9
vulnerability VCID-dc2n-xs2k-abbz
10
vulnerability VCID-j6j1-yp44-hqdt
11
vulnerability VCID-jyak-stwf-f3gw
12
vulnerability VCID-r5jk-9f46-rygg
13
vulnerability VCID-uj1b-pk9r-ryhz
14
vulnerability VCID-uyg4-mswu-s3f5
15
vulnerability VCID-x3y9-rbfc-47b8
16
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.11
21
url pkg:maven/org.apache.tika/tika-core@1.12
purl pkg:maven/org.apache.tika/tika-core@1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2yb7-v3m7-3ffz
1
vulnerability VCID-2yxn-wffn-x7gr
2
vulnerability VCID-42ad-sh45-7fev
3
vulnerability VCID-7d9k-ekje-fbe1
4
vulnerability VCID-7snd-ac5u-bydy
5
vulnerability VCID-8qc9-3mxe-8ydp
6
vulnerability VCID-98bu-vqgb-x7a8
7
vulnerability VCID-b19y-wyyt-4ff9
8
vulnerability VCID-c7gc-egj2-2yb9
9
vulnerability VCID-dc2n-xs2k-abbz
10
vulnerability VCID-j6j1-yp44-hqdt
11
vulnerability VCID-jyak-stwf-f3gw
12
vulnerability VCID-r5jk-9f46-rygg
13
vulnerability VCID-uj1b-pk9r-ryhz
14
vulnerability VCID-uyg4-mswu-s3f5
15
vulnerability VCID-x3y9-rbfc-47b8
16
vulnerability VCID-zj8z-ja31-mkcr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tika/tika-core@1.12
References
0
reference_url http://rhn.redhat.com/errata/RHSA-2017-0248.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2017-0248.html
1
reference_url http://rhn.redhat.com/errata/RHSA-2017-0249.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2017-0249.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2017-0272.html
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2017-0272.html
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4434.json
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-4434.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-4434
reference_id
reference_type
scores
0
value 0.00415
scoring_system epss
scoring_elements 0.61979
published_at 2026-06-04T12:55:00Z
1
value 0.00415
scoring_system epss
scoring_elements 0.62027
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-4434
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4434
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-4434
6
reference_url https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/708d94141126eac03011144a971a6411fcac16d9c248d1d535a39451@%3Csolr-user.lucene.apache.org%3E
7
reference_url https://mail-archives.apache.org/mod_mbox/tika-dev/201605.mbox/%3C1705136517.1175366.1464278135251.JavaMail.yahoo%40mail.yahoo.com%3E
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://mail-archives.apache.org/mod_mbox/tika-dev/201605.mbox/%3C1705136517.1175366.1464278135251.JavaMail.yahoo%40mail.yahoo.com%3E
8
reference_url http://www.securityfocus.com/archive/1/538500/100/0/threaded
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/archive/1/538500/100/0/threaded
9
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1340386
reference_id 1340386
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1340386
10
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825501
reference_id 825501
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=825501
11
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-4434
reference_id CVE-2016-4434
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-4434
12
reference_url https://github.com/advisories/GHSA-4xr4-4c65-hj7f
reference_id GHSA-4xr4-4c65-hj7f
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-4xr4-4c65-hj7f
13
reference_url https://access.redhat.com/errata/RHSA-2017:0248
reference_id RHSA-2017:0248
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0248
14
reference_url https://access.redhat.com/errata/RHSA-2017:0249
reference_id RHSA-2017:0249
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0249
15
reference_url https://access.redhat.com/errata/RHSA-2017:0272
reference_id RHSA-2017:0272
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:0272
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 611
name Improper Restriction of XML External Entity Reference
description The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score5.4 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-b19y-wyyt-4ff9