Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-x63h-y2jy-pyaz
Summary
Moderate severity vulnerability that affects org.apache.httpcomponents:httpclient
http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors.
Aliases
0
alias CVE-2015-5262
1
alias GHSA-fmj5-wv96-r2ch
Fixed_packages
0
url pkg:deb/debian/commons-httpclient@3.1-12?distro=trixie
purl pkg:deb/debian/commons-httpclient@3.1-12?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/commons-httpclient@3.1-12%3Fdistro=trixie
1
url pkg:deb/debian/commons-httpclient@3.1-12
purl pkg:deb/debian/commons-httpclient@3.1-12
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/commons-httpclient@3.1-12
2
url pkg:deb/debian/commons-httpclient@3.1-16?distro=trixie
purl pkg:deb/debian/commons-httpclient@3.1-16?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/commons-httpclient@3.1-16%3Fdistro=trixie
3
url pkg:deb/debian/httpcomponents-client@4.3.6-1?distro=trixie
purl pkg:deb/debian/httpcomponents-client@4.3.6-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/httpcomponents-client@4.3.6-1%3Fdistro=trixie
4
url pkg:deb/debian/httpcomponents-client@4.5.2-2
purl pkg:deb/debian/httpcomponents-client@4.5.2-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/httpcomponents-client@4.5.2-2
5
url pkg:deb/debian/httpcomponents-client@4.5.13-2?distro=trixie
purl pkg:deb/debian/httpcomponents-client@4.5.13-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/httpcomponents-client@4.5.13-2%3Fdistro=trixie
6
url pkg:deb/debian/httpcomponents-client@4.5.14-1?distro=trixie
purl pkg:deb/debian/httpcomponents-client@4.5.14-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/httpcomponents-client@4.5.14-1%3Fdistro=trixie
7
url pkg:maven/org.apache.httpcomponents/httpclient@4.3.6
purl pkg:maven/org.apache.httpcomponents/httpclient@4.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.3.6
Affected_packages
0
url pkg:deb/debian/commons-httpclient@2.0a1%2B20020904-2
purl pkg:deb/debian/commons-httpclient@2.0a1%2B20020904-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jd44-nhjx-3yfw
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-rp7v-71b5-sqfd
3
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/commons-httpclient@2.0a1%252B20020904-2
1
url pkg:deb/debian/commons-httpclient@3.0.1-0.1
purl pkg:deb/debian/commons-httpclient@3.0.1-0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jd44-nhjx-3yfw
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-rp7v-71b5-sqfd
3
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/commons-httpclient@3.0.1-0.1
2
url pkg:deb/debian/commons-httpclient@3.1-2
purl pkg:deb/debian/commons-httpclient@3.1-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jd44-nhjx-3yfw
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-rp7v-71b5-sqfd
3
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/commons-httpclient@3.1-2
3
url pkg:deb/debian/commons-httpclient@3.1-9
purl pkg:deb/debian/commons-httpclient@3.1-9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jd44-nhjx-3yfw
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-rp7v-71b5-sqfd
3
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/commons-httpclient@3.1-9
4
url pkg:deb/debian/commons-httpclient@3.1-9%2Bdeb6u2
purl pkg:deb/debian/commons-httpclient@3.1-9%2Bdeb6u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-jd44-nhjx-3yfw
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-rp7v-71b5-sqfd
3
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/commons-httpclient@3.1-9%252Bdeb6u2
5
url pkg:deb/debian/commons-httpclient@3.1-10.2%2Bdeb7u2
purl pkg:deb/debian/commons-httpclient@3.1-10.2%2Bdeb7u2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-mkuu-7x6y-7kc6
1
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/commons-httpclient@3.1-10.2%252Bdeb7u2
6
url pkg:deb/debian/commons-httpclient@3.1-11
purl pkg:deb/debian/commons-httpclient@3.1-11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/commons-httpclient@3.1-11
7
url pkg:deb/debian/commons-httpclient@3.1-11%2Bdeb8u1
purl pkg:deb/debian/commons-httpclient@3.1-11%2Bdeb8u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/commons-httpclient@3.1-11%252Bdeb8u1
8
url pkg:deb/debian/httpcomponents-client@4.0.1-1squeeze1
purl pkg:deb/debian/httpcomponents-client@4.0.1-1squeeze1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-318s-st8t-wke2
1
vulnerability VCID-6amm-pfu5-6bf4
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-x63h-y2jy-pyaz
4
vulnerability VCID-yrbr-vnty-ebfr
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/httpcomponents-client@4.0.1-1squeeze1
9
url pkg:deb/debian/httpcomponents-client@4.1.1-2%2Bdeb7u1
purl pkg:deb/debian/httpcomponents-client@4.1.1-2%2Bdeb7u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-x63h-y2jy-pyaz
3
vulnerability VCID-yrbr-vnty-ebfr
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/httpcomponents-client@4.1.1-2%252Bdeb7u1
10
url pkg:deb/debian/httpcomponents-client@4.3.5-2
purl pkg:deb/debian/httpcomponents-client@4.3.5-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/httpcomponents-client@4.3.5-2
11
url pkg:maven/org.apache.httpcomponents/httpclient@4.0-alpha1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.0-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-rp7v-71b5-sqfd
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.0-alpha1
12
url pkg:maven/org.apache.httpcomponents/httpclient@4.0-alpha2
purl pkg:maven/org.apache.httpcomponents/httpclient@4.0-alpha2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-rp7v-71b5-sqfd
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.0-alpha2
13
url pkg:maven/org.apache.httpcomponents/httpclient@4.0-alpha3
purl pkg:maven/org.apache.httpcomponents/httpclient@4.0-alpha3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-rp7v-71b5-sqfd
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.0-alpha3
14
url pkg:maven/org.apache.httpcomponents/httpclient@4.0-alpha4
purl pkg:maven/org.apache.httpcomponents/httpclient@4.0-alpha4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-rp7v-71b5-sqfd
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.0-alpha4
15
url pkg:maven/org.apache.httpcomponents/httpclient@4.0-beta1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.0-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-rp7v-71b5-sqfd
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.0-beta1
16
url pkg:maven/org.apache.httpcomponents/httpclient@4.0-beta2
purl pkg:maven/org.apache.httpcomponents/httpclient@4.0-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-rp7v-71b5-sqfd
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.0-beta2
17
url pkg:maven/org.apache.httpcomponents/httpclient@4.0
purl pkg:maven/org.apache.httpcomponents/httpclient@4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-318s-st8t-wke2
1
vulnerability VCID-6amm-pfu5-6bf4
2
vulnerability VCID-jd44-nhjx-3yfw
3
vulnerability VCID-mkuu-7x6y-7kc6
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.0
18
url pkg:maven/org.apache.httpcomponents/httpclient@4.0.1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-318s-st8t-wke2
1
vulnerability VCID-6amm-pfu5-6bf4
2
vulnerability VCID-jd44-nhjx-3yfw
3
vulnerability VCID-mkuu-7x6y-7kc6
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.0.1
19
url pkg:maven/org.apache.httpcomponents/httpclient@4.0.2
purl pkg:maven/org.apache.httpcomponents/httpclient@4.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-318s-st8t-wke2
1
vulnerability VCID-6amm-pfu5-6bf4
2
vulnerability VCID-jd44-nhjx-3yfw
3
vulnerability VCID-mkuu-7x6y-7kc6
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.0.2
20
url pkg:maven/org.apache.httpcomponents/httpclient@4.0.3
purl pkg:maven/org.apache.httpcomponents/httpclient@4.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-318s-st8t-wke2
1
vulnerability VCID-6amm-pfu5-6bf4
2
vulnerability VCID-jd44-nhjx-3yfw
3
vulnerability VCID-mkuu-7x6y-7kc6
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.0.3
21
url pkg:maven/org.apache.httpcomponents/httpclient@4.1-alpha1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.1-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-318s-st8t-wke2
1
vulnerability VCID-6amm-pfu5-6bf4
2
vulnerability VCID-jd44-nhjx-3yfw
3
vulnerability VCID-mkuu-7x6y-7kc6
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.1-alpha1
22
url pkg:maven/org.apache.httpcomponents/httpclient@4.1-alpha2
purl pkg:maven/org.apache.httpcomponents/httpclient@4.1-alpha2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-318s-st8t-wke2
1
vulnerability VCID-6amm-pfu5-6bf4
2
vulnerability VCID-jd44-nhjx-3yfw
3
vulnerability VCID-mkuu-7x6y-7kc6
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.1-alpha2
23
url pkg:maven/org.apache.httpcomponents/httpclient@4.1-beta1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.1-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-318s-st8t-wke2
1
vulnerability VCID-6amm-pfu5-6bf4
2
vulnerability VCID-jd44-nhjx-3yfw
3
vulnerability VCID-mkuu-7x6y-7kc6
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.1-beta1
24
url pkg:maven/org.apache.httpcomponents/httpclient@4.1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-318s-st8t-wke2
1
vulnerability VCID-6amm-pfu5-6bf4
2
vulnerability VCID-jd44-nhjx-3yfw
3
vulnerability VCID-mkuu-7x6y-7kc6
4
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.1
25
url pkg:maven/org.apache.httpcomponents/httpclient@4.1.1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.1.1
26
url pkg:maven/org.apache.httpcomponents/httpclient@4.1.2
purl pkg:maven/org.apache.httpcomponents/httpclient@4.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.1.2
27
url pkg:maven/org.apache.httpcomponents/httpclient@4.1.3
purl pkg:maven/org.apache.httpcomponents/httpclient@4.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.1.3
28
url pkg:maven/org.apache.httpcomponents/httpclient@4.2-alpha1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.2-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.2-alpha1
29
url pkg:maven/org.apache.httpcomponents/httpclient@4.2-beta1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.2-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.2-beta1
30
url pkg:maven/org.apache.httpcomponents/httpclient@4.2
purl pkg:maven/org.apache.httpcomponents/httpclient@4.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.2
31
url pkg:maven/org.apache.httpcomponents/httpclient@4.2.1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.2.1
32
url pkg:maven/org.apache.httpcomponents/httpclient@4.2.2
purl pkg:maven/org.apache.httpcomponents/httpclient@4.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-jd44-nhjx-3yfw
2
vulnerability VCID-mkuu-7x6y-7kc6
3
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.2.2
33
url pkg:maven/org.apache.httpcomponents/httpclient@4.2.3
purl pkg:maven/org.apache.httpcomponents/httpclient@4.2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.2.3
34
url pkg:maven/org.apache.httpcomponents/httpclient@4.2.4
purl pkg:maven/org.apache.httpcomponents/httpclient@4.2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.2.4
35
url pkg:maven/org.apache.httpcomponents/httpclient@4.2.5
purl pkg:maven/org.apache.httpcomponents/httpclient@4.2.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.2.5
36
url pkg:maven/org.apache.httpcomponents/httpclient@4.2.6
purl pkg:maven/org.apache.httpcomponents/httpclient@4.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.2.6
37
url pkg:maven/org.apache.httpcomponents/httpclient@4.3-alpha1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.3-alpha1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.3-alpha1
38
url pkg:maven/org.apache.httpcomponents/httpclient@4.3-beta1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.3-beta1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.3-beta1
39
url pkg:maven/org.apache.httpcomponents/httpclient@4.3-beta2
purl pkg:maven/org.apache.httpcomponents/httpclient@4.3-beta2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.3-beta2
40
url pkg:maven/org.apache.httpcomponents/httpclient@4.3
purl pkg:maven/org.apache.httpcomponents/httpclient@4.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-x63h-y2jy-pyaz
3
vulnerability VCID-yrbr-vnty-ebfr
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.3
41
url pkg:maven/org.apache.httpcomponents/httpclient@4.3.1
purl pkg:maven/org.apache.httpcomponents/httpclient@4.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.3.1
42
url pkg:maven/org.apache.httpcomponents/httpclient@4.3.2
purl pkg:maven/org.apache.httpcomponents/httpclient@4.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.3.2
43
url pkg:maven/org.apache.httpcomponents/httpclient@4.3.3
purl pkg:maven/org.apache.httpcomponents/httpclient@4.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.3.3
44
url pkg:maven/org.apache.httpcomponents/httpclient@4.3.4
purl pkg:maven/org.apache.httpcomponents/httpclient@4.3.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-mkuu-7x6y-7kc6
2
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.3.4
45
url pkg:maven/org.apache.httpcomponents/httpclient@4.3.5
purl pkg:maven/org.apache.httpcomponents/httpclient@4.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6amm-pfu5-6bf4
1
vulnerability VCID-x63h-y2jy-pyaz
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.httpcomponents/httpclient@4.3.5
References
0
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167962.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167962.html
1
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167999.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-October/167999.html
2
reference_url http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168030.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168030.html
3
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00032.html
4
reference_url http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2020-11/msg00033.html
5
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5262.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-5262.json
6
reference_url https://api.first.org/data/v1/epss?cve=CVE-2015-5262
reference_id
reference_type
scores
0
value 0.01199
scoring_system epss
scoring_elements 0.7924
published_at 2026-06-08T12:55:00Z
1
value 0.01199
scoring_system epss
scoring_elements 0.79226
published_at 2026-06-04T12:55:00Z
2
value 0.01199
scoring_system epss
scoring_elements 0.79253
published_at 2026-06-05T12:55:00Z
3
value 0.01199
scoring_system epss
scoring_elements 0.79259
published_at 2026-06-06T12:55:00Z
4
value 0.01199
scoring_system epss
scoring_elements 0.79251
published_at 2026-06-07T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2015-5262
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1261538
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1261538
8
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5262
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5262
9
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
10
reference_url https://github.com/apache/httpcomponents-client/commit/09027e7286974bf6b61f4106395da2623121db8d
reference_id
reference_type
scores
url https://github.com/apache/httpcomponents-client/commit/09027e7286974bf6b61f4106395da2623121db8d
11
reference_url https://github.com/apache/httpcomponents-client/commit/6705924879810f617a7a21d34f16b6c0d61e8d34
reference_id
reference_type
scores
url https://github.com/apache/httpcomponents-client/commit/6705924879810f617a7a21d34f16b6c0d61e8d34
12
reference_url https://github.com/apache/httpcomponents-client/commit/d954cd287dfcdad8f153e61181e20d253175ca8c
reference_id
reference_type
scores
url https://github.com/apache/httpcomponents-client/commit/d954cd287dfcdad8f153e61181e20d253175ca8c
13
reference_url https://issues.apache.org/jira/browse/HTTPCLIENT-1478
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://issues.apache.org/jira/browse/HTTPCLIENT-1478
14
reference_url https://jenkins.io/security/advisory/2018-02-26
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://jenkins.io/security/advisory/2018-02-26
15
reference_url https://jenkins.io/security/advisory/2018-02-26/
reference_id
reference_type
scores
url https://jenkins.io/security/advisory/2018-02-26/
16
reference_url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
17
reference_url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f%40%3Cdev.drill.apache.org%3E
18
reference_url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442@%3Cdev.drill.apache.org%3E
19
reference_url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b0656d359c7d40ec9f39c8cc61bca66802ef9a2a12ee199f5b0c1442%40%3Cdev.drill.apache.org%3E
20
reference_url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
21
reference_url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc%40%3Cissues.drill.apache.org%3E
22
reference_url http://svn.apache.org/viewvc?view=revision&revision=1626784
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1626784
23
reference_url http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html
24
reference_url http://www.securitytracker.com/id/1033743
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1033743
25
reference_url http://www.ubuntu.com/usn/USN-2769-1
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-2769-1
26
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798650
reference_id 798650
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=798650
27
reference_url https://nvd.nist.gov/vuln/detail/CVE-2015-5262
reference_id CVE-2015-5262
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2015-5262
28
reference_url https://github.com/advisories/GHSA-fmj5-wv96-r2ch
reference_id GHSA-fmj5-wv96-r2ch
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-fmj5-wv96-r2ch
29
reference_url https://usn.ubuntu.com/2769-1/
reference_id USN-2769-1
reference_type
scores
url https://usn.ubuntu.com/2769-1/
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 399
name Resource Management Errors
description Weaknesses in this category are related to improper management of system resources.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 770
name Allocation of Resources Without Limits or Throttling
description The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.
Exploits
Severity_range_score4.0 - 7.5
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-x63h-y2jy-pyaz