Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-d957-s2sx-hbbe
Summaryjersey: XXE via parameter entities not disabled by the jersey SAX parser
Aliases
0
alias CVE-2014-3643
1
alias GHSA-5m48-vr54-vmh3
Fixed_packages
0
url pkg:maven/com.sun.jersey/jersey-core@1.13
purl pkg:maven/com.sun.jersey/jersey-core@1.13
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.13
Affected_packages
0
url pkg:maven/com.sun.jersey/jersey-core@1.1.5.2
purl pkg:maven/com.sun.jersey/jersey-core@1.1.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.1.5.2
1
url pkg:maven/com.sun.jersey/jersey-core@1.9
purl pkg:maven/com.sun.jersey/jersey-core@1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.9
2
url pkg:maven/com.sun.jersey/jersey-core@1.9-ea06
purl pkg:maven/com.sun.jersey/jersey-core@1.9-ea06
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.9-ea06
3
url pkg:maven/com.sun.jersey/jersey-core@1.9-ea07
purl pkg:maven/com.sun.jersey/jersey-core@1.9-ea07
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.9-ea07
4
url pkg:maven/com.sun.jersey/jersey-core@1.9.1
purl pkg:maven/com.sun.jersey/jersey-core@1.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.9.1
5
url pkg:maven/com.sun.jersey/jersey-core@1.10-b01
purl pkg:maven/com.sun.jersey/jersey-core@1.10-b01
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.10-b01
6
url pkg:maven/com.sun.jersey/jersey-core@1.10-b02
purl pkg:maven/com.sun.jersey/jersey-core@1.10-b02
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.10-b02
7
url pkg:maven/com.sun.jersey/jersey-core@1.10-b03
purl pkg:maven/com.sun.jersey/jersey-core@1.10-b03
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.10-b03
8
url pkg:maven/com.sun.jersey/jersey-core@1.10-b04
purl pkg:maven/com.sun.jersey/jersey-core@1.10-b04
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.10-b04
9
url pkg:maven/com.sun.jersey/jersey-core@1.10-b05
purl pkg:maven/com.sun.jersey/jersey-core@1.10-b05
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.10-b05
10
url pkg:maven/com.sun.jersey/jersey-core@1.10
purl pkg:maven/com.sun.jersey/jersey-core@1.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.10
11
url pkg:maven/com.sun.jersey/jersey-core@1.11-b01
purl pkg:maven/com.sun.jersey/jersey-core@1.11-b01
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.11-b01
12
url pkg:maven/com.sun.jersey/jersey-core@1.11-b02
purl pkg:maven/com.sun.jersey/jersey-core@1.11-b02
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.11-b02
13
url pkg:maven/com.sun.jersey/jersey-core@1.11-b03
purl pkg:maven/com.sun.jersey/jersey-core@1.11-b03
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.11-b03
14
url pkg:maven/com.sun.jersey/jersey-core@1.11-b04
purl pkg:maven/com.sun.jersey/jersey-core@1.11-b04
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.11-b04
15
url pkg:maven/com.sun.jersey/jersey-core@1.11
purl pkg:maven/com.sun.jersey/jersey-core@1.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.11
16
url pkg:maven/com.sun.jersey/jersey-core@1.11.1
purl pkg:maven/com.sun.jersey/jersey-core@1.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.11.1
17
url pkg:maven/com.sun.jersey/jersey-core@1.11.2
purl pkg:maven/com.sun.jersey/jersey-core@1.11.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.11.2
18
url pkg:maven/com.sun.jersey/jersey-core@1.12-b01
purl pkg:maven/com.sun.jersey/jersey-core@1.12-b01
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.12-b01
19
url pkg:maven/com.sun.jersey/jersey-core@1.12
purl pkg:maven/com.sun.jersey/jersey-core@1.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.12
20
url pkg:maven/com.sun.jersey/jersey-core@1.13-b01
purl pkg:maven/com.sun.jersey/jersey-core@1.13-b01
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-d957-s2sx-hbbe
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.sun.jersey/jersey-core@1.13-b01
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3643.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-3643.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-3643
reference_id
reference_type
scores
0
value 0.00258
scoring_system epss
scoring_elements 0.49417
published_at 2026-06-08T12:55:00Z
1
value 0.00258
scoring_system epss
scoring_elements 0.49447
published_at 2026-06-07T12:55:00Z
2
value 0.00258
scoring_system epss
scoring_elements 0.49453
published_at 2026-06-05T12:55:00Z
3
value 0.00258
scoring_system epss
scoring_elements 0.49429
published_at 2026-06-09T12:55:00Z
4
value 0.00258
scoring_system epss
scoring_elements 0.49464
published_at 2026-06-06T12:55:00Z
5
value 0.00258
scoring_system epss
scoring_elements 0.49392
published_at 2026-06-04T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-3643
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3643
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-3643
3
reference_url https://github.com/javaee/jersey-1.x
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/javaee/jersey-1.x
4
reference_url https://github.com/javaee/jersey-1.x/commit/49f1e5a6ac608ccb51939205e4739f328f2223e6
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/javaee/jersey-1.x/commit/49f1e5a6ac608ccb51939205e4739f328f2223e6
5
reference_url https://www.oracle.com/security-alerts/cpujul2022.html
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.oracle.com/security-alerts/cpujul2022.html
6
reference_url https://www.sourceclear.com/vulnerability-database/security/xml-external-entity-xxe/java/sid-22175
reference_id
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.sourceclear.com/vulnerability-database/security/xml-external-entity-xxe/java/sid-22175
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1143758
reference_id 1143758
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1143758
8
reference_url https://access.redhat.com/security/cve/cve-2014-3643
reference_id CVE-2014-3643
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/security/cve/cve-2014-3643
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-3643
reference_id CVE-2014-3643
reference_type
scores
0
value 8.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-3643
10
reference_url https://github.com/advisories/GHSA-5m48-vr54-vmh3
reference_id GHSA-5m48-vr54-vmh3
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5m48-vr54-vmh3
Weaknesses
0
cwe_id 611
name Improper Restriction of XML External Entity Reference
description The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-d957-s2sx-hbbe