Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-paqj-ye46-8bdb
Summary
Apache Tomcat vulnerable to Unprotected Transport of Credentials
When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookies created by Apache Tomcat 11.0.0-M1 to 11.0.0.-M2, 10.1.0-M1 to 10.1.5, 9.0.0-M1 to 9.0.71 and 8.5.0 to 8.5.85 did not include the secure attribute. This could result in the user agent transmitting the session cookie over an insecure channel.
Aliases
0
alias CVE-2023-28708
1
alias GHSA-2c9m-w27f-53rm
Fixed_packages
0
url pkg:apache/tomcat@8.5.86
purl pkg:apache/tomcat@8.5.86
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@8.5.86
1
url pkg:apache/tomcat@9.0.72
purl pkg:apache/tomcat@9.0.72
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.72
2
url pkg:apache/tomcat@10.1.6
purl pkg:apache/tomcat@10.1.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.6
3
url pkg:apache/tomcat@11.0.0-M3
purl pkg:apache/tomcat@11.0.0-M3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.0-M3
4
url pkg:deb/debian/tomcat10@10.1.6-1?distro=trixie
purl pkg:deb/debian/tomcat10@10.1.6-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.6-1%3Fdistro=trixie
5
url pkg:deb/debian/tomcat10@10.1.52-1~deb12u1?distro=trixie
purl pkg:deb/debian/tomcat10@10.1.52-1~deb12u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qsf-yxnk-fqhy
1
vulnerability VCID-2s6w-bbfa-afb8
2
vulnerability VCID-2ym4-frda-dbbe
3
vulnerability VCID-84a8-y1hg-vuep
4
vulnerability VCID-8qk1-ufax-eugz
5
vulnerability VCID-cugj-j48z-jub5
6
vulnerability VCID-gw94-yyjd-17er
7
vulnerability VCID-j493-xan3-myfm
8
vulnerability VCID-j7w8-ean1-33b8
9
vulnerability VCID-nqgv-hbwa-d3en
10
vulnerability VCID-nsp7-e9m6-juhv
11
vulnerability VCID-qjqr-axrq-xkcf
12
vulnerability VCID-ud36-sb2d-8ych
13
vulnerability VCID-w9nk-wv5n-2kg9
14
vulnerability VCID-xtdv-ygus-xuds
15
vulnerability VCID-z8df-aq4y-ubet
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.52-1~deb12u1%3Fdistro=trixie
6
url pkg:deb/debian/tomcat10@10.1.52-1~deb13u1?distro=trixie
purl pkg:deb/debian/tomcat10@10.1.52-1~deb13u1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qsf-yxnk-fqhy
1
vulnerability VCID-2s6w-bbfa-afb8
2
vulnerability VCID-2ym4-frda-dbbe
3
vulnerability VCID-84a8-y1hg-vuep
4
vulnerability VCID-8qk1-ufax-eugz
5
vulnerability VCID-cugj-j48z-jub5
6
vulnerability VCID-gw94-yyjd-17er
7
vulnerability VCID-j493-xan3-myfm
8
vulnerability VCID-j7w8-ean1-33b8
9
vulnerability VCID-nqgv-hbwa-d3en
10
vulnerability VCID-nsp7-e9m6-juhv
11
vulnerability VCID-qjqr-axrq-xkcf
12
vulnerability VCID-ud36-sb2d-8ych
13
vulnerability VCID-w9nk-wv5n-2kg9
14
vulnerability VCID-xtdv-ygus-xuds
15
vulnerability VCID-z8df-aq4y-ubet
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.52-1~deb13u1%3Fdistro=trixie
7
url pkg:deb/debian/tomcat10@10.1.54-1?distro=trixie
purl pkg:deb/debian/tomcat10@10.1.54-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2ym4-frda-dbbe
1
vulnerability VCID-84a8-y1hg-vuep
2
vulnerability VCID-j7w8-ean1-33b8
3
vulnerability VCID-qjqr-axrq-xkcf
4
vulnerability VCID-ud36-sb2d-8ych
5
vulnerability VCID-w9nk-wv5n-2kg9
6
vulnerability VCID-xtdv-ygus-xuds
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.54-1%3Fdistro=trixie
8
url pkg:deb/debian/tomcat10@10.1.55-1?distro=trixie
purl pkg:deb/debian/tomcat10@10.1.55-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat10@10.1.55-1%3Fdistro=trixie
9
url pkg:deb/debian/tomcat9@9.0.43-2~deb11u6?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.43-2~deb11u6?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.43-2~deb11u6%3Fdistro=trixie
10
url pkg:deb/debian/tomcat9@9.0.43-2~deb11u10?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.43-2~deb11u10?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.43-2~deb11u10%3Fdistro=trixie
11
url pkg:deb/debian/tomcat9@9.0.70-2?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.70-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.70-2%3Fdistro=trixie
12
url pkg:deb/debian/tomcat9@9.0.95-1?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.95-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.95-1%3Fdistro=trixie
13
url pkg:deb/debian/tomcat9@9.0.118-1?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.118-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.118-1%3Fdistro=trixie
14
url pkg:maven/org.apache.tomcat/tomcat@8.5.86
purl pkg:maven/org.apache.tomcat/tomcat@8.5.86
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5udv-rheh-kqfy
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.86
15
url pkg:maven/org.apache.tomcat/tomcat@9.0.72
purl pkg:maven/org.apache.tomcat/tomcat@9.0.72
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.72
16
url pkg:maven/org.apache.tomcat/tomcat@10.1.6
purl pkg:maven/org.apache.tomcat/tomcat@10.1.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.6
17
url pkg:maven/org.apache.tomcat/tomcat@11.0.0-M3
purl pkg:maven/org.apache.tomcat/tomcat@11.0.0-M3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.0-M3
18
url pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.86
purl pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.86
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@8.5.86
19
url pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.72
purl pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.72
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@9.0.72
20
url pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.6
purl pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@10.1.6
21
url pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.0-M3
purl pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.0-M3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-catalina@11.0.0-M3
22
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.86
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.86
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.86
23
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.72
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.72
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.72
24
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.6
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.6
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.6
25
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.0
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.0
Affected_packages
0
url pkg:apache/tomcat@8.5.0
purl pkg:apache/tomcat@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kgu-zupu-tydw
1
vulnerability VCID-2mj1-8nz1-43cd
2
vulnerability VCID-2qhv-x4j1-jqa7
3
vulnerability VCID-3nsr-9s9y-ckft
4
vulnerability VCID-3tme-zh53-7ubx
5
vulnerability VCID-4nx6-t8vd-bqcu
6
vulnerability VCID-4q7w-adqc-kydu
7
vulnerability VCID-59dd-qzpt-aucm
8
vulnerability VCID-5udv-rheh-kqfy
9
vulnerability VCID-6umz-z8db-kqcy
10
vulnerability VCID-7fh9-36qs-jfg5
11
vulnerability VCID-9e2b-7qtg-tbaj
12
vulnerability VCID-9gz4-7etq-pyba
13
vulnerability VCID-axzz-cadr-b7fv
14
vulnerability VCID-ct4z-hxx3-53bw
15
vulnerability VCID-dast-z2hv-2yfe
16
vulnerability VCID-dbu6-fhrs-aubn
17
vulnerability VCID-dk58-p9py-rka9
18
vulnerability VCID-em96-kd99-3kf8
19
vulnerability VCID-essq-6syu-6ygm
20
vulnerability VCID-g3vd-74yh-s7bn
21
vulnerability VCID-gmjm-6ck2-skgu
22
vulnerability VCID-h6f2-qgnu-bqf4
23
vulnerability VCID-hqzu-shyu-j3hp
24
vulnerability VCID-j66a-6et3-mfha
25
vulnerability VCID-jbh7-zmq6-bfgs
26
vulnerability VCID-jhm9-cqu3-7yce
27
vulnerability VCID-jsyt-cmxf-gbh3
28
vulnerability VCID-jzta-navk-87bn
29
vulnerability VCID-m1k8-9pwc-1qb9
30
vulnerability VCID-m7ja-6efp-tyh1
31
vulnerability VCID-nxb3-55eu-auhp
32
vulnerability VCID-paqj-ye46-8bdb
33
vulnerability VCID-q7g1-m4e7-pya4
34
vulnerability VCID-qth9-7326-hffp
35
vulnerability VCID-qthw-u9bp-zkdp
36
vulnerability VCID-rbvh-4npk-nub9
37
vulnerability VCID-rhtz-91ke-kfbj
38
vulnerability VCID-rk89-9dw5-w3gg
39
vulnerability VCID-rtmv-qetu-yqfa
40
vulnerability VCID-s37s-p75k-27e6
41
vulnerability VCID-se44-f85s-xyex
42
vulnerability VCID-tcmv-6ftg-fqen
43
vulnerability VCID-u95s-xhwk-vka6
44
vulnerability VCID-urhs-6aus-syb1
45
vulnerability VCID-uuya-uqgv-kyfb
46
vulnerability VCID-vu84-dfwa-z3dg
47
vulnerability VCID-webw-gryb-7ucv
48
vulnerability VCID-wmb3-3j7y-due7
49
vulnerability VCID-wmrh-m1m3-uyav
50
vulnerability VCID-xa95-zsnk-3kg9
51
vulnerability VCID-xns8-63b5-guf2
52
vulnerability VCID-y4a2-mamb-yqg6
53
vulnerability VCID-y9hs-ymcm-3ucx
54
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@8.5.0
1
url pkg:apache/tomcat@8.5.85
purl pkg:apache/tomcat@8.5.85
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kbpn-7esm-77ew
1
vulnerability VCID-paqj-ye46-8bdb
2
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@8.5.85
2
url pkg:apache/tomcat@9.0.0-M1
purl pkg:apache/tomcat@9.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qhv-x4j1-jqa7
1
vulnerability VCID-4q7w-adqc-kydu
2
vulnerability VCID-cxjh-uh21-skh4
3
vulnerability VCID-dbu6-fhrs-aubn
4
vulnerability VCID-h6f2-qgnu-bqf4
5
vulnerability VCID-j66a-6et3-mfha
6
vulnerability VCID-ja5v-v682-ekd1
7
vulnerability VCID-jsyt-cmxf-gbh3
8
vulnerability VCID-m1k8-9pwc-1qb9
9
vulnerability VCID-paqj-ye46-8bdb
10
vulnerability VCID-urhs-6aus-syb1
11
vulnerability VCID-uuya-uqgv-kyfb
12
vulnerability VCID-wmrh-m1m3-uyav
13
vulnerability VCID-y4a2-mamb-yqg6
14
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.0-M1
3
url pkg:apache/tomcat@9.0.71
purl pkg:apache/tomcat@9.0.71
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-paqj-ye46-8bdb
1
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.71
4
url pkg:apache/tomcat@10.1.0-M1
purl pkg:apache/tomcat@10.1.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18rb-u2tu-affk
1
vulnerability VCID-2qhv-x4j1-jqa7
2
vulnerability VCID-2s6w-bbfa-afb8
3
vulnerability VCID-2ym4-frda-dbbe
4
vulnerability VCID-4q7w-adqc-kydu
5
vulnerability VCID-5ebw-zerz-u7bh
6
vulnerability VCID-5ztb-ns6b-fuf9
7
vulnerability VCID-6kdt-2q2t-aqgy
8
vulnerability VCID-71mw-xrnv-9kec
9
vulnerability VCID-84a8-y1hg-vuep
10
vulnerability VCID-98rd-f7ys-y7b9
11
vulnerability VCID-9awt-9zjq-yucn
12
vulnerability VCID-ac8p-uerd-ubfj
13
vulnerability VCID-bxwn-g8gu-kkbn
14
vulnerability VCID-cugj-j48z-jub5
15
vulnerability VCID-cxjh-uh21-skh4
16
vulnerability VCID-d8re-94xd-nycp
17
vulnerability VCID-gqtv-jvn4-eqe5
18
vulnerability VCID-gw94-yyjd-17er
19
vulnerability VCID-h6f2-qgnu-bqf4
20
vulnerability VCID-hf8e-m14m-mbcx
21
vulnerability VCID-hssj-zqwx-9bc9
22
vulnerability VCID-hy8s-ks53-u3aq
23
vulnerability VCID-j66a-6et3-mfha
24
vulnerability VCID-j7w8-ean1-33b8
25
vulnerability VCID-ja5v-v682-ekd1
26
vulnerability VCID-jsyt-cmxf-gbh3
27
vulnerability VCID-kbn3-5swu-cubg
28
vulnerability VCID-kqng-d1f2-myg5
29
vulnerability VCID-m1k8-9pwc-1qb9
30
vulnerability VCID-nqgv-hbwa-d3en
31
vulnerability VCID-paqj-ye46-8bdb
32
vulnerability VCID-pmav-cxu6-1ua9
33
vulnerability VCID-qjqr-axrq-xkcf
34
vulnerability VCID-s5kh-nebr-tba9
35
vulnerability VCID-ud36-sb2d-8ych
36
vulnerability VCID-ujxe-ggfj-k3bh
37
vulnerability VCID-urhs-6aus-syb1
38
vulnerability VCID-uuya-uqgv-kyfb
39
vulnerability VCID-vhbh-3a89-x7cw
40
vulnerability VCID-vvqm-vk3g-kuh8
41
vulnerability VCID-w9nk-wv5n-2kg9
42
vulnerability VCID-wcnj-bna8-7fh7
43
vulnerability VCID-xtdv-ygus-xuds
44
vulnerability VCID-y4a2-mamb-yqg6
45
vulnerability VCID-z4zd-puyg-g3bz
46
vulnerability VCID-zba8-2zc4-9qfh
47
vulnerability VCID-zq8t-zucq-h3c9
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.0-M1
5
url pkg:apache/tomcat@10.1.5
purl pkg:apache/tomcat@10.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-paqj-ye46-8bdb
1
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@10.1.5
6
url pkg:apache/tomcat@11.0.0-M1
purl pkg:apache/tomcat@11.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18rb-u2tu-affk
1
vulnerability VCID-1qsf-yxnk-fqhy
2
vulnerability VCID-2s6w-bbfa-afb8
3
vulnerability VCID-2ym4-frda-dbbe
4
vulnerability VCID-5ebw-zerz-u7bh
5
vulnerability VCID-5ztb-ns6b-fuf9
6
vulnerability VCID-6kdt-2q2t-aqgy
7
vulnerability VCID-71mw-xrnv-9kec
8
vulnerability VCID-84a8-y1hg-vuep
9
vulnerability VCID-8qk1-ufax-eugz
10
vulnerability VCID-ac8p-uerd-ubfj
11
vulnerability VCID-bxwn-g8gu-kkbn
12
vulnerability VCID-cugj-j48z-jub5
13
vulnerability VCID-cxjh-uh21-skh4
14
vulnerability VCID-d8re-94xd-nycp
15
vulnerability VCID-gqtv-jvn4-eqe5
16
vulnerability VCID-gw94-yyjd-17er
17
vulnerability VCID-h1tj-yzq6-93ew
18
vulnerability VCID-h6f2-qgnu-bqf4
19
vulnerability VCID-hf8e-m14m-mbcx
20
vulnerability VCID-hy8s-ks53-u3aq
21
vulnerability VCID-j66a-6et3-mfha
22
vulnerability VCID-j7w8-ean1-33b8
23
vulnerability VCID-ja5v-v682-ekd1
24
vulnerability VCID-jsyt-cmxf-gbh3
25
vulnerability VCID-kbn3-5swu-cubg
26
vulnerability VCID-kqng-d1f2-myg5
27
vulnerability VCID-nqgv-hbwa-d3en
28
vulnerability VCID-paqj-ye46-8bdb
29
vulnerability VCID-pmav-cxu6-1ua9
30
vulnerability VCID-qjqr-axrq-xkcf
31
vulnerability VCID-s5kh-nebr-tba9
32
vulnerability VCID-s93z-rmw7-5bcw
33
vulnerability VCID-ud36-sb2d-8ych
34
vulnerability VCID-ujxe-ggfj-k3bh
35
vulnerability VCID-urhs-6aus-syb1
36
vulnerability VCID-uuya-uqgv-kyfb
37
vulnerability VCID-vhbh-3a89-x7cw
38
vulnerability VCID-w9nk-wv5n-2kg9
39
vulnerability VCID-wcnj-bna8-7fh7
40
vulnerability VCID-xtdv-ygus-xuds
41
vulnerability VCID-y4a2-mamb-yqg6
42
vulnerability VCID-z4zd-puyg-g3bz
43
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.0-M1
7
url pkg:apache/tomcat@11.0.0-M2
purl pkg:apache/tomcat@11.0.0-M2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82xn-mh3g-f7h3
1
vulnerability VCID-paqj-ye46-8bdb
2
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@11.0.0-M2
8
url pkg:maven/org.apache.tomcat/tomcat@8.5.0
purl pkg:maven/org.apache.tomcat/tomcat@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1kgu-zupu-tydw
1
vulnerability VCID-2mj1-8nz1-43cd
2
vulnerability VCID-2qhv-x4j1-jqa7
3
vulnerability VCID-3nsr-9s9y-ckft
4
vulnerability VCID-3tme-zh53-7ubx
5
vulnerability VCID-4nx6-t8vd-bqcu
6
vulnerability VCID-4q7w-adqc-kydu
7
vulnerability VCID-59dd-qzpt-aucm
8
vulnerability VCID-5udv-rheh-kqfy
9
vulnerability VCID-6umz-z8db-kqcy
10
vulnerability VCID-7fh9-36qs-jfg5
11
vulnerability VCID-9e2b-7qtg-tbaj
12
vulnerability VCID-9gz4-7etq-pyba
13
vulnerability VCID-axzz-cadr-b7fv
14
vulnerability VCID-ct4z-hxx3-53bw
15
vulnerability VCID-dast-z2hv-2yfe
16
vulnerability VCID-dbu6-fhrs-aubn
17
vulnerability VCID-dk58-p9py-rka9
18
vulnerability VCID-em96-kd99-3kf8
19
vulnerability VCID-essq-6syu-6ygm
20
vulnerability VCID-g3vd-74yh-s7bn
21
vulnerability VCID-gmjm-6ck2-skgu
22
vulnerability VCID-h6f2-qgnu-bqf4
23
vulnerability VCID-hqzu-shyu-j3hp
24
vulnerability VCID-j66a-6et3-mfha
25
vulnerability VCID-jbh7-zmq6-bfgs
26
vulnerability VCID-jhm9-cqu3-7yce
27
vulnerability VCID-jsyt-cmxf-gbh3
28
vulnerability VCID-jzta-navk-87bn
29
vulnerability VCID-kqng-d1f2-myg5
30
vulnerability VCID-m1k8-9pwc-1qb9
31
vulnerability VCID-m7ja-6efp-tyh1
32
vulnerability VCID-nxb3-55eu-auhp
33
vulnerability VCID-paqj-ye46-8bdb
34
vulnerability VCID-q7g1-m4e7-pya4
35
vulnerability VCID-qth9-7326-hffp
36
vulnerability VCID-qthw-u9bp-zkdp
37
vulnerability VCID-rbvh-4npk-nub9
38
vulnerability VCID-rhtz-91ke-kfbj
39
vulnerability VCID-rk89-9dw5-w3gg
40
vulnerability VCID-rtmv-qetu-yqfa
41
vulnerability VCID-s37s-p75k-27e6
42
vulnerability VCID-se44-f85s-xyex
43
vulnerability VCID-tcmv-6ftg-fqen
44
vulnerability VCID-u95s-xhwk-vka6
45
vulnerability VCID-urhs-6aus-syb1
46
vulnerability VCID-uuya-uqgv-kyfb
47
vulnerability VCID-vu84-dfwa-z3dg
48
vulnerability VCID-webw-gryb-7ucv
49
vulnerability VCID-wmb3-3j7y-due7
50
vulnerability VCID-wmrh-m1m3-uyav
51
vulnerability VCID-xa95-zsnk-3kg9
52
vulnerability VCID-xns8-63b5-guf2
53
vulnerability VCID-y4a2-mamb-yqg6
54
vulnerability VCID-y9hs-ymcm-3ucx
55
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.0
9
url pkg:maven/org.apache.tomcat/tomcat@8.5.85
purl pkg:maven/org.apache.tomcat/tomcat@8.5.85
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5udv-rheh-kqfy
1
vulnerability VCID-kbpn-7esm-77ew
2
vulnerability VCID-paqj-ye46-8bdb
3
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.85
10
url pkg:maven/org.apache.tomcat/tomcat@9.0.0-M1
purl pkg:maven/org.apache.tomcat/tomcat@9.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2qhv-x4j1-jqa7
1
vulnerability VCID-4q7w-adqc-kydu
2
vulnerability VCID-cxjh-uh21-skh4
3
vulnerability VCID-dbu6-fhrs-aubn
4
vulnerability VCID-h6f2-qgnu-bqf4
5
vulnerability VCID-j66a-6et3-mfha
6
vulnerability VCID-ja5v-v682-ekd1
7
vulnerability VCID-jsyt-cmxf-gbh3
8
vulnerability VCID-m1k8-9pwc-1qb9
9
vulnerability VCID-paqj-ye46-8bdb
10
vulnerability VCID-urhs-6aus-syb1
11
vulnerability VCID-uuya-uqgv-kyfb
12
vulnerability VCID-wmrh-m1m3-uyav
13
vulnerability VCID-y4a2-mamb-yqg6
14
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.0-M1
11
url pkg:maven/org.apache.tomcat/tomcat@9.0.71
purl pkg:maven/org.apache.tomcat/tomcat@9.0.71
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-paqj-ye46-8bdb
1
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.71
12
url pkg:maven/org.apache.tomcat/tomcat@10.1.0-M1
purl pkg:maven/org.apache.tomcat/tomcat@10.1.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18rb-u2tu-affk
1
vulnerability VCID-2qhv-x4j1-jqa7
2
vulnerability VCID-2s6w-bbfa-afb8
3
vulnerability VCID-2ym4-frda-dbbe
4
vulnerability VCID-4q7w-adqc-kydu
5
vulnerability VCID-5ebw-zerz-u7bh
6
vulnerability VCID-5ztb-ns6b-fuf9
7
vulnerability VCID-6kdt-2q2t-aqgy
8
vulnerability VCID-71mw-xrnv-9kec
9
vulnerability VCID-84a8-y1hg-vuep
10
vulnerability VCID-98rd-f7ys-y7b9
11
vulnerability VCID-9awt-9zjq-yucn
12
vulnerability VCID-ac8p-uerd-ubfj
13
vulnerability VCID-bxwn-g8gu-kkbn
14
vulnerability VCID-cugj-j48z-jub5
15
vulnerability VCID-cxjh-uh21-skh4
16
vulnerability VCID-d8re-94xd-nycp
17
vulnerability VCID-gqtv-jvn4-eqe5
18
vulnerability VCID-gw94-yyjd-17er
19
vulnerability VCID-h6f2-qgnu-bqf4
20
vulnerability VCID-hf8e-m14m-mbcx
21
vulnerability VCID-hssj-zqwx-9bc9
22
vulnerability VCID-hy8s-ks53-u3aq
23
vulnerability VCID-j66a-6et3-mfha
24
vulnerability VCID-j7w8-ean1-33b8
25
vulnerability VCID-ja5v-v682-ekd1
26
vulnerability VCID-jsyt-cmxf-gbh3
27
vulnerability VCID-kbn3-5swu-cubg
28
vulnerability VCID-kqng-d1f2-myg5
29
vulnerability VCID-m1k8-9pwc-1qb9
30
vulnerability VCID-nqgv-hbwa-d3en
31
vulnerability VCID-paqj-ye46-8bdb
32
vulnerability VCID-pmav-cxu6-1ua9
33
vulnerability VCID-qjqr-axrq-xkcf
34
vulnerability VCID-s5kh-nebr-tba9
35
vulnerability VCID-ud36-sb2d-8ych
36
vulnerability VCID-ujxe-ggfj-k3bh
37
vulnerability VCID-urhs-6aus-syb1
38
vulnerability VCID-uuya-uqgv-kyfb
39
vulnerability VCID-vhbh-3a89-x7cw
40
vulnerability VCID-vvqm-vk3g-kuh8
41
vulnerability VCID-w9nk-wv5n-2kg9
42
vulnerability VCID-wcnj-bna8-7fh7
43
vulnerability VCID-xtdv-ygus-xuds
44
vulnerability VCID-y4a2-mamb-yqg6
45
vulnerability VCID-z4zd-puyg-g3bz
46
vulnerability VCID-zba8-2zc4-9qfh
47
vulnerability VCID-zq8t-zucq-h3c9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.0-M1
13
url pkg:maven/org.apache.tomcat/tomcat@10.1.5
purl pkg:maven/org.apache.tomcat/tomcat@10.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-paqj-ye46-8bdb
1
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@10.1.5
14
url pkg:maven/org.apache.tomcat/tomcat@11.0.0-M1
purl pkg:maven/org.apache.tomcat/tomcat@11.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18rb-u2tu-affk
1
vulnerability VCID-1qsf-yxnk-fqhy
2
vulnerability VCID-2s6w-bbfa-afb8
3
vulnerability VCID-2ym4-frda-dbbe
4
vulnerability VCID-5ebw-zerz-u7bh
5
vulnerability VCID-5ztb-ns6b-fuf9
6
vulnerability VCID-6kdt-2q2t-aqgy
7
vulnerability VCID-71mw-xrnv-9kec
8
vulnerability VCID-84a8-y1hg-vuep
9
vulnerability VCID-8qk1-ufax-eugz
10
vulnerability VCID-ac8p-uerd-ubfj
11
vulnerability VCID-bxwn-g8gu-kkbn
12
vulnerability VCID-cugj-j48z-jub5
13
vulnerability VCID-cxjh-uh21-skh4
14
vulnerability VCID-d8re-94xd-nycp
15
vulnerability VCID-gqtv-jvn4-eqe5
16
vulnerability VCID-gw94-yyjd-17er
17
vulnerability VCID-h1tj-yzq6-93ew
18
vulnerability VCID-h6f2-qgnu-bqf4
19
vulnerability VCID-hf8e-m14m-mbcx
20
vulnerability VCID-hy8s-ks53-u3aq
21
vulnerability VCID-j66a-6et3-mfha
22
vulnerability VCID-j7w8-ean1-33b8
23
vulnerability VCID-ja5v-v682-ekd1
24
vulnerability VCID-jsyt-cmxf-gbh3
25
vulnerability VCID-kbn3-5swu-cubg
26
vulnerability VCID-kqng-d1f2-myg5
27
vulnerability VCID-nqgv-hbwa-d3en
28
vulnerability VCID-paqj-ye46-8bdb
29
vulnerability VCID-pmav-cxu6-1ua9
30
vulnerability VCID-qjqr-axrq-xkcf
31
vulnerability VCID-s5kh-nebr-tba9
32
vulnerability VCID-s93z-rmw7-5bcw
33
vulnerability VCID-ud36-sb2d-8ych
34
vulnerability VCID-ujxe-ggfj-k3bh
35
vulnerability VCID-urhs-6aus-syb1
36
vulnerability VCID-uuya-uqgv-kyfb
37
vulnerability VCID-vhbh-3a89-x7cw
38
vulnerability VCID-w9nk-wv5n-2kg9
39
vulnerability VCID-wcnj-bna8-7fh7
40
vulnerability VCID-xtdv-ygus-xuds
41
vulnerability VCID-y4a2-mamb-yqg6
42
vulnerability VCID-z4zd-puyg-g3bz
43
vulnerability VCID-zba8-2zc4-9qfh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.0-M1
15
url pkg:maven/org.apache.tomcat/tomcat@11.0.0-M2
purl pkg:maven/org.apache.tomcat/tomcat@11.0.0-M2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-82xn-mh3g-f7h3
1
vulnerability VCID-paqj-ye46-8bdb
2
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@11.0.0-M2
16
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.0
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18rb-u2tu-affk
1
vulnerability VCID-1kgu-zupu-tydw
2
vulnerability VCID-3nsr-9s9y-ckft
3
vulnerability VCID-4nx6-t8vd-bqcu
4
vulnerability VCID-9e2b-7qtg-tbaj
5
vulnerability VCID-axzz-cadr-b7fv
6
vulnerability VCID-ct4z-hxx3-53bw
7
vulnerability VCID-dast-z2hv-2yfe
8
vulnerability VCID-dbu6-fhrs-aubn
9
vulnerability VCID-dk58-p9py-rka9
10
vulnerability VCID-essq-6syu-6ygm
11
vulnerability VCID-gmjm-6ck2-skgu
12
vulnerability VCID-j66a-6et3-mfha
13
vulnerability VCID-kqng-d1f2-myg5
14
vulnerability VCID-m7ja-6efp-tyh1
15
vulnerability VCID-paqj-ye46-8bdb
16
vulnerability VCID-qth9-7326-hffp
17
vulnerability VCID-rbvh-4npk-nub9
18
vulnerability VCID-rhtz-91ke-kfbj
19
vulnerability VCID-rk89-9dw5-w3gg
20
vulnerability VCID-se44-f85s-xyex
21
vulnerability VCID-urhs-6aus-syb1
22
vulnerability VCID-w317-p36z-fya3
23
vulnerability VCID-webw-gryb-7ucv
24
vulnerability VCID-xa95-zsnk-3kg9
25
vulnerability VCID-xns8-63b5-guf2
26
vulnerability VCID-y4a2-mamb-yqg6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.0
17
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.0-M1
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-j66a-6et3-mfha
1
vulnerability VCID-paqj-ye46-8bdb
2
vulnerability VCID-urhs-6aus-syb1
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@9.0.0-M1
18
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.0-M1
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18rb-u2tu-affk
1
vulnerability VCID-5ebw-zerz-u7bh
2
vulnerability VCID-d8re-94xd-nycp
3
vulnerability VCID-j66a-6et3-mfha
4
vulnerability VCID-kqng-d1f2-myg5
5
vulnerability VCID-paqj-ye46-8bdb
6
vulnerability VCID-urhs-6aus-syb1
7
vulnerability VCID-wcnj-bna8-7fh7
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@10.1.0-M1
19
url pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.0-M1
purl pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18rb-u2tu-affk
1
vulnerability VCID-5ebw-zerz-u7bh
2
vulnerability VCID-d8re-94xd-nycp
3
vulnerability VCID-j66a-6et3-mfha
4
vulnerability VCID-kqng-d1f2-myg5
5
vulnerability VCID-paqj-ye46-8bdb
6
vulnerability VCID-urhs-6aus-syb1
7
vulnerability VCID-wcnj-bna8-7fh7
8
vulnerability VCID-y4a2-mamb-yqg6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@11.0.0-M1
20
url pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1?arch=el7jws
purl pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1?arch=el7jws
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-m1k8-9pwc-1qb9
1
vulnerability VCID-paqj-ye46-8bdb
2
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1%3Farch=el7jws
21
url pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1?arch=el8jws
purl pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1?arch=el8jws
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-m1k8-9pwc-1qb9
1
vulnerability VCID-paqj-ye46-8bdb
2
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1%3Farch=el8jws
22
url pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1?arch=el9jws
purl pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1?arch=el9jws
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-m1k8-9pwc-1qb9
1
vulnerability VCID-paqj-ye46-8bdb
2
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jws5-tomcat@9.0.62-15.redhat_00013.1%3Farch=el9jws
23
url pkg:rpm/redhat/tomcat@1:9.0.62-27?arch=el8_9
purl pkg:rpm/redhat/tomcat@1:9.0.62-27?arch=el8_9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-m1k8-9pwc-1qb9
1
vulnerability VCID-paqj-ye46-8bdb
2
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat@1:9.0.62-27%3Farch=el8_9
24
url pkg:rpm/redhat/tomcat@1:9.0.62-37?arch=el9_3
purl pkg:rpm/redhat/tomcat@1:9.0.62-37?arch=el9_3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-m1k8-9pwc-1qb9
1
vulnerability VCID-paqj-ye46-8bdb
2
vulnerability VCID-ryby-gbcx-33ec
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat@1:9.0.62-37%3Farch=el9_3
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28708.json
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-28708.json
1
reference_url https://bz.apache.org/bugzilla/show_bug.cgi?id=66471
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bz.apache.org/bugzilla/show_bug.cgi?id=66471
2
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
3
reference_url https://github.com/apache/tomcat/commit/3b51230764da595bb19e8d0962dd8c69ab40dfab
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/3b51230764da595bb19e8d0962dd8c69ab40dfab
4
reference_url https://github.com/apache/tomcat/commit/5b72c94e8b2c4ada63a1d91dc527bf4d8fd1f510
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/5b72c94e8b2c4ada63a1d91dc527bf4d8fd1f510
5
reference_url https://github.com/apache/tomcat/commit/c64d496dda1560b5df113be55fbfaefec349b50f
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/c64d496dda1560b5df113be55fbfaefec349b50f
6
reference_url https://github.com/apache/tomcat/commit/f509bbf31fc00abe3d9f25ebfabca5e05173da5b
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/f509bbf31fc00abe3d9f25ebfabca5e05173da5b
7
reference_url https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread/hdksc59z3s7tm39x0pp33mtwdrt8qr67
8
reference_url https://security.netapp.com/advisory/ntap-20230331-0012
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20230331-0012
9
reference_url https://tomcat.apache.org/security-10.html
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://tomcat.apache.org/security-10.html
10
reference_url https://tomcat.apache.org/security-11.html
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://tomcat.apache.org/security-11.html
11
reference_url https://tomcat.apache.org/security-8.html
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://tomcat.apache.org/security-8.html
12
reference_url https://tomcat.apache.org/security-9.html
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://tomcat.apache.org/security-9.html
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2180856
reference_id 2180856
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2180856
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28708
reference_id CVE-2023-28708
reference_type
scores
0
value Important
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28708
15
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-28708
reference_id CVE-2023-28708
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-28708
16
reference_url https://github.com/advisories/GHSA-2c9m-w27f-53rm
reference_id GHSA-2c9m-w27f-53rm
reference_type
scores
url https://github.com/advisories/GHSA-2c9m-w27f-53rm
17
reference_url https://access.redhat.com/errata/RHSA-2023:4909
reference_id RHSA-2023:4909
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4909
18
reference_url https://access.redhat.com/errata/RHSA-2023:4910
reference_id RHSA-2023:4910
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:4910
19
reference_url https://access.redhat.com/errata/RHSA-2023:6570
reference_id RHSA-2023:6570
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:6570
20
reference_url https://access.redhat.com/errata/RHSA-2023:7065
reference_id RHSA-2023:7065
reference_type
scores
url https://access.redhat.com/errata/RHSA-2023:7065
Weaknesses
0
cwe_id 523
name Unprotected Transport of Credentials
description Login pages do not use adequate measures to protect the user name and password while they are in transit from the client to the server.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
3
cwe_id 200
name Exposure of Sensitive Information to an Unauthorized Actor
description The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Exploits
Severity_range_score4.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-paqj-ye46-8bdb