Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-yxpq-rrry-j3h8
SummaryThe HTTP/2 header parser in Apache Tomcat 9.0.0.M1 to 9.0.0.M11 and 8.5.0 to 8.5.6 entered an infinite loop if a header was received that was larger than the available buffer. This made a denial of service attack possible.
Aliases
0
alias CVE-2016-6817
1
alias GHSA-698c-2x4j-g9gq
Fixed_packages
0
url pkg:apache/tomcat@8.5.8
purl pkg:apache/tomcat@8.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hves-r5bg-yfes
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@8.5.8
1
url pkg:apache/tomcat@9.0.0%2BM13
purl pkg:apache/tomcat@9.0.0%2BM13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-hves-r5bg-yfes
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.0%252BM13
2
url pkg:deb/debian/tomcat9@0?distro=trixie
purl pkg:deb/debian/tomcat9@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@0%3Fdistro=trixie
3
url pkg:deb/debian/tomcat9@9.0.43-2~deb11u10?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.43-2~deb11u10?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.43-2~deb11u10%3Fdistro=trixie
4
url pkg:deb/debian/tomcat9@9.0.70-2?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.70-2?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.70-2%3Fdistro=trixie
5
url pkg:deb/debian/tomcat9@9.0.95-1?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.95-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.95-1%3Fdistro=trixie
6
url pkg:deb/debian/tomcat9@9.0.115-1?distro=trixie
purl pkg:deb/debian/tomcat9@9.0.115-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/tomcat9@9.0.115-1%3Fdistro=trixie
7
url pkg:maven/org.apache.tomcat/tomcat@8.5.8
purl pkg:maven/org.apache.tomcat/tomcat@8.5.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1hdb-24e3-f3d6
1
vulnerability VCID-2sbh-sy57-3uez
2
vulnerability VCID-39e3-jfbg-s3hk
3
vulnerability VCID-46bv-6b7y-3bca
4
vulnerability VCID-4aaa-errb-2qdw
5
vulnerability VCID-4tf3-7f5b-2ffu
6
vulnerability VCID-6wvu-2rmc-mfhj
7
vulnerability VCID-a8gk-n8bq-87cp
8
vulnerability VCID-aeeu-fpay-wufz
9
vulnerability VCID-arkn-bca7-hqam
10
vulnerability VCID-ayrd-8ntf-hkh3
11
vulnerability VCID-b3bb-9ajg-sfc9
12
vulnerability VCID-dy6m-zt6r-9ubd
13
vulnerability VCID-dzpn-w4b3-vbcm
14
vulnerability VCID-eb37-mkxf-7fgw
15
vulnerability VCID-enaj-f97c-jbh7
16
vulnerability VCID-f77q-v5xp-e7dy
17
vulnerability VCID-fyfz-6tr5-2fc7
18
vulnerability VCID-g7bk-891a-uufy
19
vulnerability VCID-hmbm-5ysw-77bu
20
vulnerability VCID-hves-r5bg-yfes
21
vulnerability VCID-j8tk-s915-pbfy
22
vulnerability VCID-k9cg-ehdw-dbh6
23
vulnerability VCID-kwab-3s4q-eka4
24
vulnerability VCID-m1zd-uytj-3bej
25
vulnerability VCID-m2zn-ja8d-7kg8
26
vulnerability VCID-n3zn-tuck-gkfe
27
vulnerability VCID-nmq2-8ysj-4fbc
28
vulnerability VCID-ran8-rnqn-tkbc
29
vulnerability VCID-ruuh-g3fa-m7d8
30
vulnerability VCID-u3ck-cvgt-fuhd
31
vulnerability VCID-wbaq-j85q-y3c6
32
vulnerability VCID-xshb-a2kb-c7gs
33
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.8
8
url pkg:maven/org.apache.tomcat/tomcat@9.0.0.M13
purl pkg:maven/org.apache.tomcat/tomcat@9.0.0.M13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1hdb-24e3-f3d6
1
vulnerability VCID-4tf3-7f5b-2ffu
2
vulnerability VCID-6wvu-2rmc-mfhj
3
vulnerability VCID-ayrd-8ntf-hkh3
4
vulnerability VCID-dzpn-w4b3-vbcm
5
vulnerability VCID-fyfz-6tr5-2fc7
6
vulnerability VCID-g7bk-891a-uufy
7
vulnerability VCID-hmbm-5ysw-77bu
8
vulnerability VCID-hves-r5bg-yfes
9
vulnerability VCID-k9cg-ehdw-dbh6
10
vulnerability VCID-m1zd-uytj-3bej
11
vulnerability VCID-ruuh-g3fa-m7d8
12
vulnerability VCID-u3ck-cvgt-fuhd
13
vulnerability VCID-wbaq-j85q-y3c6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.0.M13
Affected_packages
0
url pkg:apache/tomcat@8.5.0
purl pkg:apache/tomcat@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-1hdb-24e3-f3d6
2
vulnerability VCID-2sbh-sy57-3uez
3
vulnerability VCID-39e3-jfbg-s3hk
4
vulnerability VCID-3cr9-g81m-4ugy
5
vulnerability VCID-3n4t-bvb1-5qer
6
vulnerability VCID-3r3s-q21j-c3au
7
vulnerability VCID-46bv-6b7y-3bca
8
vulnerability VCID-4aaa-errb-2qdw
9
vulnerability VCID-4tf3-7f5b-2ffu
10
vulnerability VCID-56jv-htmt-rkew
11
vulnerability VCID-5781-s1ny-q7ey
12
vulnerability VCID-66kh-s6cr-tqf9
13
vulnerability VCID-885s-t4dx-dybv
14
vulnerability VCID-95d1-arxd-hkd1
15
vulnerability VCID-a8gk-n8bq-87cp
16
vulnerability VCID-aeeu-fpay-wufz
17
vulnerability VCID-arkn-bca7-hqam
18
vulnerability VCID-ayrd-8ntf-hkh3
19
vulnerability VCID-b3bb-9ajg-sfc9
20
vulnerability VCID-dy6m-zt6r-9ubd
21
vulnerability VCID-dzpn-w4b3-vbcm
22
vulnerability VCID-eb37-mkxf-7fgw
23
vulnerability VCID-enaj-f97c-jbh7
24
vulnerability VCID-f77q-v5xp-e7dy
25
vulnerability VCID-fyfz-6tr5-2fc7
26
vulnerability VCID-g7bk-891a-uufy
27
vulnerability VCID-hmbm-5ysw-77bu
28
vulnerability VCID-hves-r5bg-yfes
29
vulnerability VCID-j6cj-ftyd-3ffa
30
vulnerability VCID-j8tk-s915-pbfy
31
vulnerability VCID-kagr-74d9-kyhx
32
vulnerability VCID-kwab-3s4q-eka4
33
vulnerability VCID-m1zd-uytj-3bej
34
vulnerability VCID-m2zn-ja8d-7kg8
35
vulnerability VCID-n3ab-nk7c-hqc9
36
vulnerability VCID-n3zn-tuck-gkfe
37
vulnerability VCID-n9yk-e49f-n7e7
38
vulnerability VCID-nmq2-8ysj-4fbc
39
vulnerability VCID-nvbx-q971-skgm
40
vulnerability VCID-p6pa-f1fg-hbhg
41
vulnerability VCID-pqxe-tfhk-47b7
42
vulnerability VCID-ran8-rnqn-tkbc
43
vulnerability VCID-ruuh-g3fa-m7d8
44
vulnerability VCID-rzj2-4kcj-43dq
45
vulnerability VCID-t2ne-75ck-eqcr
46
vulnerability VCID-u3ck-cvgt-fuhd
47
vulnerability VCID-v7tp-1t4h-zqeg
48
vulnerability VCID-vdnj-sqmx-e3ep
49
vulnerability VCID-vsdf-4tfj-uybe
50
vulnerability VCID-wbaq-j85q-y3c6
51
vulnerability VCID-wgsc-dnn1-ukeq
52
vulnerability VCID-xf8r-kqxb-7qdy
53
vulnerability VCID-yfx4-4gsc-2kgh
54
vulnerability VCID-yxpq-rrry-j3h8
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@8.5.0
1
url pkg:apache/tomcat@8.5.6
purl pkg:apache/tomcat@8.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-95d1-arxd-hkd1
2
vulnerability VCID-yxpq-rrry-j3h8
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@8.5.6
2
url pkg:apache/tomcat@9.0.0%2BM1
purl pkg:apache/tomcat@9.0.0%2BM1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-1e6p-cppr-2bh2
2
vulnerability VCID-1hdb-24e3-f3d6
3
vulnerability VCID-1k8f-vsg1-k3d6
4
vulnerability VCID-246u-a4rh-yyd4
5
vulnerability VCID-2kku-pzer-9ufv
6
vulnerability VCID-2sbh-sy57-3uez
7
vulnerability VCID-2x6a-3gh1-rkhs
8
vulnerability VCID-39e3-jfbg-s3hk
9
vulnerability VCID-3cr9-g81m-4ugy
10
vulnerability VCID-3n4t-bvb1-5qer
11
vulnerability VCID-3r3s-q21j-c3au
12
vulnerability VCID-43j2-w5xt-43g9
13
vulnerability VCID-46bv-6b7y-3bca
14
vulnerability VCID-4aaa-errb-2qdw
15
vulnerability VCID-4cag-c4pb-dfaz
16
vulnerability VCID-4tf3-7f5b-2ffu
17
vulnerability VCID-5sgv-7nsz-5fa8
18
vulnerability VCID-66kh-s6cr-tqf9
19
vulnerability VCID-68fk-4g86-ekbp
20
vulnerability VCID-885s-t4dx-dybv
21
vulnerability VCID-95d1-arxd-hkd1
22
vulnerability VCID-9exq-fhv6-bbea
23
vulnerability VCID-9kfe-1esf-uydm
24
vulnerability VCID-a8gk-n8bq-87cp
25
vulnerability VCID-aeeu-fpay-wufz
26
vulnerability VCID-arkn-bca7-hqam
27
vulnerability VCID-ayrd-8ntf-hkh3
28
vulnerability VCID-dzpn-w4b3-vbcm
29
vulnerability VCID-eb37-mkxf-7fgw
30
vulnerability VCID-enaj-f97c-jbh7
31
vulnerability VCID-f77q-v5xp-e7dy
32
vulnerability VCID-fpgj-82wf-ykbw
33
vulnerability VCID-fyfz-6tr5-2fc7
34
vulnerability VCID-g7bk-891a-uufy
35
vulnerability VCID-gb2v-96xj-ybad
36
vulnerability VCID-gvhy-d4gm-57d3
37
vulnerability VCID-gyed-x6s8-ybhr
38
vulnerability VCID-hmbm-5ysw-77bu
39
vulnerability VCID-hves-r5bg-yfes
40
vulnerability VCID-k59r-wjt3-wqe5
41
vulnerability VCID-kagr-74d9-kyhx
42
vulnerability VCID-kukv-k3z7-7fgs
43
vulnerability VCID-kwab-3s4q-eka4
44
vulnerability VCID-kyb8-rvyw-s7b1
45
vulnerability VCID-m1zd-uytj-3bej
46
vulnerability VCID-m2zn-ja8d-7kg8
47
vulnerability VCID-maw6-4qs5-ykae
48
vulnerability VCID-n3ab-nk7c-hqc9
49
vulnerability VCID-n3zn-tuck-gkfe
50
vulnerability VCID-nvbx-q971-skgm
51
vulnerability VCID-pqxe-tfhk-47b7
52
vulnerability VCID-ruuh-g3fa-m7d8
53
vulnerability VCID-sr8e-w1qk-r7fz
54
vulnerability VCID-t2ne-75ck-eqcr
55
vulnerability VCID-tfrs-d458-tfaq
56
vulnerability VCID-u3ck-cvgt-fuhd
57
vulnerability VCID-v8ku-sjc8-wfga
58
vulnerability VCID-vdnj-sqmx-e3ep
59
vulnerability VCID-vhjj-dnft-kkf4
60
vulnerability VCID-wbaq-j85q-y3c6
61
vulnerability VCID-wgsc-dnn1-ukeq
62
vulnerability VCID-xf8r-kqxb-7qdy
63
vulnerability VCID-y9ne-rw7e-vugf
64
vulnerability VCID-yfx4-4gsc-2kgh
65
vulnerability VCID-yxpq-rrry-j3h8
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.0%252BM1
3
url pkg:apache/tomcat@9.0.0%2BM11
purl pkg:apache/tomcat@9.0.0%2BM11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-6wvu-2rmc-mfhj
2
vulnerability VCID-95d1-arxd-hkd1
3
vulnerability VCID-xqjr-7xfw-mbh2
4
vulnerability VCID-yxpq-rrry-j3h8
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@9.0.0%252BM11
4
url pkg:maven/org.apache.tomcat/tomcat@8.5.0
purl pkg:maven/org.apache.tomcat/tomcat@8.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-1hdb-24e3-f3d6
2
vulnerability VCID-2sbh-sy57-3uez
3
vulnerability VCID-39e3-jfbg-s3hk
4
vulnerability VCID-3cr9-g81m-4ugy
5
vulnerability VCID-3n4t-bvb1-5qer
6
vulnerability VCID-3r3s-q21j-c3au
7
vulnerability VCID-46bv-6b7y-3bca
8
vulnerability VCID-4aaa-errb-2qdw
9
vulnerability VCID-4cag-c4pb-dfaz
10
vulnerability VCID-4tf3-7f5b-2ffu
11
vulnerability VCID-56jv-htmt-rkew
12
vulnerability VCID-5781-s1ny-q7ey
13
vulnerability VCID-66kh-s6cr-tqf9
14
vulnerability VCID-885s-t4dx-dybv
15
vulnerability VCID-95d1-arxd-hkd1
16
vulnerability VCID-a8gk-n8bq-87cp
17
vulnerability VCID-aeeu-fpay-wufz
18
vulnerability VCID-arkn-bca7-hqam
19
vulnerability VCID-ayrd-8ntf-hkh3
20
vulnerability VCID-b3bb-9ajg-sfc9
21
vulnerability VCID-dy6m-zt6r-9ubd
22
vulnerability VCID-dzpn-w4b3-vbcm
23
vulnerability VCID-eb37-mkxf-7fgw
24
vulnerability VCID-enaj-f97c-jbh7
25
vulnerability VCID-f77q-v5xp-e7dy
26
vulnerability VCID-fyfz-6tr5-2fc7
27
vulnerability VCID-g7bk-891a-uufy
28
vulnerability VCID-hmbm-5ysw-77bu
29
vulnerability VCID-hves-r5bg-yfes
30
vulnerability VCID-j6cj-ftyd-3ffa
31
vulnerability VCID-j8tk-s915-pbfy
32
vulnerability VCID-kagr-74d9-kyhx
33
vulnerability VCID-kwab-3s4q-eka4
34
vulnerability VCID-m1zd-uytj-3bej
35
vulnerability VCID-m2zn-ja8d-7kg8
36
vulnerability VCID-n3ab-nk7c-hqc9
37
vulnerability VCID-n3zn-tuck-gkfe
38
vulnerability VCID-n9yk-e49f-n7e7
39
vulnerability VCID-nmq2-8ysj-4fbc
40
vulnerability VCID-nvbx-q971-skgm
41
vulnerability VCID-p6pa-f1fg-hbhg
42
vulnerability VCID-pqxe-tfhk-47b7
43
vulnerability VCID-ran8-rnqn-tkbc
44
vulnerability VCID-ruuh-g3fa-m7d8
45
vulnerability VCID-rzj2-4kcj-43dq
46
vulnerability VCID-t2ne-75ck-eqcr
47
vulnerability VCID-u3ck-cvgt-fuhd
48
vulnerability VCID-v7tp-1t4h-zqeg
49
vulnerability VCID-vdnj-sqmx-e3ep
50
vulnerability VCID-vsdf-4tfj-uybe
51
vulnerability VCID-wbaq-j85q-y3c6
52
vulnerability VCID-wgsc-dnn1-ukeq
53
vulnerability VCID-xf8r-kqxb-7qdy
54
vulnerability VCID-yfx4-4gsc-2kgh
55
vulnerability VCID-yxpq-rrry-j3h8
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.0
5
url pkg:maven/org.apache.tomcat/tomcat@8.5.6
purl pkg:maven/org.apache.tomcat/tomcat@8.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1hdb-24e3-f3d6
1
vulnerability VCID-2sbh-sy57-3uez
2
vulnerability VCID-39e3-jfbg-s3hk
3
vulnerability VCID-3r3s-q21j-c3au
4
vulnerability VCID-46bv-6b7y-3bca
5
vulnerability VCID-4aaa-errb-2qdw
6
vulnerability VCID-4tf3-7f5b-2ffu
7
vulnerability VCID-95d1-arxd-hkd1
8
vulnerability VCID-a8gk-n8bq-87cp
9
vulnerability VCID-aeeu-fpay-wufz
10
vulnerability VCID-arkn-bca7-hqam
11
vulnerability VCID-ayrd-8ntf-hkh3
12
vulnerability VCID-b3bb-9ajg-sfc9
13
vulnerability VCID-dy6m-zt6r-9ubd
14
vulnerability VCID-dzpn-w4b3-vbcm
15
vulnerability VCID-eb37-mkxf-7fgw
16
vulnerability VCID-enaj-f97c-jbh7
17
vulnerability VCID-f77q-v5xp-e7dy
18
vulnerability VCID-fyfz-6tr5-2fc7
19
vulnerability VCID-g7bk-891a-uufy
20
vulnerability VCID-hmbm-5ysw-77bu
21
vulnerability VCID-j8tk-s915-pbfy
22
vulnerability VCID-kwab-3s4q-eka4
23
vulnerability VCID-m1zd-uytj-3bej
24
vulnerability VCID-m2zn-ja8d-7kg8
25
vulnerability VCID-n3zn-tuck-gkfe
26
vulnerability VCID-nmq2-8ysj-4fbc
27
vulnerability VCID-ran8-rnqn-tkbc
28
vulnerability VCID-ruuh-g3fa-m7d8
29
vulnerability VCID-u3ck-cvgt-fuhd
30
vulnerability VCID-wbaq-j85q-y3c6
31
vulnerability VCID-xqjr-7xfw-mbh2
32
vulnerability VCID-xshb-a2kb-c7gs
33
vulnerability VCID-yfx4-4gsc-2kgh
34
vulnerability VCID-yxpq-rrry-j3h8
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.6
6
url pkg:maven/org.apache.tomcat/tomcat@9.0.0.M1
purl pkg:maven/org.apache.tomcat/tomcat@9.0.0.M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-1e6p-cppr-2bh2
2
vulnerability VCID-1hdb-24e3-f3d6
3
vulnerability VCID-1k8f-vsg1-k3d6
4
vulnerability VCID-246u-a4rh-yyd4
5
vulnerability VCID-2kku-pzer-9ufv
6
vulnerability VCID-2sbh-sy57-3uez
7
vulnerability VCID-2x6a-3gh1-rkhs
8
vulnerability VCID-39e3-jfbg-s3hk
9
vulnerability VCID-3cr9-g81m-4ugy
10
vulnerability VCID-3n4t-bvb1-5qer
11
vulnerability VCID-3r3s-q21j-c3au
12
vulnerability VCID-43j2-w5xt-43g9
13
vulnerability VCID-46bv-6b7y-3bca
14
vulnerability VCID-4aaa-errb-2qdw
15
vulnerability VCID-4cag-c4pb-dfaz
16
vulnerability VCID-4tf3-7f5b-2ffu
17
vulnerability VCID-5sgv-7nsz-5fa8
18
vulnerability VCID-66kh-s6cr-tqf9
19
vulnerability VCID-68fk-4g86-ekbp
20
vulnerability VCID-885s-t4dx-dybv
21
vulnerability VCID-95d1-arxd-hkd1
22
vulnerability VCID-9exq-fhv6-bbea
23
vulnerability VCID-9kfe-1esf-uydm
24
vulnerability VCID-a8gk-n8bq-87cp
25
vulnerability VCID-aeeu-fpay-wufz
26
vulnerability VCID-arkn-bca7-hqam
27
vulnerability VCID-ayrd-8ntf-hkh3
28
vulnerability VCID-dzpn-w4b3-vbcm
29
vulnerability VCID-eb37-mkxf-7fgw
30
vulnerability VCID-enaj-f97c-jbh7
31
vulnerability VCID-f77q-v5xp-e7dy
32
vulnerability VCID-fpgj-82wf-ykbw
33
vulnerability VCID-fyfz-6tr5-2fc7
34
vulnerability VCID-g7bk-891a-uufy
35
vulnerability VCID-gb2v-96xj-ybad
36
vulnerability VCID-gvhy-d4gm-57d3
37
vulnerability VCID-gyed-x6s8-ybhr
38
vulnerability VCID-hmbm-5ysw-77bu
39
vulnerability VCID-hves-r5bg-yfes
40
vulnerability VCID-k59r-wjt3-wqe5
41
vulnerability VCID-k9cg-ehdw-dbh6
42
vulnerability VCID-kagr-74d9-kyhx
43
vulnerability VCID-kukv-k3z7-7fgs
44
vulnerability VCID-kwab-3s4q-eka4
45
vulnerability VCID-kyb8-rvyw-s7b1
46
vulnerability VCID-m1zd-uytj-3bej
47
vulnerability VCID-m2zn-ja8d-7kg8
48
vulnerability VCID-maw6-4qs5-ykae
49
vulnerability VCID-n3ab-nk7c-hqc9
50
vulnerability VCID-n3zn-tuck-gkfe
51
vulnerability VCID-nvbx-q971-skgm
52
vulnerability VCID-pqxe-tfhk-47b7
53
vulnerability VCID-ruuh-g3fa-m7d8
54
vulnerability VCID-sr8e-w1qk-r7fz
55
vulnerability VCID-t2ne-75ck-eqcr
56
vulnerability VCID-tfrs-d458-tfaq
57
vulnerability VCID-u3ck-cvgt-fuhd
58
vulnerability VCID-v8ku-sjc8-wfga
59
vulnerability VCID-vdnj-sqmx-e3ep
60
vulnerability VCID-vhjj-dnft-kkf4
61
vulnerability VCID-wbaq-j85q-y3c6
62
vulnerability VCID-wgsc-dnn1-ukeq
63
vulnerability VCID-xf8r-kqxb-7qdy
64
vulnerability VCID-y9ne-rw7e-vugf
65
vulnerability VCID-yfx4-4gsc-2kgh
66
vulnerability VCID-yxpq-rrry-j3h8
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.0.M1
7
url pkg:maven/org.apache.tomcat/tomcat@9.0.0.M11
purl pkg:maven/org.apache.tomcat/tomcat@9.0.0.M11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1hdb-24e3-f3d6
1
vulnerability VCID-3r3s-q21j-c3au
2
vulnerability VCID-4tf3-7f5b-2ffu
3
vulnerability VCID-6wvu-2rmc-mfhj
4
vulnerability VCID-95d1-arxd-hkd1
5
vulnerability VCID-ayrd-8ntf-hkh3
6
vulnerability VCID-dzpn-w4b3-vbcm
7
vulnerability VCID-fyfz-6tr5-2fc7
8
vulnerability VCID-g7bk-891a-uufy
9
vulnerability VCID-hmbm-5ysw-77bu
10
vulnerability VCID-k9cg-ehdw-dbh6
11
vulnerability VCID-m1zd-uytj-3bej
12
vulnerability VCID-ruuh-g3fa-m7d8
13
vulnerability VCID-u3ck-cvgt-fuhd
14
vulnerability VCID-wbaq-j85q-y3c6
15
vulnerability VCID-xqjr-7xfw-mbh2
16
vulnerability VCID-yxpq-rrry-j3h8
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.0.M11
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6817.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6817.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-6817
reference_id
reference_type
scores
0
value 0.00759
scoring_system epss
scoring_elements 0.73338
published_at 2026-04-11T12:55:00Z
1
value 0.00759
scoring_system epss
scoring_elements 0.73268
published_at 2026-04-02T12:55:00Z
2
value 0.00759
scoring_system epss
scoring_elements 0.73292
published_at 2026-04-04T12:55:00Z
3
value 0.00759
scoring_system epss
scoring_elements 0.73264
published_at 2026-04-07T12:55:00Z
4
value 0.00759
scoring_system epss
scoring_elements 0.73362
published_at 2026-04-18T12:55:00Z
5
value 0.00759
scoring_system epss
scoring_elements 0.733
published_at 2026-04-08T12:55:00Z
6
value 0.00759
scoring_system epss
scoring_elements 0.73354
published_at 2026-04-16T12:55:00Z
7
value 0.00759
scoring_system epss
scoring_elements 0.7331
published_at 2026-04-13T12:55:00Z
8
value 0.00759
scoring_system epss
scoring_elements 0.73318
published_at 2026-04-12T12:55:00Z
9
value 0.00759
scoring_system epss
scoring_elements 0.73259
published_at 2026-04-01T12:55:00Z
10
value 0.00759
scoring_system epss
scoring_elements 0.73313
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-6817
2
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
3
reference_url https://github.com/apache/tomcat85/commit/85c63227edabbfb4f2f500fc557480a190135d21
reference_id
reference_type
scores
url https://github.com/apache/tomcat85/commit/85c63227edabbfb4f2f500fc557480a190135d21
4
reference_url https://github.com/apache/tomcat/commit/079372fc7bac8e2e378942715c9ce26a4a72c07a
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/079372fc7bac8e2e378942715c9ce26a4a72c07a
5
reference_url https://github.com/apache/tomcat/commit/85c63227edabbfb4f2f500fc557480a190135d21
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/85c63227edabbfb4f2f500fc557480a190135d21
6
reference_url https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551@%3Cdev.tomcat.apache.org%3E
7
reference_url https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:17Z/
url https://lists.apache.org/thread.html/343558d982879bf88ec20dbf707f8c11255f8e219e81d45c4f8d0551%40%3Cdev.tomcat.apache.org%3E
8
reference_url https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3@%3Cdev.tomcat.apache.org%3E
9
reference_url https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:17Z/
url https://lists.apache.org/thread.html/6af47120905aa7d8fe12f42e8ff2284fb338ba141d3b77b8c7cb61b3%40%3Cdev.tomcat.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a@%3Cdev.tomcat.apache.org%3E
11
reference_url https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:17Z/
url https://lists.apache.org/thread.html/88855876c33f2f9c532ffb75bfee570ccf0b17ffa77493745af9a17a%40%3Cdev.tomcat.apache.org%3E
12
reference_url https://lists.apache.org/thread.html/a9f24571460af003071475b75f18cad81ebcc36fa7c876965a75e32a@%3Cannounce.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/a9f24571460af003071475b75f18cad81ebcc36fa7c876965a75e32a@%3Cannounce.tomcat.apache.org%3E
13
reference_url https://lists.apache.org/thread.html/a9f24571460af003071475b75f18cad81ebcc36fa7c876965a75e32a%40%3Cannounce.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:17Z/
url https://lists.apache.org/thread.html/a9f24571460af003071475b75f18cad81ebcc36fa7c876965a75e32a%40%3Cannounce.tomcat.apache.org%3E
14
reference_url https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc@%3Cdev.tomcat.apache.org%3E
15
reference_url https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:17Z/
url https://lists.apache.org/thread.html/b5e3f51d28cd5d9b1809f56594f2cf63dcd6a90429e16ea9f83bbedc%40%3Cdev.tomcat.apache.org%3E
16
reference_url https://security.netapp.com/advisory/ntap-20180607-0001
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://security.netapp.com/advisory/ntap-20180607-0001
17
reference_url https://svn.apache.org/viewvc?view=rev&rev=1765794
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1765794
18
reference_url https://svn.apache.org/viewvc?view=rev&rev=1765798
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1765798
19
reference_url https://web.archive.org/web/20180115024458/http://www.securitytracker.com/id/1037330
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20180115024458/http://www.securitytracker.com/id/1037330
20
reference_url https://web.archive.org/web/20200227174145/http://www.securityfocus.com/bid/94462
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20200227174145/http://www.securityfocus.com/bid/94462
21
reference_url http://www.securityfocus.com/bid/94462
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:17Z/
url http://www.securityfocus.com/bid/94462
22
reference_url http://www.securitytracker.com/id/1037330
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-15T17:30:17Z/
url http://www.securitytracker.com/id/1037330
23
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1397474
reference_id 1397474
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1397474
24
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6817
reference_id CVE-2016-6817
reference_type
scores
0
value Important
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6817
25
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-6817
reference_id CVE-2016-6817
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-6817
26
reference_url https://github.com/advisories/GHSA-698c-2x4j-g9gq
reference_id GHSA-698c-2x4j-g9gq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-698c-2x4j-g9gq
Weaknesses
0
cwe_id 119
name Improper Restriction of Operations within the Bounds of a Memory Buffer
description The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
1
cwe_id 835
name Loop with Unreachable Exit Condition ('Infinite Loop')
description The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-yxpq-rrry-j3h8