Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-e2kr-7pmg-gfc9
SummaryUnrestricted file upload vulnerability in Apache Tomcat 7.x before 7.0.40, in certain situations involving outdated java.io.File code and a custom JMX configuration, allows remote attackers to execute arbitrary code by uploading and accessing a JSP file.
Aliases
0
alias CVE-2013-4444
1
alias GHSA-h6c8-x5r3-pm88
Fixed_packages
0
url pkg:apache/tomcat@7.0.40
purl pkg:apache/tomcat@7.0.40
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.40
1
url pkg:maven/org.apache.tomcat/tomcat@7.0.40
purl pkg:maven/org.apache.tomcat/tomcat@7.0.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-2sbh-sy57-3uez
2
vulnerability VCID-3n4t-bvb1-5qer
3
vulnerability VCID-3r3s-q21j-c3au
4
vulnerability VCID-4aaa-errb-2qdw
5
vulnerability VCID-4mkw-7haq-pkgn
6
vulnerability VCID-7cpu-h5fr-8ffd
7
vulnerability VCID-95d1-arxd-hkd1
8
vulnerability VCID-9exq-fhv6-bbea
9
vulnerability VCID-a1by-zvtm-akdc
10
vulnerability VCID-a8gk-n8bq-87cp
11
vulnerability VCID-aeeu-fpay-wufz
12
vulnerability VCID-arkn-bca7-hqam
13
vulnerability VCID-dzpn-w4b3-vbcm
14
vulnerability VCID-e7kd-kk57-mkd6
15
vulnerability VCID-eb37-mkxf-7fgw
16
vulnerability VCID-f77q-v5xp-e7dy
17
vulnerability VCID-fyfz-6tr5-2fc7
18
vulnerability VCID-g7bk-891a-uufy
19
vulnerability VCID-gv12-4ruf-kfhq
20
vulnerability VCID-h9ds-trhx-m7aj
21
vulnerability VCID-hmbm-5ysw-77bu
22
vulnerability VCID-jf7u-dvpd-b7f4
23
vulnerability VCID-kagr-74d9-kyhx
24
vulnerability VCID-kgd1-bzst-muh7
25
vulnerability VCID-kwab-3s4q-eka4
26
vulnerability VCID-kyb8-rvyw-s7b1
27
vulnerability VCID-kzzv-rhya-j7dd
28
vulnerability VCID-m1zd-uytj-3bej
29
vulnerability VCID-m2zn-ja8d-7kg8
30
vulnerability VCID-ruuh-g3fa-m7d8
31
vulnerability VCID-tcbc-3kgt-muam
32
vulnerability VCID-tfrs-d458-tfaq
33
vulnerability VCID-vhjj-dnft-kkf4
34
vulnerability VCID-w82a-7kk2-p3f1
35
vulnerability VCID-xf8r-kqxb-7qdy
36
vulnerability VCID-yfx4-4gsc-2kgh
37
vulnerability VCID-ygvw-69am-s7ae
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.40
Affected_packages
0
url pkg:apache/tomcat@7.0.0
purl pkg:apache/tomcat@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-1k8f-vsg1-k3d6
2
vulnerability VCID-241m-q6vd-kudk
3
vulnerability VCID-2sbh-sy57-3uez
4
vulnerability VCID-3cr9-g81m-4ugy
5
vulnerability VCID-3n4t-bvb1-5qer
6
vulnerability VCID-3r3s-q21j-c3au
7
vulnerability VCID-4aaa-errb-2qdw
8
vulnerability VCID-4mkw-7haq-pkgn
9
vulnerability VCID-5eqm-218u-p7gq
10
vulnerability VCID-618c-ar98-qfcr
11
vulnerability VCID-66kh-s6cr-tqf9
12
vulnerability VCID-68fk-4g86-ekbp
13
vulnerability VCID-7cpu-h5fr-8ffd
14
vulnerability VCID-7ej8-5f77-cybb
15
vulnerability VCID-886n-1vzv-syc6
16
vulnerability VCID-95d1-arxd-hkd1
17
vulnerability VCID-95fn-d2ad-qyg6
18
vulnerability VCID-9exq-fhv6-bbea
19
vulnerability VCID-a1by-zvtm-akdc
20
vulnerability VCID-a8gk-n8bq-87cp
21
vulnerability VCID-afm2-uj45-xkgx
22
vulnerability VCID-arkn-bca7-hqam
23
vulnerability VCID-c4jv-ws83-x7g2
24
vulnerability VCID-d9ys-kxh6-nkgr
25
vulnerability VCID-dhun-hj5q-dfch
26
vulnerability VCID-dzpn-w4b3-vbcm
27
vulnerability VCID-e2kr-7pmg-gfc9
28
vulnerability VCID-eb37-mkxf-7fgw
29
vulnerability VCID-f2zy-gq57-ufat
30
vulnerability VCID-fpuc-fe6m-47c6
31
vulnerability VCID-fyfz-6tr5-2fc7
32
vulnerability VCID-g7bk-891a-uufy
33
vulnerability VCID-gv12-4ruf-kfhq
34
vulnerability VCID-h9ds-trhx-m7aj
35
vulnerability VCID-hhk9-cr54-8fgc
36
vulnerability VCID-hmbm-5ysw-77bu
37
vulnerability VCID-hves-r5bg-yfes
38
vulnerability VCID-hxj6-mupf-abbc
39
vulnerability VCID-j2j9-avuw-n3eq
40
vulnerability VCID-jf7u-dvpd-b7f4
41
vulnerability VCID-kagr-74d9-kyhx
42
vulnerability VCID-kgd1-bzst-muh7
43
vulnerability VCID-kwab-3s4q-eka4
44
vulnerability VCID-kzzv-rhya-j7dd
45
vulnerability VCID-m1zd-uytj-3bej
46
vulnerability VCID-mctd-9zgv-5qgp
47
vulnerability VCID-mwk8-b5c9-kbb9
48
vulnerability VCID-n3ab-nk7c-hqc9
49
vulnerability VCID-n76n-ywja-rbhh
50
vulnerability VCID-p4dn-y54m-8fd1
51
vulnerability VCID-p6ch-pc73-b3ck
52
vulnerability VCID-pqxe-tfhk-47b7
53
vulnerability VCID-q6hm-mmfs-zka5
54
vulnerability VCID-quwu-ep21-cyew
55
vulnerability VCID-ruuh-g3fa-m7d8
56
vulnerability VCID-ryha-ndms-afbn
57
vulnerability VCID-ta1m-dh8x-nubc
58
vulnerability VCID-tcbc-3kgt-muam
59
vulnerability VCID-tfn5-6ckq-wyce
60
vulnerability VCID-tfrs-d458-tfaq
61
vulnerability VCID-vd1s-m27a-8ucc
62
vulnerability VCID-vdnj-sqmx-e3ep
63
vulnerability VCID-w82a-7kk2-p3f1
64
vulnerability VCID-xf8r-kqxb-7qdy
65
vulnerability VCID-xqrn-wuv5-x7de
66
vulnerability VCID-yfx4-4gsc-2kgh
67
vulnerability VCID-ygvw-69am-s7ae
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.0
1
url pkg:apache/tomcat@7.0.39
purl pkg:apache/tomcat@7.0.39
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-afm2-uj45-xkgx
1
vulnerability VCID-e2kr-7pmg-gfc9
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@7.0.39
2
url pkg:maven/org.apache.tomcat/tomcat@7.0
purl pkg:maven/org.apache.tomcat/tomcat@7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-e2kr-7pmg-gfc9
1
vulnerability VCID-fd9j-6vta-ubbp
2
vulnerability VCID-hxj6-mupf-abbc
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0
3
url pkg:maven/org.apache.tomcat/tomcat@7.0.0
purl pkg:maven/org.apache.tomcat/tomcat@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-18q4-zark-s7a7
2
vulnerability VCID-1k8f-vsg1-k3d6
3
vulnerability VCID-1v6c-f56v-hqh1
4
vulnerability VCID-241m-q6vd-kudk
5
vulnerability VCID-2sbh-sy57-3uez
6
vulnerability VCID-3cr9-g81m-4ugy
7
vulnerability VCID-3n4t-bvb1-5qer
8
vulnerability VCID-3r3s-q21j-c3au
9
vulnerability VCID-4aaa-errb-2qdw
10
vulnerability VCID-4mkw-7haq-pkgn
11
vulnerability VCID-5eqm-218u-p7gq
12
vulnerability VCID-618c-ar98-qfcr
13
vulnerability VCID-66kh-s6cr-tqf9
14
vulnerability VCID-68fk-4g86-ekbp
15
vulnerability VCID-7cpu-h5fr-8ffd
16
vulnerability VCID-7ej8-5f77-cybb
17
vulnerability VCID-886n-1vzv-syc6
18
vulnerability VCID-8ebv-6941-jqdy
19
vulnerability VCID-95d1-arxd-hkd1
20
vulnerability VCID-95fn-d2ad-qyg6
21
vulnerability VCID-9exq-fhv6-bbea
22
vulnerability VCID-a1by-zvtm-akdc
23
vulnerability VCID-a8gk-n8bq-87cp
24
vulnerability VCID-afm2-uj45-xkgx
25
vulnerability VCID-arkn-bca7-hqam
26
vulnerability VCID-c4jv-ws83-x7g2
27
vulnerability VCID-d9ys-kxh6-nkgr
28
vulnerability VCID-dhun-hj5q-dfch
29
vulnerability VCID-dzpn-w4b3-vbcm
30
vulnerability VCID-e2kr-7pmg-gfc9
31
vulnerability VCID-eb37-mkxf-7fgw
32
vulnerability VCID-egye-da2v-4ybh
33
vulnerability VCID-f2zy-gq57-ufat
34
vulnerability VCID-fpuc-fe6m-47c6
35
vulnerability VCID-fyfz-6tr5-2fc7
36
vulnerability VCID-g7bk-891a-uufy
37
vulnerability VCID-g7eg-s99s-xqe7
38
vulnerability VCID-gv12-4ruf-kfhq
39
vulnerability VCID-gyed-x6s8-ybhr
40
vulnerability VCID-h9ds-trhx-m7aj
41
vulnerability VCID-hhk9-cr54-8fgc
42
vulnerability VCID-hmbm-5ysw-77bu
43
vulnerability VCID-hves-r5bg-yfes
44
vulnerability VCID-hxj6-mupf-abbc
45
vulnerability VCID-j2j9-avuw-n3eq
46
vulnerability VCID-jau7-gfz8-dkfa
47
vulnerability VCID-jf7u-dvpd-b7f4
48
vulnerability VCID-kagr-74d9-kyhx
49
vulnerability VCID-kgd1-bzst-muh7
50
vulnerability VCID-kwab-3s4q-eka4
51
vulnerability VCID-kyb8-rvyw-s7b1
52
vulnerability VCID-kzzv-rhya-j7dd
53
vulnerability VCID-m1zd-uytj-3bej
54
vulnerability VCID-mctd-9zgv-5qgp
55
vulnerability VCID-mwk8-b5c9-kbb9
56
vulnerability VCID-n3ab-nk7c-hqc9
57
vulnerability VCID-n76n-ywja-rbhh
58
vulnerability VCID-p4dn-y54m-8fd1
59
vulnerability VCID-p6ch-pc73-b3ck
60
vulnerability VCID-pqxe-tfhk-47b7
61
vulnerability VCID-q6hm-mmfs-zka5
62
vulnerability VCID-quwu-ep21-cyew
63
vulnerability VCID-r5rc-rdd9-bfbk
64
vulnerability VCID-rrdj-ssn7-zfdj
65
vulnerability VCID-ruuh-g3fa-m7d8
66
vulnerability VCID-ryha-ndms-afbn
67
vulnerability VCID-ta1m-dh8x-nubc
68
vulnerability VCID-tcbc-3kgt-muam
69
vulnerability VCID-tfn5-6ckq-wyce
70
vulnerability VCID-tfrs-d458-tfaq
71
vulnerability VCID-vd1s-m27a-8ucc
72
vulnerability VCID-vdnj-sqmx-e3ep
73
vulnerability VCID-w82a-7kk2-p3f1
74
vulnerability VCID-xf8r-kqxb-7qdy
75
vulnerability VCID-xqrn-wuv5-x7de
76
vulnerability VCID-yfx4-4gsc-2kgh
77
vulnerability VCID-ygvw-69am-s7ae
78
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.0
4
url pkg:maven/org.apache.tomcat/tomcat@7.0.35
purl pkg:maven/org.apache.tomcat/tomcat@7.0.35
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-2sbh-sy57-3uez
2
vulnerability VCID-3n4t-bvb1-5qer
3
vulnerability VCID-3r3s-q21j-c3au
4
vulnerability VCID-4aaa-errb-2qdw
5
vulnerability VCID-4mkw-7haq-pkgn
6
vulnerability VCID-7cpu-h5fr-8ffd
7
vulnerability VCID-95d1-arxd-hkd1
8
vulnerability VCID-9exq-fhv6-bbea
9
vulnerability VCID-a1by-zvtm-akdc
10
vulnerability VCID-a8gk-n8bq-87cp
11
vulnerability VCID-aeeu-fpay-wufz
12
vulnerability VCID-afm2-uj45-xkgx
13
vulnerability VCID-arkn-bca7-hqam
14
vulnerability VCID-bxg6-fsmd-6qae
15
vulnerability VCID-dzpn-w4b3-vbcm
16
vulnerability VCID-e2kr-7pmg-gfc9
17
vulnerability VCID-e7kd-kk57-mkd6
18
vulnerability VCID-eb37-mkxf-7fgw
19
vulnerability VCID-f77q-v5xp-e7dy
20
vulnerability VCID-fyfz-6tr5-2fc7
21
vulnerability VCID-g7bk-891a-uufy
22
vulnerability VCID-gv12-4ruf-kfhq
23
vulnerability VCID-h9ds-trhx-m7aj
24
vulnerability VCID-hmbm-5ysw-77bu
25
vulnerability VCID-jf7u-dvpd-b7f4
26
vulnerability VCID-kagr-74d9-kyhx
27
vulnerability VCID-kgd1-bzst-muh7
28
vulnerability VCID-kwab-3s4q-eka4
29
vulnerability VCID-kyb8-rvyw-s7b1
30
vulnerability VCID-kzzv-rhya-j7dd
31
vulnerability VCID-m1zd-uytj-3bej
32
vulnerability VCID-m2zn-ja8d-7kg8
33
vulnerability VCID-ruuh-g3fa-m7d8
34
vulnerability VCID-tcbc-3kgt-muam
35
vulnerability VCID-tfrs-d458-tfaq
36
vulnerability VCID-vhjj-dnft-kkf4
37
vulnerability VCID-w82a-7kk2-p3f1
38
vulnerability VCID-xf8r-kqxb-7qdy
39
vulnerability VCID-yfx4-4gsc-2kgh
40
vulnerability VCID-ygvw-69am-s7ae
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.35
5
url pkg:maven/org.apache.tomcat/tomcat@7.0.37
purl pkg:maven/org.apache.tomcat/tomcat@7.0.37
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-2sbh-sy57-3uez
2
vulnerability VCID-3n4t-bvb1-5qer
3
vulnerability VCID-3r3s-q21j-c3au
4
vulnerability VCID-4aaa-errb-2qdw
5
vulnerability VCID-4mkw-7haq-pkgn
6
vulnerability VCID-7cpu-h5fr-8ffd
7
vulnerability VCID-95d1-arxd-hkd1
8
vulnerability VCID-9exq-fhv6-bbea
9
vulnerability VCID-a1by-zvtm-akdc
10
vulnerability VCID-a8gk-n8bq-87cp
11
vulnerability VCID-aeeu-fpay-wufz
12
vulnerability VCID-afm2-uj45-xkgx
13
vulnerability VCID-arkn-bca7-hqam
14
vulnerability VCID-bxg6-fsmd-6qae
15
vulnerability VCID-dzpn-w4b3-vbcm
16
vulnerability VCID-e2kr-7pmg-gfc9
17
vulnerability VCID-e7kd-kk57-mkd6
18
vulnerability VCID-eb37-mkxf-7fgw
19
vulnerability VCID-f77q-v5xp-e7dy
20
vulnerability VCID-fyfz-6tr5-2fc7
21
vulnerability VCID-g7bk-891a-uufy
22
vulnerability VCID-gv12-4ruf-kfhq
23
vulnerability VCID-h9ds-trhx-m7aj
24
vulnerability VCID-hmbm-5ysw-77bu
25
vulnerability VCID-jf7u-dvpd-b7f4
26
vulnerability VCID-kagr-74d9-kyhx
27
vulnerability VCID-kgd1-bzst-muh7
28
vulnerability VCID-kwab-3s4q-eka4
29
vulnerability VCID-kyb8-rvyw-s7b1
30
vulnerability VCID-kzzv-rhya-j7dd
31
vulnerability VCID-m1zd-uytj-3bej
32
vulnerability VCID-m2zn-ja8d-7kg8
33
vulnerability VCID-ruuh-g3fa-m7d8
34
vulnerability VCID-tcbc-3kgt-muam
35
vulnerability VCID-tfrs-d458-tfaq
36
vulnerability VCID-vhjj-dnft-kkf4
37
vulnerability VCID-w82a-7kk2-p3f1
38
vulnerability VCID-xf8r-kqxb-7qdy
39
vulnerability VCID-yfx4-4gsc-2kgh
40
vulnerability VCID-ygvw-69am-s7ae
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.37
6
url pkg:maven/org.apache.tomcat/tomcat@7.0.39
purl pkg:maven/org.apache.tomcat/tomcat@7.0.39
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-2sbh-sy57-3uez
2
vulnerability VCID-3n4t-bvb1-5qer
3
vulnerability VCID-3r3s-q21j-c3au
4
vulnerability VCID-4aaa-errb-2qdw
5
vulnerability VCID-4mkw-7haq-pkgn
6
vulnerability VCID-7cpu-h5fr-8ffd
7
vulnerability VCID-95d1-arxd-hkd1
8
vulnerability VCID-9exq-fhv6-bbea
9
vulnerability VCID-a1by-zvtm-akdc
10
vulnerability VCID-a8gk-n8bq-87cp
11
vulnerability VCID-aeeu-fpay-wufz
12
vulnerability VCID-afm2-uj45-xkgx
13
vulnerability VCID-arkn-bca7-hqam
14
vulnerability VCID-dzpn-w4b3-vbcm
15
vulnerability VCID-e2kr-7pmg-gfc9
16
vulnerability VCID-e7kd-kk57-mkd6
17
vulnerability VCID-eb37-mkxf-7fgw
18
vulnerability VCID-f77q-v5xp-e7dy
19
vulnerability VCID-fyfz-6tr5-2fc7
20
vulnerability VCID-g7bk-891a-uufy
21
vulnerability VCID-gv12-4ruf-kfhq
22
vulnerability VCID-h9ds-trhx-m7aj
23
vulnerability VCID-hmbm-5ysw-77bu
24
vulnerability VCID-jf7u-dvpd-b7f4
25
vulnerability VCID-kagr-74d9-kyhx
26
vulnerability VCID-kgd1-bzst-muh7
27
vulnerability VCID-kwab-3s4q-eka4
28
vulnerability VCID-kyb8-rvyw-s7b1
29
vulnerability VCID-kzzv-rhya-j7dd
30
vulnerability VCID-m1zd-uytj-3bej
31
vulnerability VCID-m2zn-ja8d-7kg8
32
vulnerability VCID-ruuh-g3fa-m7d8
33
vulnerability VCID-tcbc-3kgt-muam
34
vulnerability VCID-tfrs-d458-tfaq
35
vulnerability VCID-vhjj-dnft-kkf4
36
vulnerability VCID-w82a-7kk2-p3f1
37
vulnerability VCID-xf8r-kqxb-7qdy
38
vulnerability VCID-yfx4-4gsc-2kgh
39
vulnerability VCID-ygvw-69am-s7ae
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.39
References
0
reference_url http://archives.neohapsis.com/archives/bugtraq/2014-09/0075.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://archives.neohapsis.com/archives/bugtraq/2014-09/0075.html
1
reference_url http://marc.info/?l=bugtraq&m=144498216801440&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=144498216801440&w=2
2
reference_url http://openwall.com/lists/oss-security/2014/10/24/12
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2014/10/24/12
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4444.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4444.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-4444
reference_id
reference_type
scores
0
value 0.09487
scoring_system epss
scoring_elements 0.92823
published_at 2026-04-09T12:55:00Z
1
value 0.09487
scoring_system epss
scoring_elements 0.92819
published_at 2026-04-08T12:55:00Z
2
value 0.09487
scoring_system epss
scoring_elements 0.9281
published_at 2026-04-07T12:55:00Z
3
value 0.09487
scoring_system epss
scoring_elements 0.92812
published_at 2026-04-04T12:55:00Z
4
value 0.09487
scoring_system epss
scoring_elements 0.928
published_at 2026-04-01T12:55:00Z
5
value 0.09487
scoring_system epss
scoring_elements 0.92807
published_at 2026-04-02T12:55:00Z
6
value 0.09487
scoring_system epss
scoring_elements 0.92837
published_at 2026-04-16T12:55:00Z
7
value 0.09487
scoring_system epss
scoring_elements 0.92827
published_at 2026-04-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-4444
5
reference_url http://seclists.org/fulldisclosure/2021/Jan/23
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://seclists.org/fulldisclosure/2021/Jan/23
6
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 5.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
7
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
8
reference_url https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04851013
9
reference_url https://svn.apache.org/viewvc?view=rev&rev=1470437
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=1470437
10
reference_url http://tomcat.apache.org/security-7.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-7.html
11
reference_url http://www.debian.org/security/2016/dsa-3447
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2016/dsa-3447
12
reference_url http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
13
reference_url http://www.securityfocus.com/bid/69728
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securityfocus.com/bid/69728
14
reference_url http://www.securitytracker.com/id/1030834
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.securitytracker.com/id/1030834
15
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1140314
reference_id 1140314
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1140314
16
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
17
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.0:*:*:*:*:*:*:*
18
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.0:beta:*:*:*:*:*:*
19
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.1:*:*:*:*:*:*:*
20
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.10:*:*:*:*:*:*:*
21
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.11:*:*:*:*:*:*:*
22
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.12:*:*:*:*:*:*:*
23
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.13:*:*:*:*:*:*:*
24
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.14:*:*:*:*:*:*:*
25
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.15:*:*:*:*:*:*:*
26
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.16:*:*:*:*:*:*:*
27
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.17:*:*:*:*:*:*:*
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.18:*:*:*:*:*:*:*
29
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.19:*:*:*:*:*:*:*
30
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.2:*:*:*:*:*:*:*
31
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.20:*:*:*:*:*:*:*
32
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.21:*:*:*:*:*:*:*
33
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.22:*:*:*:*:*:*:*
34
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.23:*:*:*:*:*:*:*
35
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.24:*:*:*:*:*:*:*
36
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.25:*:*:*:*:*:*:*
37
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.26:*:*:*:*:*:*:*
38
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.27:*:*:*:*:*:*:*
39
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.28:*:*:*:*:*:*:*
40
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.29:*:*:*:*:*:*:*
41
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.2:beta:*:*:*:*:*:*
42
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.3:*:*:*:*:*:*:*
43
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.30:*:*:*:*:*:*:*
44
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.31:*:*:*:*:*:*:*
45
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.32:*:*:*:*:*:*:*
46
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.33:*:*:*:*:*:*:*
47
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.34:*:*:*:*:*:*:*
48
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.35:*:*:*:*:*:*:*
49
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.36:*:*:*:*:*:*:*
50
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.37:*:*:*:*:*:*:*
51
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.38:*:*:*:*:*:*:*
52
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.4:*:*:*:*:*:*:*
53
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:7.0.4:beta:*:*:*:*:*:*
54
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4444
reference_id CVE-2013-4444
reference_type
scores
0
value Important
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4444
55
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-4444
reference_id CVE-2013-4444
reference_type
scores
0
value 6.8
scoring_system cvssv2
scoring_elements AV:N/AC:M/Au:N/C:P/I:P/A:P
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-4444
56
reference_url https://github.com/advisories/GHSA-h6c8-x5r3-pm88
reference_id GHSA-h6c8-x5r3-pm88
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-h6c8-x5r3-pm88
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 78
name Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
description The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 94
name Improper Control of Generation of Code ('Code Injection')
description The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
Exploits
Severity_range_score4.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-e2kr-7pmg-gfc9