Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-bxg6-fsmd-6qae
SummaryThe readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance, a similar issue to CVE-2013-2186. NOTE: this issue is reportedly disputed by the Apache Tomcat team, although Red Hat considers it a vulnerability. The dispute appears to regard whether it is the responsibility of applications to avoid providing untrusted data to be deserialized, or whether this class should inherently protect against this issue
Aliases
0
alias CVE-2013-2185
1
alias GHSA-v6c7-8qx5-8gmp
Fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@7.0.39
purl pkg:maven/org.apache.tomcat/tomcat@7.0.39
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-2sbh-sy57-3uez
2
vulnerability VCID-3n4t-bvb1-5qer
3
vulnerability VCID-3r3s-q21j-c3au
4
vulnerability VCID-4aaa-errb-2qdw
5
vulnerability VCID-4mkw-7haq-pkgn
6
vulnerability VCID-7cpu-h5fr-8ffd
7
vulnerability VCID-95d1-arxd-hkd1
8
vulnerability VCID-9exq-fhv6-bbea
9
vulnerability VCID-a1by-zvtm-akdc
10
vulnerability VCID-a8gk-n8bq-87cp
11
vulnerability VCID-aeeu-fpay-wufz
12
vulnerability VCID-afm2-uj45-xkgx
13
vulnerability VCID-arkn-bca7-hqam
14
vulnerability VCID-dzpn-w4b3-vbcm
15
vulnerability VCID-e2kr-7pmg-gfc9
16
vulnerability VCID-e7kd-kk57-mkd6
17
vulnerability VCID-eb37-mkxf-7fgw
18
vulnerability VCID-f77q-v5xp-e7dy
19
vulnerability VCID-fyfz-6tr5-2fc7
20
vulnerability VCID-g7bk-891a-uufy
21
vulnerability VCID-gv12-4ruf-kfhq
22
vulnerability VCID-h9ds-trhx-m7aj
23
vulnerability VCID-hmbm-5ysw-77bu
24
vulnerability VCID-jf7u-dvpd-b7f4
25
vulnerability VCID-kagr-74d9-kyhx
26
vulnerability VCID-kgd1-bzst-muh7
27
vulnerability VCID-kwab-3s4q-eka4
28
vulnerability VCID-kyb8-rvyw-s7b1
29
vulnerability VCID-kzzv-rhya-j7dd
30
vulnerability VCID-m1zd-uytj-3bej
31
vulnerability VCID-m2zn-ja8d-7kg8
32
vulnerability VCID-ruuh-g3fa-m7d8
33
vulnerability VCID-tcbc-3kgt-muam
34
vulnerability VCID-tfrs-d458-tfaq
35
vulnerability VCID-vhjj-dnft-kkf4
36
vulnerability VCID-w82a-7kk2-p3f1
37
vulnerability VCID-xf8r-kqxb-7qdy
38
vulnerability VCID-yfx4-4gsc-2kgh
39
vulnerability VCID-ygvw-69am-s7ae
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.39
1
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.34
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.34
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-eb37-mkxf-7fgw
3
vulnerability VCID-gv12-4ruf-kfhq
4
vulnerability VCID-kzzv-rhya-j7dd
5
vulnerability VCID-nvbx-q971-skgm
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.34
2
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.40
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.40
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-eb37-mkxf-7fgw
3
vulnerability VCID-gv12-4ruf-kfhq
4
vulnerability VCID-kzzv-rhya-j7dd
5
vulnerability VCID-nvbx-q971-skgm
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.40
3
url pkg:maven/org.jboss.web/jbossweb@7.2.2
purl pkg:maven/org.jboss.web/jbossweb@7.2.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.jboss.web/jbossweb@7.2.2
Affected_packages
0
url pkg:maven/org.apache.tomcat/tomcat@7.0.35
purl pkg:maven/org.apache.tomcat/tomcat@7.0.35
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-2sbh-sy57-3uez
2
vulnerability VCID-3n4t-bvb1-5qer
3
vulnerability VCID-3r3s-q21j-c3au
4
vulnerability VCID-4aaa-errb-2qdw
5
vulnerability VCID-4mkw-7haq-pkgn
6
vulnerability VCID-7cpu-h5fr-8ffd
7
vulnerability VCID-95d1-arxd-hkd1
8
vulnerability VCID-9exq-fhv6-bbea
9
vulnerability VCID-a1by-zvtm-akdc
10
vulnerability VCID-a8gk-n8bq-87cp
11
vulnerability VCID-aeeu-fpay-wufz
12
vulnerability VCID-afm2-uj45-xkgx
13
vulnerability VCID-arkn-bca7-hqam
14
vulnerability VCID-bxg6-fsmd-6qae
15
vulnerability VCID-dzpn-w4b3-vbcm
16
vulnerability VCID-e2kr-7pmg-gfc9
17
vulnerability VCID-e7kd-kk57-mkd6
18
vulnerability VCID-eb37-mkxf-7fgw
19
vulnerability VCID-f77q-v5xp-e7dy
20
vulnerability VCID-fyfz-6tr5-2fc7
21
vulnerability VCID-g7bk-891a-uufy
22
vulnerability VCID-gv12-4ruf-kfhq
23
vulnerability VCID-h9ds-trhx-m7aj
24
vulnerability VCID-hmbm-5ysw-77bu
25
vulnerability VCID-jf7u-dvpd-b7f4
26
vulnerability VCID-kagr-74d9-kyhx
27
vulnerability VCID-kgd1-bzst-muh7
28
vulnerability VCID-kwab-3s4q-eka4
29
vulnerability VCID-kyb8-rvyw-s7b1
30
vulnerability VCID-kzzv-rhya-j7dd
31
vulnerability VCID-m1zd-uytj-3bej
32
vulnerability VCID-m2zn-ja8d-7kg8
33
vulnerability VCID-ruuh-g3fa-m7d8
34
vulnerability VCID-tcbc-3kgt-muam
35
vulnerability VCID-tfrs-d458-tfaq
36
vulnerability VCID-vhjj-dnft-kkf4
37
vulnerability VCID-w82a-7kk2-p3f1
38
vulnerability VCID-xf8r-kqxb-7qdy
39
vulnerability VCID-yfx4-4gsc-2kgh
40
vulnerability VCID-ygvw-69am-s7ae
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.35
1
url pkg:maven/org.apache.tomcat/tomcat@7.0.37
purl pkg:maven/org.apache.tomcat/tomcat@7.0.37
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-2sbh-sy57-3uez
2
vulnerability VCID-3n4t-bvb1-5qer
3
vulnerability VCID-3r3s-q21j-c3au
4
vulnerability VCID-4aaa-errb-2qdw
5
vulnerability VCID-4mkw-7haq-pkgn
6
vulnerability VCID-7cpu-h5fr-8ffd
7
vulnerability VCID-95d1-arxd-hkd1
8
vulnerability VCID-9exq-fhv6-bbea
9
vulnerability VCID-a1by-zvtm-akdc
10
vulnerability VCID-a8gk-n8bq-87cp
11
vulnerability VCID-aeeu-fpay-wufz
12
vulnerability VCID-afm2-uj45-xkgx
13
vulnerability VCID-arkn-bca7-hqam
14
vulnerability VCID-bxg6-fsmd-6qae
15
vulnerability VCID-dzpn-w4b3-vbcm
16
vulnerability VCID-e2kr-7pmg-gfc9
17
vulnerability VCID-e7kd-kk57-mkd6
18
vulnerability VCID-eb37-mkxf-7fgw
19
vulnerability VCID-f77q-v5xp-e7dy
20
vulnerability VCID-fyfz-6tr5-2fc7
21
vulnerability VCID-g7bk-891a-uufy
22
vulnerability VCID-gv12-4ruf-kfhq
23
vulnerability VCID-h9ds-trhx-m7aj
24
vulnerability VCID-hmbm-5ysw-77bu
25
vulnerability VCID-jf7u-dvpd-b7f4
26
vulnerability VCID-kagr-74d9-kyhx
27
vulnerability VCID-kgd1-bzst-muh7
28
vulnerability VCID-kwab-3s4q-eka4
29
vulnerability VCID-kyb8-rvyw-s7b1
30
vulnerability VCID-kzzv-rhya-j7dd
31
vulnerability VCID-m1zd-uytj-3bej
32
vulnerability VCID-m2zn-ja8d-7kg8
33
vulnerability VCID-ruuh-g3fa-m7d8
34
vulnerability VCID-tcbc-3kgt-muam
35
vulnerability VCID-tfrs-d458-tfaq
36
vulnerability VCID-vhjj-dnft-kkf4
37
vulnerability VCID-w82a-7kk2-p3f1
38
vulnerability VCID-xf8r-kqxb-7qdy
39
vulnerability VCID-yfx4-4gsc-2kgh
40
vulnerability VCID-ygvw-69am-s7ae
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.37
2
url pkg:maven/org.apache.tomcat/tomcat-coyote@7-alpha0
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7-alpha0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bxg6-fsmd-6qae
1
vulnerability VCID-gv12-4ruf-kfhq
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7-alpha0
3
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.0
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.0
4
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.2
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.2
5
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.4
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.4
6
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.5
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.5
7
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.6
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.6
8
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.8
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.8
9
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.11
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.11
10
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.12
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.12
11
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.14
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.14
12
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.16
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.16
13
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.19
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.19
14
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.20
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.20
15
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.21
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.21
16
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.22
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.22
17
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.23
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.23
18
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.25
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.25
19
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.26
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.26
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.26
20
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.27
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.27
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-nvbx-q971-skgm
7
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.27
21
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.28
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-nvbx-q971-skgm
7
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.28
22
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.29
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-nvbx-q971-skgm
7
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.29
23
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.30
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.30
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-nvbx-q971-skgm
7
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.30
24
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.32
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.32
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-nvbx-q971-skgm
7
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.32
25
url pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.33
purl pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.33
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3r3s-q21j-c3au
1
vulnerability VCID-a8gk-n8bq-87cp
2
vulnerability VCID-bxg6-fsmd-6qae
3
vulnerability VCID-eb37-mkxf-7fgw
4
vulnerability VCID-gv12-4ruf-kfhq
5
vulnerability VCID-kzzv-rhya-j7dd
6
vulnerability VCID-nvbx-q971-skgm
7
vulnerability VCID-yfx4-4gsc-2kgh
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat-coyote@7.0.33
26
url pkg:rpm/redhat/jbossweb@7.2.0-3.redhat_2.ep6?arch=el6
purl pkg:rpm/redhat/jbossweb@7.2.0-3.redhat_2.ep6?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bxg6-fsmd-6qae
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@7.2.0-3.redhat_2.ep6%3Farch=el6
27
url pkg:rpm/redhat/jbossweb@7.2.0-3.redhat_2.ep6?arch=el5
purl pkg:rpm/redhat/jbossweb@7.2.0-3.redhat_2.ep6?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bxg6-fsmd-6qae
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@7.2.0-3.redhat_2.ep6%3Farch=el5
References
0
reference_url http://openwall.com/lists/oss-security/2014/10/24/12
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2014/10/24/12
1
reference_url http://rhn.redhat.com/errata/RHSA-2013-1193.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-1193.html
2
reference_url http://rhn.redhat.com/errata/RHSA-2013-1194.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-1194.html
3
reference_url http://rhn.redhat.com/errata/RHSA-2013-1265.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-1265.html
4
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2185.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-2185.json
5
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-2185
reference_id
reference_type
scores
0
value 0.05286
scoring_system epss
scoring_elements 0.89969
published_at 2026-04-02T12:55:00Z
1
value 0.05286
scoring_system epss
scoring_elements 0.90015
published_at 2026-04-12T12:55:00Z
2
value 0.05286
scoring_system epss
scoring_elements 0.89981
published_at 2026-04-04T12:55:00Z
3
value 0.05286
scoring_system epss
scoring_elements 0.89987
published_at 2026-04-07T12:55:00Z
4
value 0.05286
scoring_system epss
scoring_elements 0.90003
published_at 2026-04-08T12:55:00Z
5
value 0.05286
scoring_system epss
scoring_elements 0.90017
published_at 2026-04-11T12:55:00Z
6
value 0.05286
scoring_system epss
scoring_elements 0.90009
published_at 2026-04-13T12:55:00Z
7
value 0.05286
scoring_system epss
scoring_elements 0.90026
published_at 2026-04-18T12:55:00Z
8
value 0.05286
scoring_system epss
scoring_elements 0.90025
published_at 2026-04-16T12:55:00Z
9
value 0.05286
scoring_system epss
scoring_elements 0.89967
published_at 2026-04-01T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-2185
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2185
reference_id
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2013-2185
7
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
8
reference_url https://github.com/apache/tomcat/commit/e246e5fc13307da0a5d3bbf860d64d97be1c40f8
reference_id
reference_type
scores
url https://github.com/apache/tomcat/commit/e246e5fc13307da0a5d3bbf860d64d97be1c40f8
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2013-2185
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2013-2185
10
reference_url http://www.openwall.com/lists/oss-security/2013/09/05/4
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.openwall.com/lists/oss-security/2013/09/05/4
11
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=974813
reference_id 974813
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=974813
12
reference_url https://github.com/advisories/GHSA-v6c7-8qx5-8gmp
reference_id GHSA-v6c7-8qx5-8gmp
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v6c7-8qx5-8gmp
13
reference_url https://access.redhat.com/errata/RHSA-2013:1193
reference_id RHSA-2013:1193
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1193
14
reference_url https://access.redhat.com/errata/RHSA-2013:1194
reference_id RHSA-2013:1194
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1194
15
reference_url https://access.redhat.com/errata/RHSA-2013:1265
reference_id RHSA-2013:1265
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1265
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 20
name Improper Input Validation
description The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 502
name Deserialization of Untrusted Data
description The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.
4
cwe_id 626
name Null Byte Interaction Error (Poison Null Byte)
description The product does not properly handle null bytes or NUL characters when passing data between different representations or components.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-bxg6-fsmd-6qae