Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-wsn2-pd9b-b3g8
SummaryDirectory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename, as demonstrated by the ...war filename.
Aliases
0
alias CVE-2009-2902
1
alias GHSA-8wch-9gcg-v2pr
Fixed_packages
0
url pkg:apache/tomcat@5.5.29
purl pkg:apache/tomcat@5.5.29
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-7kjm-p97s-zuh8
1
vulnerability VCID-f2zy-gq57-ufat
2
vulnerability VCID-tfn5-6ckq-wyce
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.29
1
url pkg:apache/tomcat@6.0.24
purl pkg:apache/tomcat@6.0.24
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.24
2
url pkg:ebuild/www-servers/tomcat@7.0.23
purl pkg:ebuild/www-servers/tomcat@7.0.23
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/tomcat@7.0.23
Affected_packages
0
url pkg:apache/tomcat@5.5.0
purl pkg:apache/tomcat@5.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18j8-kwdv-dyak
1
vulnerability VCID-1qt3-ctae-sfgw
2
vulnerability VCID-241m-q6vd-kudk
3
vulnerability VCID-27q8-96un-9fbk
4
vulnerability VCID-2jnv-segx-zkfd
5
vulnerability VCID-4rcx-xfn5-7kdb
6
vulnerability VCID-6epr-2hbd-skcz
7
vulnerability VCID-6p3e-4u8s-17ep
8
vulnerability VCID-7969-7a8h-zyhh
9
vulnerability VCID-7kjm-p97s-zuh8
10
vulnerability VCID-86ur-vudp-4yc2
11
vulnerability VCID-87p8-zvvf-y7dm
12
vulnerability VCID-88v7-kc2y-bfd7
13
vulnerability VCID-a9cu-fxqw-xkdg
14
vulnerability VCID-acmu-9eqb-fya5
15
vulnerability VCID-bhq7-d545-27bj
16
vulnerability VCID-bung-pa58-ayfv
17
vulnerability VCID-d9ys-kxh6-nkgr
18
vulnerability VCID-dcrp-rae1-zfcm
19
vulnerability VCID-dhun-hj5q-dfch
20
vulnerability VCID-f2zy-gq57-ufat
21
vulnerability VCID-fvvt-kufu-k3a6
22
vulnerability VCID-g998-xymt-fudu
23
vulnerability VCID-hhk9-cr54-8fgc
24
vulnerability VCID-mctd-9zgv-5qgp
25
vulnerability VCID-mnf8-t3ew-4fgb
26
vulnerability VCID-n76n-ywja-rbhh
27
vulnerability VCID-peya-mr7j-vugf
28
vulnerability VCID-q7jp-hn4a-4kec
29
vulnerability VCID-qdck-q54n-rkcv
30
vulnerability VCID-quwu-ep21-cyew
31
vulnerability VCID-qxkf-4ddv-j3b7
32
vulnerability VCID-r84b-7ay9-ekcm
33
vulnerability VCID-skar-qk57-qkdv
34
vulnerability VCID-su1y-2bxh-9qe2
35
vulnerability VCID-tcju-3rvu-wkht
36
vulnerability VCID-tfn5-6ckq-wyce
37
vulnerability VCID-v94p-bxm3-akfd
38
vulnerability VCID-vm4b-26sq-tfev
39
vulnerability VCID-wsn2-pd9b-b3g8
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.0
1
url pkg:apache/tomcat@5.5.28
purl pkg:apache/tomcat@5.5.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-g998-xymt-fudu
2
vulnerability VCID-vm4b-26sq-tfev
3
vulnerability VCID-wsn2-pd9b-b3g8
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.28
2
url pkg:apache/tomcat@6.0.0
purl pkg:apache/tomcat@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-18q4-zark-s7a7
1
vulnerability VCID-1k8f-vsg1-k3d6
2
vulnerability VCID-1qt3-ctae-sfgw
3
vulnerability VCID-241m-q6vd-kudk
4
vulnerability VCID-27q8-96un-9fbk
5
vulnerability VCID-3cr9-g81m-4ugy
6
vulnerability VCID-3n4t-bvb1-5qer
7
vulnerability VCID-3r3s-q21j-c3au
8
vulnerability VCID-4mkw-7haq-pkgn
9
vulnerability VCID-4rcx-xfn5-7kdb
10
vulnerability VCID-68fk-4g86-ekbp
11
vulnerability VCID-6epr-2hbd-skcz
12
vulnerability VCID-6p3e-4u8s-17ep
13
vulnerability VCID-7969-7a8h-zyhh
14
vulnerability VCID-7cpu-h5fr-8ffd
15
vulnerability VCID-7ej8-5f77-cybb
16
vulnerability VCID-7kjm-p97s-zuh8
17
vulnerability VCID-7pd9-1r19-73fe
18
vulnerability VCID-87p8-zvvf-y7dm
19
vulnerability VCID-88v7-kc2y-bfd7
20
vulnerability VCID-95d1-arxd-hkd1
21
vulnerability VCID-a1by-zvtm-akdc
22
vulnerability VCID-a9cu-fxqw-xkdg
23
vulnerability VCID-acmu-9eqb-fya5
24
vulnerability VCID-bung-pa58-ayfv
25
vulnerability VCID-d9ys-kxh6-nkgr
26
vulnerability VCID-dcrp-rae1-zfcm
27
vulnerability VCID-dhun-hj5q-dfch
28
vulnerability VCID-egup-27ub-6uaf
29
vulnerability VCID-f2zy-gq57-ufat
30
vulnerability VCID-fpuc-fe6m-47c6
31
vulnerability VCID-g998-xymt-fudu
32
vulnerability VCID-h9ds-trhx-m7aj
33
vulnerability VCID-hhk9-cr54-8fgc
34
vulnerability VCID-hhkg-mfp5-2kax
35
vulnerability VCID-jf7u-dvpd-b7f4
36
vulnerability VCID-kagr-74d9-kyhx
37
vulnerability VCID-kgd1-bzst-muh7
38
vulnerability VCID-kzzv-rhya-j7dd
39
vulnerability VCID-m1zd-uytj-3bej
40
vulnerability VCID-mctd-9zgv-5qgp
41
vulnerability VCID-mnf8-t3ew-4fgb
42
vulnerability VCID-mwk8-b5c9-kbb9
43
vulnerability VCID-n76n-ywja-rbhh
44
vulnerability VCID-p4dn-y54m-8fd1
45
vulnerability VCID-p6ch-pc73-b3ck
46
vulnerability VCID-peya-mr7j-vugf
47
vulnerability VCID-qdck-q54n-rkcv
48
vulnerability VCID-quwu-ep21-cyew
49
vulnerability VCID-qxkf-4ddv-j3b7
50
vulnerability VCID-r84b-7ay9-ekcm
51
vulnerability VCID-su1y-2bxh-9qe2
52
vulnerability VCID-tcbc-3kgt-muam
53
vulnerability VCID-tcju-3rvu-wkht
54
vulnerability VCID-tfn5-6ckq-wyce
55
vulnerability VCID-tfrs-d458-tfaq
56
vulnerability VCID-twh8-87va-juf9
57
vulnerability VCID-v94p-bxm3-akfd
58
vulnerability VCID-vd1s-m27a-8ucc
59
vulnerability VCID-vm4b-26sq-tfev
60
vulnerability VCID-w82a-7kk2-p3f1
61
vulnerability VCID-wsn2-pd9b-b3g8
62
vulnerability VCID-xf8r-kqxb-7qdy
63
vulnerability VCID-ygvw-69am-s7ae
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.0
3
url pkg:apache/tomcat@6.0.20
purl pkg:apache/tomcat@6.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-g998-xymt-fudu
2
vulnerability VCID-vm4b-26sq-tfev
3
vulnerability VCID-wsn2-pd9b-b3g8
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.20
4
url pkg:maven/org.apache.tomcat/tomcat@5.5.0
purl pkg:maven/org.apache.tomcat/tomcat@5.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-18j8-kwdv-dyak
2
vulnerability VCID-1qt3-ctae-sfgw
3
vulnerability VCID-1v6c-f56v-hqh1
4
vulnerability VCID-241m-q6vd-kudk
5
vulnerability VCID-27q8-96un-9fbk
6
vulnerability VCID-2jnv-segx-zkfd
7
vulnerability VCID-4rcx-xfn5-7kdb
8
vulnerability VCID-6epr-2hbd-skcz
9
vulnerability VCID-6p3e-4u8s-17ep
10
vulnerability VCID-7969-7a8h-zyhh
11
vulnerability VCID-7kjm-p97s-zuh8
12
vulnerability VCID-86ur-vudp-4yc2
13
vulnerability VCID-87p8-zvvf-y7dm
14
vulnerability VCID-88v7-kc2y-bfd7
15
vulnerability VCID-8ebv-6941-jqdy
16
vulnerability VCID-a9cu-fxqw-xkdg
17
vulnerability VCID-acmu-9eqb-fya5
18
vulnerability VCID-bhq7-d545-27bj
19
vulnerability VCID-bung-pa58-ayfv
20
vulnerability VCID-d9ys-kxh6-nkgr
21
vulnerability VCID-dcrp-rae1-zfcm
22
vulnerability VCID-dhun-hj5q-dfch
23
vulnerability VCID-egye-da2v-4ybh
24
vulnerability VCID-f2zy-gq57-ufat
25
vulnerability VCID-fvvt-kufu-k3a6
26
vulnerability VCID-g7eg-s99s-xqe7
27
vulnerability VCID-g998-xymt-fudu
28
vulnerability VCID-hhk9-cr54-8fgc
29
vulnerability VCID-mctd-9zgv-5qgp
30
vulnerability VCID-mnf8-t3ew-4fgb
31
vulnerability VCID-n76n-ywja-rbhh
32
vulnerability VCID-peya-mr7j-vugf
33
vulnerability VCID-q7jp-hn4a-4kec
34
vulnerability VCID-qdck-q54n-rkcv
35
vulnerability VCID-quwu-ep21-cyew
36
vulnerability VCID-qxkf-4ddv-j3b7
37
vulnerability VCID-r5rc-rdd9-bfbk
38
vulnerability VCID-r84b-7ay9-ekcm
39
vulnerability VCID-rrdj-ssn7-zfdj
40
vulnerability VCID-rwvj-tq6x-2ubs
41
vulnerability VCID-skar-qk57-qkdv
42
vulnerability VCID-su1y-2bxh-9qe2
43
vulnerability VCID-tcju-3rvu-wkht
44
vulnerability VCID-tfn5-6ckq-wyce
45
vulnerability VCID-v94p-bxm3-akfd
46
vulnerability VCID-vm4b-26sq-tfev
47
vulnerability VCID-wsn2-pd9b-b3g8
48
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.0
5
url pkg:maven/org.apache.tomcat/tomcat@5.5.28
purl pkg:maven/org.apache.tomcat/tomcat@5.5.28
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-g998-xymt-fudu
2
vulnerability VCID-vm4b-26sq-tfev
3
vulnerability VCID-wsn2-pd9b-b3g8
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.28
6
url pkg:maven/org.apache.tomcat/tomcat@6.0.0
purl pkg:maven/org.apache.tomcat/tomcat@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-18q4-zark-s7a7
2
vulnerability VCID-1k8f-vsg1-k3d6
3
vulnerability VCID-1qt3-ctae-sfgw
4
vulnerability VCID-1v6c-f56v-hqh1
5
vulnerability VCID-241m-q6vd-kudk
6
vulnerability VCID-27q8-96un-9fbk
7
vulnerability VCID-3cr9-g81m-4ugy
8
vulnerability VCID-3n4t-bvb1-5qer
9
vulnerability VCID-3r3s-q21j-c3au
10
vulnerability VCID-4mkw-7haq-pkgn
11
vulnerability VCID-4rcx-xfn5-7kdb
12
vulnerability VCID-68fk-4g86-ekbp
13
vulnerability VCID-6epr-2hbd-skcz
14
vulnerability VCID-6p3e-4u8s-17ep
15
vulnerability VCID-7969-7a8h-zyhh
16
vulnerability VCID-7cpu-h5fr-8ffd
17
vulnerability VCID-7ej8-5f77-cybb
18
vulnerability VCID-7kjm-p97s-zuh8
19
vulnerability VCID-7pd9-1r19-73fe
20
vulnerability VCID-87p8-zvvf-y7dm
21
vulnerability VCID-88v7-kc2y-bfd7
22
vulnerability VCID-8ebv-6941-jqdy
23
vulnerability VCID-95d1-arxd-hkd1
24
vulnerability VCID-a1by-zvtm-akdc
25
vulnerability VCID-a9cu-fxqw-xkdg
26
vulnerability VCID-acmu-9eqb-fya5
27
vulnerability VCID-bung-pa58-ayfv
28
vulnerability VCID-d9ys-kxh6-nkgr
29
vulnerability VCID-dcrp-rae1-zfcm
30
vulnerability VCID-dhun-hj5q-dfch
31
vulnerability VCID-egup-27ub-6uaf
32
vulnerability VCID-egye-da2v-4ybh
33
vulnerability VCID-f2zy-gq57-ufat
34
vulnerability VCID-fpuc-fe6m-47c6
35
vulnerability VCID-g7eg-s99s-xqe7
36
vulnerability VCID-g998-xymt-fudu
37
vulnerability VCID-h9ds-trhx-m7aj
38
vulnerability VCID-hhk9-cr54-8fgc
39
vulnerability VCID-hhkg-mfp5-2kax
40
vulnerability VCID-jau7-gfz8-dkfa
41
vulnerability VCID-jf7u-dvpd-b7f4
42
vulnerability VCID-jtg7-217a-qqhk
43
vulnerability VCID-kagr-74d9-kyhx
44
vulnerability VCID-kgd1-bzst-muh7
45
vulnerability VCID-kzzv-rhya-j7dd
46
vulnerability VCID-m1zd-uytj-3bej
47
vulnerability VCID-mctd-9zgv-5qgp
48
vulnerability VCID-mnf8-t3ew-4fgb
49
vulnerability VCID-mwk8-b5c9-kbb9
50
vulnerability VCID-n76n-ywja-rbhh
51
vulnerability VCID-p4dn-y54m-8fd1
52
vulnerability VCID-p6ch-pc73-b3ck
53
vulnerability VCID-peya-mr7j-vugf
54
vulnerability VCID-qdck-q54n-rkcv
55
vulnerability VCID-quwu-ep21-cyew
56
vulnerability VCID-qxkf-4ddv-j3b7
57
vulnerability VCID-r5rc-rdd9-bfbk
58
vulnerability VCID-r84b-7ay9-ekcm
59
vulnerability VCID-rrdj-ssn7-zfdj
60
vulnerability VCID-rwvj-tq6x-2ubs
61
vulnerability VCID-su1y-2bxh-9qe2
62
vulnerability VCID-t9y6-suc2-2kcg
63
vulnerability VCID-ta1m-dh8x-nubc
64
vulnerability VCID-tcbc-3kgt-muam
65
vulnerability VCID-tcju-3rvu-wkht
66
vulnerability VCID-tfn5-6ckq-wyce
67
vulnerability VCID-tfrs-d458-tfaq
68
vulnerability VCID-twh8-87va-juf9
69
vulnerability VCID-v94p-bxm3-akfd
70
vulnerability VCID-vd1s-m27a-8ucc
71
vulnerability VCID-vm4b-26sq-tfev
72
vulnerability VCID-w82a-7kk2-p3f1
73
vulnerability VCID-wsn2-pd9b-b3g8
74
vulnerability VCID-xf8r-kqxb-7qdy
75
vulnerability VCID-ygvw-69am-s7ae
76
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.0
7
url pkg:maven/org.apache.tomcat/tomcat@6.0.20
purl pkg:maven/org.apache.tomcat/tomcat@6.0.20
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-g998-xymt-fudu
2
vulnerability VCID-vm4b-26sq-tfev
3
vulnerability VCID-wsn2-pd9b-b3g8
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.20
8
url pkg:rpm/redhat/glassfish-jsf@1.2_13-2.ep5?arch=el4
purl pkg:rpm/redhat/glassfish-jsf@1.2_13-2.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/glassfish-jsf@1.2_13-2.ep5%3Farch=el4
9
url pkg:rpm/redhat/glassfish-jsf@1.2_13-3.ep5?arch=el5
purl pkg:rpm/redhat/glassfish-jsf@1.2_13-3.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/glassfish-jsf@1.2_13-3.ep5%3Farch=el5
10
url pkg:rpm/redhat/httpd@2.2.14-1.2.1.ep5?arch=el5
purl pkg:rpm/redhat/httpd@2.2.14-1.2.1.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/httpd@2.2.14-1.2.1.ep5%3Farch=el5
11
url pkg:rpm/redhat/httpd22@2.2.14-4.ep5?arch=el4
purl pkg:rpm/redhat/httpd22@2.2.14-4.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/httpd22@2.2.14-4.ep5%3Farch=el4
12
url pkg:rpm/redhat/jakarta-commons-chain@1.2-2.1.ep5?arch=el4
purl pkg:rpm/redhat/jakarta-commons-chain@1.2-2.1.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-chain@1.2-2.1.ep5%3Farch=el4
13
url pkg:rpm/redhat/jakarta-commons-chain@1.2-2.1.1.ep5?arch=el5
purl pkg:rpm/redhat/jakarta-commons-chain@1.2-2.1.1.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-chain@1.2-2.1.1.ep5%3Farch=el5
14
url pkg:rpm/redhat/jakarta-commons-digester@1.8.1-7.ep5?arch=el4
purl pkg:rpm/redhat/jakarta-commons-digester@1.8.1-7.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-digester@1.8.1-7.ep5%3Farch=el4
15
url pkg:rpm/redhat/jakarta-commons-io@1.4-1.ep5?arch=el4
purl pkg:rpm/redhat/jakarta-commons-io@1.4-1.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-io@1.4-1.ep5%3Farch=el4
16
url pkg:rpm/redhat/jakarta-commons-io@1.4-1.1.ep5?arch=el5
purl pkg:rpm/redhat/jakarta-commons-io@1.4-1.1.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-io@1.4-1.1.ep5%3Farch=el5
17
url pkg:rpm/redhat/jakarta-commons-modeler@2.0-3.3.ep5?arch=el4
purl pkg:rpm/redhat/jakarta-commons-modeler@2.0-3.3.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-modeler@2.0-3.3.ep5%3Farch=el4
18
url pkg:rpm/redhat/jakarta-commons-validator@1.3.1-7.4.ep5?arch=el4
purl pkg:rpm/redhat/jakarta-commons-validator@1.3.1-7.4.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-validator@1.3.1-7.4.ep5%3Farch=el4
19
url pkg:rpm/redhat/jakarta-oro@2.0.8-3jpp.ep1.3.ep5?arch=el4
purl pkg:rpm/redhat/jakarta-oro@2.0.8-3jpp.ep1.3.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-oro@2.0.8-3jpp.ep1.3.ep5%3Farch=el4
20
url pkg:rpm/redhat/jakarta-oro@2.0.8-3.1.ep5?arch=el5
purl pkg:rpm/redhat/jakarta-oro@2.0.8-3.1.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-oro@2.0.8-3.1.ep5%3Farch=el5
21
url pkg:rpm/redhat/jboss-javaee@5.0.1-2.3.ep5?arch=el4
purl pkg:rpm/redhat/jboss-javaee@5.0.1-2.3.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-javaee@5.0.1-2.3.ep5%3Farch=el4
22
url pkg:rpm/redhat/mod_jk@1.2.28-4.ep5?arch=el4
purl pkg:rpm/redhat/mod_jk@1.2.28-4.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mod_jk@1.2.28-4.ep5%3Farch=el4
23
url pkg:rpm/redhat/mod_jk@1.2.28-4.1.ep5?arch=el5
purl pkg:rpm/redhat/mod_jk@1.2.28-4.1.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mod_jk@1.2.28-4.1.ep5%3Farch=el5
24
url pkg:rpm/redhat/struts12@1.2.9-2.ep5?arch=el5
purl pkg:rpm/redhat/struts12@1.2.9-2.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/struts12@1.2.9-2.ep5%3Farch=el5
25
url pkg:rpm/redhat/struts12@1.2.9-2.ep5?arch=el4
purl pkg:rpm/redhat/struts12@1.2.9-2.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/struts12@1.2.9-2.ep5%3Farch=el4
26
url pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh?arch=17
purl pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh?arch=17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-f2zy-gq57-ufat
2
vulnerability VCID-wsn2-pd9b-b3g8
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh%3Farch=17
27
url pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh?arch=19
purl pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh?arch=19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-f2zy-gq57-ufat
2
vulnerability VCID-wsn2-pd9b-b3g8
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh%3Farch=19
28
url pkg:rpm/redhat/tomcat5@5.5.23-0jpp.9?arch=el5_5
purl pkg:rpm/redhat/tomcat5@5.5.23-0jpp.9?arch=el5_5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-d3qr-b9n1-5bg4
2
vulnerability VCID-f2zy-gq57-ufat
3
vulnerability VCID-wsn2-pd9b-b3g8
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.23-0jpp.9%3Farch=el5_5
29
url pkg:rpm/redhat/tomcat5@5.5.28-7.ep5?arch=el4
purl pkg:rpm/redhat/tomcat5@5.5.28-7.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.28-7.ep5%3Farch=el4
30
url pkg:rpm/redhat/tomcat5@5.5.28-7.1.ep5?arch=el5
purl pkg:rpm/redhat/tomcat5@5.5.28-7.1.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.28-7.1.ep5%3Farch=el5
31
url pkg:rpm/redhat/tomcat6@6.0.24-2.ep5?arch=el4
purl pkg:rpm/redhat/tomcat6@6.0.24-2.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat6@6.0.24-2.ep5%3Farch=el4
32
url pkg:rpm/redhat/tomcat6@6.0.24-2.1.ep5?arch=el5
purl pkg:rpm/redhat/tomcat6@6.0.24-2.1.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat6@6.0.24-2.1.ep5%3Farch=el5
33
url pkg:rpm/redhat/tomcat-native@1.1.19-2.0.ep5?arch=el4
purl pkg:rpm/redhat/tomcat-native@1.1.19-2.0.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat-native@1.1.19-2.0.ep5%3Farch=el4
34
url pkg:rpm/redhat/tomcat-native@1.1.19-2.0.1.ep5?arch=el5
purl pkg:rpm/redhat/tomcat-native@1.1.19-2.0.1.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat-native@1.1.19-2.0.1.ep5%3Farch=el5
35
url pkg:rpm/redhat/xerces-j2@2.9.1-2.2_patch_01.ep5?arch=el4
purl pkg:rpm/redhat/xerces-j2@2.9.1-2.2_patch_01.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/xerces-j2@2.9.1-2.2_patch_01.ep5%3Farch=el4
36
url pkg:rpm/redhat/xml-commons-resolver12@1:1.2-1.1.ep5?arch=el4
purl pkg:rpm/redhat/xml-commons-resolver12@1:1.2-1.1.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1qt3-ctae-sfgw
1
vulnerability VCID-jau7-gfz8-dkfa
2
vulnerability VCID-wsn2-pd9b-b3g8
3
vulnerability VCID-y94t-fwsg-sfey
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/xml-commons-resolver12@1:1.2-1.1.ep5%3Farch=el4
References
0
reference_url http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
1
reference_url http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html
2
reference_url http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
3
reference_url http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
4
reference_url http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html
5
reference_url http://marc.info/?l=bugtraq&m=127420533226623&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=127420533226623&w=2
6
reference_url http://marc.info/?l=bugtraq&m=133469267822771&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=133469267822771&w=2
7
reference_url http://marc.info/?l=bugtraq&m=136485229118404&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=136485229118404&w=2
8
reference_url http://marc.info/?l=bugtraq&m=139344343412337&w=2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=139344343412337&w=2
9
reference_url https://access.redhat.com/errata/RHSA-2010:0119
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2010:0119
10
reference_url https://access.redhat.com/errata/RHSA-2010:0580
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2010:0580
11
reference_url https://access.redhat.com/errata/RHSA-2010:0582
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2010:0582
12
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2902.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2902.json
13
reference_url https://api.first.org/data/v1/epss?cve=CVE-2009-2902
reference_id
reference_type
scores
0
value 0.1008
scoring_system epss
scoring_elements 0.93083
published_at 2026-04-13T12:55:00Z
1
value 0.1008
scoring_system epss
scoring_elements 0.93066
published_at 2026-04-07T12:55:00Z
2
value 0.1008
scoring_system epss
scoring_elements 0.93081
published_at 2026-04-12T12:55:00Z
3
value 0.1008
scoring_system epss
scoring_elements 0.93067
published_at 2026-04-04T12:55:00Z
4
value 0.1008
scoring_system epss
scoring_elements 0.93063
published_at 2026-04-02T12:55:00Z
5
value 0.1008
scoring_system epss
scoring_elements 0.93054
published_at 2026-04-01T12:55:00Z
6
value 0.1008
scoring_system epss
scoring_elements 0.93074
published_at 2026-04-08T12:55:00Z
7
value 0.1008
scoring_system epss
scoring_elements 0.93079
published_at 2026-04-09T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2009-2902
14
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/55857
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/55857
15
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
16
reference_url https://github.com/apache/tomcat55/commit/0299cb724ea71f304d54adfcdb950f59b01fb421
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat55/commit/0299cb724ea71f304d54adfcdb950f59b01fb421
17
reference_url https://github.com/apache/tomcat/commit/3e1010b1a2f648581fac3d68afbf18f2979f6bf6
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat/commit/3e1010b1a2f648581fac3d68afbf18f2979f6bf6
18
reference_url https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E
19
reference_url https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E
20
reference_url https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E
21
reference_url https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E
22
reference_url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19431
reference_id
reference_type
scores
url https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19431
23
reference_url https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:19431
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:19431
24
reference_url https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:7092
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:7092
25
reference_url https://support.apple.com/kb/HT4077
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://support.apple.com/kb/HT4077
26
reference_url https://support.hpe.com/hpesc/public/docDisplay?docId=c02241113
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://support.hpe.com/hpesc/public/docDisplay?docId=c02241113
27
reference_url https://svn.apache.org/viewvc?view=rev&rev=892815
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=892815
28
reference_url https://svn.apache.org/viewvc?view=rev&rev=902650
reference_id
reference_type
scores
url https://svn.apache.org/viewvc?view=rev&rev=902650
29
reference_url http://support.apple.com/kb/HT4077
reference_id
reference_type
scores
url http://support.apple.com/kb/HT4077
30
reference_url http://svn.apache.org/viewvc?rev=892815&view=rev
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?rev=892815&view=rev
31
reference_url http://svn.apache.org/viewvc?rev=902650&view=rev
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?rev=902650&view=rev
32
reference_url https://web.archive.org/web/20100127015355/http://secunia.com/advisories/38346
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20100127015355/http://secunia.com/advisories/38346
33
reference_url https://web.archive.org/web/20100127190258/http://secunia.com/advisories/38316
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20100127190258/http://secunia.com/advisories/38316
34
reference_url https://web.archive.org/web/20100329100145/http://secunia.com/advisories/38687
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20100329100145/http://secunia.com/advisories/38687
35
reference_url https://web.archive.org/web/20100412065745/http://secunia.com/advisories/39317
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20100412065745/http://secunia.com/advisories/39317
36
reference_url https://web.archive.org/web/20100601000000*/http://secunia.com/advisories/40813
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20100601000000*/http://secunia.com/advisories/40813
37
reference_url https://web.archive.org/web/20110213053623/https://secunia.com/advisories/43310
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20110213053623/https://secunia.com/advisories/43310
38
reference_url https://web.archive.org/web/20110529135656/http://secunia.com/advisories/38541
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20110529135656/http://secunia.com/advisories/38541
39
reference_url https://web.archive.org/web/20110601000000*/http://secunia.com/advisories/40330
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20110601000000*/http://secunia.com/advisories/40330
40
reference_url https://web.archive.org/web/20111119150528/http://www.securityfocus.com/archive/1/516397/100/0/threaded
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20111119150528/http://www.securityfocus.com/archive/1/516397/100/0/threaded
41
reference_url https://web.archive.org/web/20121211115829/http://securitytracker.com/id?1023504
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20121211115829/http://securitytracker.com/id?1023504
42
reference_url https://web.archive.org/web/20121211195847/http://www.securityfocus.com/bid/37945
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20121211195847/http://www.securityfocus.com/bid/37945
43
reference_url https://web.archive.org/web/20140515000000*/http://secunia.com/advisories/57126
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20140515000000*/http://secunia.com/advisories/57126
44
reference_url https://web.archive.org/web/20150308000602/http://www.securityfocus.com/archive/1/509150/100/0/threaded
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20150308000602/http://www.securityfocus.com/archive/1/509150/100/0/threaded
45
reference_url http://tomcat.apache.org/security-5.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-5.html
46
reference_url http://tomcat.apache.org/security-6.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-6.html
47
reference_url http://ubuntu.com/usn/usn-899-1
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://ubuntu.com/usn/usn-899-1
48
reference_url http://www.debian.org/security/2011/dsa-2207
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.debian.org/security/2011/dsa-2207
49
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2010:176
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2010:176
50
reference_url http://www.mandriva.com/security/advisories?name=MDVSA-2010:177
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.mandriva.com/security/advisories?name=MDVSA-2010:177
51
reference_url http://www.vmware.com/security/advisories/VMSA-2011-0003.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vmware.com/security/advisories/VMSA-2011-0003.html
52
reference_url http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
53
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=559761
reference_id 559761
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=559761
54
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2902
reference_id CVE-2009-2902
reference_type
scores
0
value Low
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2902
55
reference_url https://nvd.nist.gov/vuln/detail/CVE-2009-2902
reference_id CVE-2009-2902
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2009-2902
56
reference_url https://github.com/advisories/GHSA-8wch-9gcg-v2pr
reference_id GHSA-8wch-9gcg-v2pr
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8wch-9gcg-v2pr
57
reference_url https://security.gentoo.org/glsa/201206-24
reference_id GLSA-201206-24
reference_type
scores
url https://security.gentoo.org/glsa/201206-24
58
reference_url https://access.redhat.com/errata/RHSA-2010:0693
reference_id RHSA-2010:0693
reference_type
scores
url https://access.redhat.com/errata/RHSA-2010:0693
59
reference_url https://usn.ubuntu.com/899-1/
reference_id USN-899-1
reference_type
scores
url https://usn.ubuntu.com/899-1/
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 22
name Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
description The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score0.1 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-wsn2-pd9b-b3g8