Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/4762?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/4762?format=api", "vulnerability_id": "VCID-jdjt-ey4h-z3az", "summary": "Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.", "aliases": [ { "alias": "CVE-2018-8032" }, { "alias": "GHSA-96jq-75wh-2658" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050585?format=api", "purl": "pkg:deb/debian/axis@1.4-28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/axis@1.4-28" }, { "url": "http://public2.vulnerablecode.io/api/packages/583543?format=api", "purl": "pkg:deb/debian/axis@1.4-28?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/axis@1.4-28%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/583544?format=api", "purl": "pkg:deb/debian/axis@1.4-28%2Bdeb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/axis@1.4-28%252Bdeb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/583545?format=api", "purl": "pkg:deb/debian/axis@1.4-28%2Bdeb12u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/axis@1.4-28%252Bdeb12u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/583546?format=api", "purl": "pkg:deb/debian/axis@1.4-29?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/axis@1.4-29%3Fdistro=trixie" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/1050579?format=api", "purl": "pkg:deb/debian/axis@1.4-5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-xydr-nxmx-wffp" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/axis@1.4-5" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050580?format=api", "purl": "pkg:deb/debian/axis@1.4-12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-xydr-nxmx-wffp" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/axis@1.4-12" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050581?format=api", "purl": "pkg:deb/debian/axis@1.4-12%2Bdeb6u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-xydr-nxmx-wffp" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/axis@1.4-12%252Bdeb6u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050582?format=api", "purl": "pkg:deb/debian/axis@1.4-16.2%2Bdeb7u1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-xydr-nxmx-wffp" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/axis@1.4-16.2%252Bdeb7u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050583?format=api", "purl": "pkg:deb/debian/axis@1.4-22", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/axis@1.4-22" }, { "url": "http://public2.vulnerablecode.io/api/packages/1050584?format=api", "purl": "pkg:deb/debian/axis@1.4-25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/axis@1.4-25" }, { "url": "http://public2.vulnerablecode.io/api/packages/178401?format=api", "purl": "pkg:maven/axis/axis@1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/axis/axis@1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/178402?format=api", "purl": "pkg:maven/axis/axis@1.1-beta", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/axis/axis@1.1-beta" }, { "url": "http://public2.vulnerablecode.io/api/packages/178403?format=api", "purl": "pkg:maven/axis/axis@1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/axis/axis@1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/178404?format=api", "purl": "pkg:maven/axis/axis@1.2-alpha-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/axis/axis@1.2-alpha-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/178405?format=api", "purl": "pkg:maven/axis/axis@1.2-beta-2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/axis/axis@1.2-beta-2" }, { "url": "http://public2.vulnerablecode.io/api/packages/178406?format=api", "purl": "pkg:maven/axis/axis@1.2-beta-3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/axis/axis@1.2-beta-3" }, { "url": "http://public2.vulnerablecode.io/api/packages/178407?format=api", "purl": "pkg:maven/axis/axis@1.2-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/axis/axis@1.2-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/178408?format=api", "purl": "pkg:maven/axis/axis@1.2-RC2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/axis/axis@1.2-RC2" }, { "url": "http://public2.vulnerablecode.io/api/packages/178409?format=api", "purl": "pkg:maven/axis/axis@1.2-RC3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/axis/axis@1.2-RC3" }, { "url": "http://public2.vulnerablecode.io/api/packages/178410?format=api", "purl": "pkg:maven/axis/axis@1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/axis/axis@1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/178411?format=api", "purl": "pkg:maven/axis/axis@1.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/axis/axis@1.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/144894?format=api", "purl": "pkg:maven/axis/axis@1.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-24xc-gnxw-5qhq" }, { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/axis/axis@1.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/31596?format=api", "purl": "pkg:maven/axis/axis@1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-xydr-nxmx-wffp" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/axis/axis@1.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/29857?format=api", "purl": "pkg:maven/org.apache.axis/axis@1.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-jdjt-ey4h-z3az" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.axis/axis@1.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/20776?format=api", "purl": "pkg:maven/org.apache.axis/axis@1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-hj44-args-tfa4" }, { "vulnerability": "VCID-jdjt-ey4h-z3az" }, { "vulnerability": "VCID-mbzz-vcd2-mfeb" }, { "vulnerability": "VCID-xydr-nxmx-wffp" }, { "vulnerability": "VCID-zgre-mq7s-ebch" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.axis/axis@1.4" } ], "references": [ { "reference_url": "http://mail-archives.apache.org/mod_mbox/axis-java-dev/201807.mbox/%3CJIRA.13170716.1531060536000.93536.1531060560060%40Atlassian.JIRA%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://mail-archives.apache.org/mod_mbox/axis-java-dev/201807.mbox/%3CJIRA.13170716.1531060536000.93536.1531060560060%40Atlassian.JIRA%3E" }, { "reference_url": "http://mail-archives.apache.org/mod_mbox/axis-java-dev/201807.mbox/%3CJIRA.13170716.1531060536000.93536.1531060560060@Atlassian.JIRA%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://mail-archives.apache.org/mod_mbox/axis-java-dev/201807.mbox/%3CJIRA.13170716.1531060536000.93536.1531060560060@Atlassian.JIRA%3E" }, { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8032.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8032.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2018-8032", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84897", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84896", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84875", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84881", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84883", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84864", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84858", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84835", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84834", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84815", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84801", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84929", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.8493", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84895", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.02343", "scoring_system": "epss", "scoring_elements": "0.84921", "published_at": "2026-04-24T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-8032" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8032", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8032" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://github.com/apache/axis1-java/commit/e7ce8a92bc02be54da102efb64c99aeee21a2106", "reference_id": "", "reference_type": "", "scores": [], "url": "https://github.com/apache/axis1-java/commit/e7ce8a92bc02be54da102efb64c99aeee21a2106" }, { "reference_url": "https://issues.apache.org/jira/browse/AXIS-2924", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://issues.apache.org/jira/browse/AXIS-2924" }, { "reference_url": "https://lists.apache.org/thread.html/3b89bc9e9d055db7eba8835ff6501f3f5db99d2a0928ec0be9b1d17b@%3Cjava-dev.axis.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/3b89bc9e9d055db7eba8835ff6501f3f5db99d2a0928ec0be9b1d17b@%3Cjava-dev.axis.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/3b89bc9e9d055db7eba8835ff6501f3f5db99d2a0928ec0be9b1d17b%40%3Cjava-dev.axis.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/3b89bc9e9d055db7eba8835ff6501f3f5db99d2a0928ec0be9b1d17b%40%3Cjava-dev.axis.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/d06ed5e4eeb77d00e8d594ec01ee8ee1cba173a01ac4b18f1579d041@%3Cjava-dev.axis.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/d06ed5e4eeb77d00e8d594ec01ee8ee1cba173a01ac4b18f1579d041@%3Cjava-dev.axis.apache.org%3E" }, { "reference_url": "https://lists.apache.org/thread.html/d06ed5e4eeb77d00e8d594ec01ee8ee1cba173a01ac4b18f1579d041%40%3Cjava-dev.axis.apache.org%3E", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.apache.org/thread.html/d06ed5e4eeb77d00e8d594ec01ee8ee1cba173a01ac4b18f1579d041%40%3Cjava-dev.axis.apache.org%3E" }, { "reference_url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00015.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://lists.debian.org/debian-lts-announce/2021/11/msg00015.html" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20240621-0006", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20240621-0006" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuapr2020.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuapr2020.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuApr2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuApr2021.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuapr2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuapr2022.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujan2020.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpujan2020.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujan2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpujan2021.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujul2020.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpujul2020.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpujul2022.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpujul2022.html" }, { "reference_url": "https://www.oracle.com/security-alerts/cpuoct2021.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/security-alerts/cpuoct2021.html" }, { "reference_url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.oracle.com/technetwork/security-advisory/cpuoct2019-5072832.html" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1611835", "reference_id": "1611835", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1611835" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905328", "reference_id": "905328", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=905328" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8032", "reference_id": "CVE-2018-8032", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-8032" }, { "reference_url": "https://github.com/advisories/GHSA-96jq-75wh-2658", "reference_id": "GHSA-96jq-75wh-2658", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-96jq-75wh-2658" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 79, "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "description": "The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": "4.0 - 6.9", "exploitability": "0.5", "weighted_severity": "6.2", "risk_score": 3.1, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jdjt-ey4h-z3az" }