Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-yqr6-8zk9-4fgv
SummaryThe JAX-RS module in Apache CXF prior to 3.0.12 and 3.1.x prior to 3.1.9 provides a number of Atom JAX-RS MessageBodyReaders. These readers use Apache Abdera Parser which expands XML entities by default which represents a major XXE risk.
Aliases
0
alias CVE-2016-8739
1
alias GHSA-x7xf-253v-x3w8
Fixed_packages
0
url pkg:maven/org.apache.cxf/cxf-core@3.0.12
purl pkg:maven/org.apache.cxf/cxf-core@3.0.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-sb6r-52yp-x7g5
9
vulnerability VCID-tw87-3mzf-8uem
10
vulnerability VCID-x3q1-vymh-jkew
11
vulnerability VCID-xzs8-rbhd-mkbp
12
vulnerability VCID-y8up-mkx2-abcn
13
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.12
1
url pkg:maven/org.apache.cxf/cxf-core@3.1.9
purl pkg:maven/org.apache.cxf/cxf-core@3.1.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-sb6r-52yp-x7g5
9
vulnerability VCID-tw87-3mzf-8uem
10
vulnerability VCID-x3q1-vymh-jkew
11
vulnerability VCID-xzs8-rbhd-mkbp
12
vulnerability VCID-y8up-mkx2-abcn
13
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.1.9
Affected_packages
0
url pkg:maven/org.apache.cxf/cxf-core@3.0.0-milestone1
purl pkg:maven/org.apache.cxf/cxf-core@3.0.0-milestone1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-x3q1-vymh-jkew
12
vulnerability VCID-xzs8-rbhd-mkbp
13
vulnerability VCID-y8up-mkx2-abcn
14
vulnerability VCID-yqr6-8zk9-4fgv
15
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.0-milestone1
1
url pkg:maven/org.apache.cxf/cxf-core@3.0.0-milestone2
purl pkg:maven/org.apache.cxf/cxf-core@3.0.0-milestone2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-x3q1-vymh-jkew
12
vulnerability VCID-xzs8-rbhd-mkbp
13
vulnerability VCID-y8up-mkx2-abcn
14
vulnerability VCID-yqr6-8zk9-4fgv
15
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.0-milestone2
2
url pkg:maven/org.apache.cxf/cxf-core@3.0.0
purl pkg:maven/org.apache.cxf/cxf-core@3.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-vatr-ygcg-f3au
12
vulnerability VCID-x3q1-vymh-jkew
13
vulnerability VCID-xzs8-rbhd-mkbp
14
vulnerability VCID-y8up-mkx2-abcn
15
vulnerability VCID-yqr6-8zk9-4fgv
16
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.0
3
url pkg:maven/org.apache.cxf/cxf-core@3.0.1
purl pkg:maven/org.apache.cxf/cxf-core@3.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-vatr-ygcg-f3au
12
vulnerability VCID-x3q1-vymh-jkew
13
vulnerability VCID-xzs8-rbhd-mkbp
14
vulnerability VCID-y8up-mkx2-abcn
15
vulnerability VCID-yqr6-8zk9-4fgv
16
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.1
4
url pkg:maven/org.apache.cxf/cxf-core@3.0.2
purl pkg:maven/org.apache.cxf/cxf-core@3.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-vatr-ygcg-f3au
12
vulnerability VCID-x3q1-vymh-jkew
13
vulnerability VCID-xzs8-rbhd-mkbp
14
vulnerability VCID-y8up-mkx2-abcn
15
vulnerability VCID-yqr6-8zk9-4fgv
16
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.2
5
url pkg:maven/org.apache.cxf/cxf-core@3.0.3
purl pkg:maven/org.apache.cxf/cxf-core@3.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-vatr-ygcg-f3au
12
vulnerability VCID-x3q1-vymh-jkew
13
vulnerability VCID-xzs8-rbhd-mkbp
14
vulnerability VCID-y8up-mkx2-abcn
15
vulnerability VCID-yqr6-8zk9-4fgv
16
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.3
6
url pkg:maven/org.apache.cxf/cxf-core@3.0.4
purl pkg:maven/org.apache.cxf/cxf-core@3.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-vatr-ygcg-f3au
12
vulnerability VCID-x3q1-vymh-jkew
13
vulnerability VCID-xzs8-rbhd-mkbp
14
vulnerability VCID-y8up-mkx2-abcn
15
vulnerability VCID-yqr6-8zk9-4fgv
16
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.4
7
url pkg:maven/org.apache.cxf/cxf-core@3.0.5
purl pkg:maven/org.apache.cxf/cxf-core@3.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-vatr-ygcg-f3au
12
vulnerability VCID-x3q1-vymh-jkew
13
vulnerability VCID-xzs8-rbhd-mkbp
14
vulnerability VCID-y8up-mkx2-abcn
15
vulnerability VCID-yqr6-8zk9-4fgv
16
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.5
8
url pkg:maven/org.apache.cxf/cxf-core@3.0.6
purl pkg:maven/org.apache.cxf/cxf-core@3.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-vatr-ygcg-f3au
12
vulnerability VCID-x3q1-vymh-jkew
13
vulnerability VCID-xzs8-rbhd-mkbp
14
vulnerability VCID-y8up-mkx2-abcn
15
vulnerability VCID-yqr6-8zk9-4fgv
16
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.6
9
url pkg:maven/org.apache.cxf/cxf-core@3.0.7
purl pkg:maven/org.apache.cxf/cxf-core@3.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-x3q1-vymh-jkew
12
vulnerability VCID-xzs8-rbhd-mkbp
13
vulnerability VCID-y8up-mkx2-abcn
14
vulnerability VCID-yqr6-8zk9-4fgv
15
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.7
10
url pkg:maven/org.apache.cxf/cxf-core@3.0.8
purl pkg:maven/org.apache.cxf/cxf-core@3.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-x3q1-vymh-jkew
12
vulnerability VCID-xzs8-rbhd-mkbp
13
vulnerability VCID-y8up-mkx2-abcn
14
vulnerability VCID-yqr6-8zk9-4fgv
15
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.8
11
url pkg:maven/org.apache.cxf/cxf-core@3.0.9
purl pkg:maven/org.apache.cxf/cxf-core@3.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-x3q1-vymh-jkew
12
vulnerability VCID-xzs8-rbhd-mkbp
13
vulnerability VCID-y8up-mkx2-abcn
14
vulnerability VCID-yqr6-8zk9-4fgv
15
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.9
12
url pkg:maven/org.apache.cxf/cxf-core@3.0.10
purl pkg:maven/org.apache.cxf/cxf-core@3.0.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-x3q1-vymh-jkew
12
vulnerability VCID-xzs8-rbhd-mkbp
13
vulnerability VCID-y8up-mkx2-abcn
14
vulnerability VCID-yqr6-8zk9-4fgv
15
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.10
13
url pkg:maven/org.apache.cxf/cxf-core@3.0.11
purl pkg:maven/org.apache.cxf/cxf-core@3.0.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-x3q1-vymh-jkew
12
vulnerability VCID-xzs8-rbhd-mkbp
13
vulnerability VCID-y8up-mkx2-abcn
14
vulnerability VCID-yqr6-8zk9-4fgv
15
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.0.11
14
url pkg:maven/org.apache.cxf/cxf-core@3.1.0
purl pkg:maven/org.apache.cxf/cxf-core@3.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-vatr-ygcg-f3au
12
vulnerability VCID-x3q1-vymh-jkew
13
vulnerability VCID-xzs8-rbhd-mkbp
14
vulnerability VCID-y8up-mkx2-abcn
15
vulnerability VCID-yqr6-8zk9-4fgv
16
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.1.0
15
url pkg:maven/org.apache.cxf/cxf-core@3.1.1
purl pkg:maven/org.apache.cxf/cxf-core@3.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-vatr-ygcg-f3au
12
vulnerability VCID-x3q1-vymh-jkew
13
vulnerability VCID-xzs8-rbhd-mkbp
14
vulnerability VCID-y8up-mkx2-abcn
15
vulnerability VCID-yqr6-8zk9-4fgv
16
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.1.1
16
url pkg:maven/org.apache.cxf/cxf-core@3.1.2
purl pkg:maven/org.apache.cxf/cxf-core@3.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-vatr-ygcg-f3au
12
vulnerability VCID-x3q1-vymh-jkew
13
vulnerability VCID-xzs8-rbhd-mkbp
14
vulnerability VCID-y8up-mkx2-abcn
15
vulnerability VCID-yqr6-8zk9-4fgv
16
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.1.2
17
url pkg:maven/org.apache.cxf/cxf-core@3.1.3
purl pkg:maven/org.apache.cxf/cxf-core@3.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-x3q1-vymh-jkew
12
vulnerability VCID-xzs8-rbhd-mkbp
13
vulnerability VCID-y8up-mkx2-abcn
14
vulnerability VCID-yqr6-8zk9-4fgv
15
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.1.3
18
url pkg:maven/org.apache.cxf/cxf-core@3.1.4
purl pkg:maven/org.apache.cxf/cxf-core@3.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-x3q1-vymh-jkew
12
vulnerability VCID-xzs8-rbhd-mkbp
13
vulnerability VCID-y8up-mkx2-abcn
14
vulnerability VCID-yqr6-8zk9-4fgv
15
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.1.4
19
url pkg:maven/org.apache.cxf/cxf-core@3.1.5
purl pkg:maven/org.apache.cxf/cxf-core@3.1.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-x3q1-vymh-jkew
12
vulnerability VCID-xzs8-rbhd-mkbp
13
vulnerability VCID-y8up-mkx2-abcn
14
vulnerability VCID-yqr6-8zk9-4fgv
15
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.1.5
20
url pkg:maven/org.apache.cxf/cxf-core@3.1.6
purl pkg:maven/org.apache.cxf/cxf-core@3.1.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-x3q1-vymh-jkew
12
vulnerability VCID-xzs8-rbhd-mkbp
13
vulnerability VCID-y8up-mkx2-abcn
14
vulnerability VCID-yqr6-8zk9-4fgv
15
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.1.6
21
url pkg:maven/org.apache.cxf/cxf-core@3.1.7
purl pkg:maven/org.apache.cxf/cxf-core@3.1.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-x3q1-vymh-jkew
12
vulnerability VCID-xzs8-rbhd-mkbp
13
vulnerability VCID-y8up-mkx2-abcn
14
vulnerability VCID-yqr6-8zk9-4fgv
15
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.1.7
22
url pkg:maven/org.apache.cxf/cxf-core@3.1.8
purl pkg:maven/org.apache.cxf/cxf-core@3.1.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-669s-jgrm-efgg
1
vulnerability VCID-6nvj-sh6e-q3h3
2
vulnerability VCID-b3sp-rdja-cuf5
3
vulnerability VCID-d68d-u8dc-r3be
4
vulnerability VCID-darq-bg13-x3fd
5
vulnerability VCID-edja-kj1j-7kh5
6
vulnerability VCID-efw6-swgm-4fbc
7
vulnerability VCID-fekg-fn5e-augk
8
vulnerability VCID-j1db-vh8s-6yaz
9
vulnerability VCID-sb6r-52yp-x7g5
10
vulnerability VCID-tw87-3mzf-8uem
11
vulnerability VCID-x3q1-vymh-jkew
12
vulnerability VCID-xzs8-rbhd-mkbp
13
vulnerability VCID-y8up-mkx2-abcn
14
vulnerability VCID-yqr6-8zk9-4fgv
15
vulnerability VCID-ytk3-rjrf-wfh9
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.cxf/cxf-core@3.1.8
References
0
reference_url https://access.redhat.com/errata/RHSA-2017:0868
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://access.redhat.com/errata/RHSA-2017:0868
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8739.json
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8739.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2016-8739
reference_id
reference_type
scores
0
value 0.02672
scoring_system epss
scoring_elements 0.85812
published_at 2026-04-09T12:55:00Z
1
value 0.02672
scoring_system epss
scoring_elements 0.85802
published_at 2026-04-08T12:55:00Z
2
value 0.02672
scoring_system epss
scoring_elements 0.85783
published_at 2026-04-07T12:55:00Z
3
value 0.02672
scoring_system epss
scoring_elements 0.85777
published_at 2026-04-04T12:55:00Z
4
value 0.02672
scoring_system epss
scoring_elements 0.85758
published_at 2026-04-02T12:55:00Z
5
value 0.02672
scoring_system epss
scoring_elements 0.85745
published_at 2026-04-01T12:55:00Z
6
value 0.02672
scoring_system epss
scoring_elements 0.8582
published_at 2026-04-13T12:55:00Z
7
value 0.02672
scoring_system epss
scoring_elements 0.85823
published_at 2026-04-12T12:55:00Z
8
value 0.02672
scoring_system epss
scoring_elements 0.85827
published_at 2026-04-11T12:55:00Z
9
value 0.02672
scoring_system epss
scoring_elements 0.85839
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2016-8739
3
reference_url https://github.com/apache/cxf
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/cxf
4
reference_url https://github.com/apache/cxf/commit/8e4970d9
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/cxf/commit/8e4970d9
5
reference_url https://github.com/apache/cxf/commit/9deb2d17
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/apache/cxf/commit/9deb2d17
6
reference_url https://github.com/apache/cxf/commit/d9e2a6e7
reference_id
reference_type
scores
url https://github.com/apache/cxf/commit/d9e2a6e7
7
reference_url https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r36e44ffc1a9b365327df62cdfaabe85b9a5637de102cea07d79b2dbf@%3Ccommits.cxf.apache.org%3E
8
reference_url https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rc774278135816e7afc943dc9fc78eb0764f2c84a2b96470a0187315c@%3Ccommits.cxf.apache.org%3E
9
reference_url https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rd49aabd984ed540c8ff7916d4d79405f3fa311d2fdbcf9ed307839a6@%3Ccommits.cxf.apache.org%3E
10
reference_url https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4@%3Ccommits.cxf.apache.org%3E
11
reference_url https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e@%3Ccommits.cxf.apache.org%3E
12
reference_url https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rff42cfa5e7d75b7c1af0e37589140a8f1999e578a75738740b244bd4@%3Ccommits.cxf.apache.org%3E
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1406811
reference_id 1406811
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1406811
14
reference_url https://nvd.nist.gov/vuln/detail/CVE-2016-8739
reference_id CVE-2016-8739
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2016-8739
15
reference_url http://cxf.apache.org/security-advisories.data/CVE-2016-8739.txt.asc
reference_id CVE-2016-8739.TXT.ASC
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://cxf.apache.org/security-advisories.data/CVE-2016-8739.txt.asc
16
reference_url https://github.com/advisories/GHSA-x7xf-253v-x3w8
reference_id GHSA-x7xf-253v-x3w8
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x7xf-253v-x3w8
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 611
name Improper Restriction of XML External Entity Reference
description The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score6.5 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-yqr6-8zk9-4fgv