GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/4947?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/4947?format=api",
    "vulnerability_id": "VCID-6ss8-442a-3baf",
    "summary": "Multiple cross-site scripting (XSS) vulnerabilities in the (1) examples and (2) ROOT web applications for Jakarta Tomcat 3.x through 3.3.1a allow remote attackers to insert arbitrary web script or HTML.",
    "aliases": [
        {
            "alias": "CVE-2003-0044"
        },
        {
            "alias": "GHSA-5hgm-qm5m-5vmw"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1563?format=api",
            "purl": "pkg:apache/tomcat@3.3.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-6p3e-4u8s-17ep"
                },
                {
                    "vulnerability": "VCID-7969-7a8h-zyhh"
                },
                {
                    "vulnerability": "VCID-kxaa-62td-r3cs"
                },
                {
                    "vulnerability": "VCID-x6zh-jypa-pbcc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.3.2"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1557?format=api",
            "purl": "pkg:apache/tomcat@3.0.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1vxs-pv2f-ufam"
                },
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                },
                {
                    "vulnerability": "VCID-6yk2-f8d5-cyc3"
                },
                {
                    "vulnerability": "VCID-9rpn-zb26-yfdk"
                },
                {
                    "vulnerability": "VCID-a2q2-x613-quav"
                },
                {
                    "vulnerability": "VCID-shq7-jxup-5fgk"
                },
                {
                    "vulnerability": "VCID-x6zh-jypa-pbcc"
                },
                {
                    "vulnerability": "VCID-zm3q-xjwh-xqdz"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.0.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1558?format=api",
            "purl": "pkg:apache/tomcat@3.1.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1vxs-pv2f-ufam"
                },
                {
                    "vulnerability": "VCID-2fb2-r763-ybg5"
                },
                {
                    "vulnerability": "VCID-3n3t-ygrc-wug2"
                },
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                },
                {
                    "vulnerability": "VCID-6yk2-f8d5-cyc3"
                },
                {
                    "vulnerability": "VCID-8ezk-dvv2-3qba"
                },
                {
                    "vulnerability": "VCID-9rpn-zb26-yfdk"
                },
                {
                    "vulnerability": "VCID-a2q2-x613-quav"
                },
                {
                    "vulnerability": "VCID-edmc-muvz-5ufu"
                },
                {
                    "vulnerability": "VCID-shq7-jxup-5fgk"
                },
                {
                    "vulnerability": "VCID-x6zh-jypa-pbcc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.1.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1559?format=api",
            "purl": "pkg:apache/tomcat@3.1.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1vxs-pv2f-ufam"
                },
                {
                    "vulnerability": "VCID-2fb2-r763-ybg5"
                },
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                },
                {
                    "vulnerability": "VCID-6yk2-f8d5-cyc3"
                },
                {
                    "vulnerability": "VCID-9rpn-zb26-yfdk"
                },
                {
                    "vulnerability": "VCID-a2q2-x613-quav"
                },
                {
                    "vulnerability": "VCID-edmc-muvz-5ufu"
                },
                {
                    "vulnerability": "VCID-shq7-jxup-5fgk"
                },
                {
                    "vulnerability": "VCID-x6zh-jypa-pbcc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.1.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1560?format=api",
            "purl": "pkg:apache/tomcat@3.2.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1vxs-pv2f-ufam"
                },
                {
                    "vulnerability": "VCID-2fb2-r763-ybg5"
                },
                {
                    "vulnerability": "VCID-56a7-wfbu-7be8"
                },
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                },
                {
                    "vulnerability": "VCID-6yk2-f8d5-cyc3"
                },
                {
                    "vulnerability": "VCID-9rpn-zb26-yfdk"
                },
                {
                    "vulnerability": "VCID-a2q2-x613-quav"
                },
                {
                    "vulnerability": "VCID-edmc-muvz-5ufu"
                },
                {
                    "vulnerability": "VCID-shq7-jxup-5fgk"
                },
                {
                    "vulnerability": "VCID-x6zh-jypa-pbcc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.2.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1561?format=api",
            "purl": "pkg:apache/tomcat@3.2.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2fb2-r763-ybg5"
                },
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                },
                {
                    "vulnerability": "VCID-6yk2-f8d5-cyc3"
                },
                {
                    "vulnerability": "VCID-9rpn-zb26-yfdk"
                },
                {
                    "vulnerability": "VCID-edmc-muvz-5ufu"
                },
                {
                    "vulnerability": "VCID-rybd-nsf5-j7fr"
                },
                {
                    "vulnerability": "VCID-shq7-jxup-5fgk"
                },
                {
                    "vulnerability": "VCID-x6zh-jypa-pbcc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.2.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1562?format=api",
            "purl": "pkg:apache/tomcat@3.3.0-a",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                },
                {
                    "vulnerability": "VCID-6yk2-f8d5-cyc3"
                },
                {
                    "vulnerability": "VCID-9rpn-zb26-yfdk"
                },
                {
                    "vulnerability": "VCID-shq7-jxup-5fgk"
                },
                {
                    "vulnerability": "VCID-x6zh-jypa-pbcc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.3.0-a"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1573?format=api",
            "purl": "pkg:apache/tomcat@3.3.1-a",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@3.3.1-a"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1564?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@3.0",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1vxs-pv2f-ufam"
                },
                {
                    "vulnerability": "VCID-2fb2-r763-ybg5"
                },
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                },
                {
                    "vulnerability": "VCID-6yk2-f8d5-cyc3"
                },
                {
                    "vulnerability": "VCID-9rpn-zb26-yfdk"
                },
                {
                    "vulnerability": "VCID-a2q2-x613-quav"
                },
                {
                    "vulnerability": "VCID-shq7-jxup-5fgk"
                },
                {
                    "vulnerability": "VCID-x6zh-jypa-pbcc"
                },
                {
                    "vulnerability": "VCID-zm3q-xjwh-xqdz"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@3.0"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1565?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@3.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1vxs-pv2f-ufam"
                },
                {
                    "vulnerability": "VCID-2fb2-r763-ybg5"
                },
                {
                    "vulnerability": "VCID-3n3t-ygrc-wug2"
                },
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                },
                {
                    "vulnerability": "VCID-6yk2-f8d5-cyc3"
                },
                {
                    "vulnerability": "VCID-8ezk-dvv2-3qba"
                },
                {
                    "vulnerability": "VCID-9rpn-zb26-yfdk"
                },
                {
                    "vulnerability": "VCID-a2q2-x613-quav"
                },
                {
                    "vulnerability": "VCID-edmc-muvz-5ufu"
                },
                {
                    "vulnerability": "VCID-shq7-jxup-5fgk"
                },
                {
                    "vulnerability": "VCID-x6zh-jypa-pbcc"
                },
                {
                    "vulnerability": "VCID-zm3q-xjwh-xqdz"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@3.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1566?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@3.1.1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1vxs-pv2f-ufam"
                },
                {
                    "vulnerability": "VCID-2fb2-r763-ybg5"
                },
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                },
                {
                    "vulnerability": "VCID-6yk2-f8d5-cyc3"
                },
                {
                    "vulnerability": "VCID-9rpn-zb26-yfdk"
                },
                {
                    "vulnerability": "VCID-a2q2-x613-quav"
                },
                {
                    "vulnerability": "VCID-edmc-muvz-5ufu"
                },
                {
                    "vulnerability": "VCID-shq7-jxup-5fgk"
                },
                {
                    "vulnerability": "VCID-x6zh-jypa-pbcc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@3.1.1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1567?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@3.2",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1vxs-pv2f-ufam"
                },
                {
                    "vulnerability": "VCID-2fb2-r763-ybg5"
                },
                {
                    "vulnerability": "VCID-56a7-wfbu-7be8"
                },
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                },
                {
                    "vulnerability": "VCID-6yk2-f8d5-cyc3"
                },
                {
                    "vulnerability": "VCID-9rpn-zb26-yfdk"
                },
                {
                    "vulnerability": "VCID-a2q2-x613-quav"
                },
                {
                    "vulnerability": "VCID-edmc-muvz-5ufu"
                },
                {
                    "vulnerability": "VCID-shq7-jxup-5fgk"
                },
                {
                    "vulnerability": "VCID-x6zh-jypa-pbcc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@3.2"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1568?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@3.2.4",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-2fb2-r763-ybg5"
                },
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                },
                {
                    "vulnerability": "VCID-6yk2-f8d5-cyc3"
                },
                {
                    "vulnerability": "VCID-9rpn-zb26-yfdk"
                },
                {
                    "vulnerability": "VCID-edmc-muvz-5ufu"
                },
                {
                    "vulnerability": "VCID-rybd-nsf5-j7fr"
                },
                {
                    "vulnerability": "VCID-shq7-jxup-5fgk"
                },
                {
                    "vulnerability": "VCID-x6zh-jypa-pbcc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@3.2.4"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1569?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@3.3a",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                },
                {
                    "vulnerability": "VCID-6yk2-f8d5-cyc3"
                },
                {
                    "vulnerability": "VCID-9rpn-zb26-yfdk"
                },
                {
                    "vulnerability": "VCID-shq7-jxup-5fgk"
                },
                {
                    "vulnerability": "VCID-x6zh-jypa-pbcc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@3.3a"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1574?format=api",
            "purl": "pkg:maven/org.apache.tomcat/tomcat@3.3.1a",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-6ss8-442a-3baf"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@3.3.1a"
        }
    ],
    "references": [
        {
            "reference_url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a"
        },
        {
            "reference_url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/"
        },
        {
            "reference_url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://jakarta.apache.org/builds/jakarta-tomcat/release/v3.3.1a/RELEASE-NOTES-3.3.1a.txt"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2003-0044",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.27285",
                    "scoring_system": "epss",
                    "scoring_elements": "0.96407",
                    "published_at": "2026-04-16T12:55:00Z"
                },
                {
                    "value": "0.27285",
                    "scoring_system": "epss",
                    "scoring_elements": "0.964",
                    "published_at": "2026-04-13T12:55:00Z"
                },
                {
                    "value": "0.27285",
                    "scoring_system": "epss",
                    "scoring_elements": "0.96397",
                    "published_at": "2026-04-12T12:55:00Z"
                },
                {
                    "value": "0.27285",
                    "scoring_system": "epss",
                    "scoring_elements": "0.96393",
                    "published_at": "2026-04-09T12:55:00Z"
                },
                {
                    "value": "0.27285",
                    "scoring_system": "epss",
                    "scoring_elements": "0.9639",
                    "published_at": "2026-04-08T12:55:00Z"
                },
                {
                    "value": "0.27285",
                    "scoring_system": "epss",
                    "scoring_elements": "0.96381",
                    "published_at": "2026-04-07T12:55:00Z"
                },
                {
                    "value": "0.27285",
                    "scoring_system": "epss",
                    "scoring_elements": "0.96378",
                    "published_at": "2026-04-04T12:55:00Z"
                },
                {
                    "value": "0.27285",
                    "scoring_system": "epss",
                    "scoring_elements": "0.96367",
                    "published_at": "2026-04-01T12:55:00Z"
                },
                {
                    "value": "0.27285",
                    "scoring_system": "epss",
                    "scoring_elements": "0.96374",
                    "published_at": "2026-04-02T12:55:00Z"
                },
                {
                    "value": "0.27285",
                    "scoring_system": "epss",
                    "scoring_elements": "0.96411",
                    "published_at": "2026-04-18T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2003-0044"
        },
        {
            "reference_url": "http://secunia.com/advisories/7972",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://secunia.com/advisories/7972"
        },
        {
            "reference_url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11196",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/11196"
        },
        {
            "reference_url": "http://www.ciac.org/ciac/bulletins/n-060.shtml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.ciac.org/ciac/bulletins/n-060.shtml"
        },
        {
            "reference_url": "http://www.debian.org/security/2003/dsa-246",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.debian.org/security/2003/dsa-246"
        },
        {
            "reference_url": "http://www.osvdb.org/9203",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.osvdb.org/9203"
        },
        {
            "reference_url": "http://www.osvdb.org/9204",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.osvdb.org/9204"
        },
        {
            "reference_url": "http://www.securityfocus.com/advisories/5111",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.securityfocus.com/advisories/5111"
        },
        {
            "reference_url": "http://www.securityfocus.com/bid/6720",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "http://www.securityfocus.com/bid/6720"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0044",
            "reference_id": "CVE-2003-0044",
            "reference_type": "",
            "scores": [
                {
                    "value": "Moderate",
                    "scoring_system": "apache_tomcat",
                    "scoring_elements": ""
                }
            ],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0044"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0044",
            "reference_id": "CVE-2003-0044",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "generic_textual",
                    "scoring_elements": ""
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2003-0044"
        },
        {
            "reference_url": "https://github.com/advisories/GHSA-5hgm-qm5m-5vmw",
            "reference_id": "GHSA-5hgm-qm5m-5vmw",
            "reference_type": "",
            "scores": [
                {
                    "value": "MODERATE",
                    "scoring_system": "cvssv3.1_qr",
                    "scoring_elements": ""
                }
            ],
            "url": "https://github.com/advisories/GHSA-5hgm-qm5m-5vmw"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 1035,
            "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."
        },
        {
            "cwe_id": 79,
            "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')",
            "description": "The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users."
        },
        {
            "cwe_id": 937,
            "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities",
            "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."
        }
    ],
    "exploits": [],
    "severity_range_score": "4.0 - 6.9",
    "exploitability": "0.5",
    "weighted_severity": "6.2",
    "risk_score": 3.1,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6ss8-442a-3baf"
}