Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-12du-1vyt-bkgx
Summary
Improper Authentication in Apache Tomcat
The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.36, 6.x before 6.0.36, and 7.x before 7.0.30 does not properly check for stale nonce values in conjunction with enforcement of proper credentials, which makes it easier for remote attackers to bypass intended access restrictions by sniffing the network for valid requests.
Aliases
0
alias CVE-2012-5887
1
alias GHSA-28cq-6rmx-pjq4
Fixed_packages
0
url pkg:ebuild/www-servers/tomcat@7.0.56
purl pkg:ebuild/www-servers/tomcat@7.0.56
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/tomcat@7.0.56
Affected_packages
0
url pkg:maven/org.apache.tomcat/tomcat@5.5.0
purl pkg:maven/org.apache.tomcat/tomcat@5.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-18j8-kwdv-dyak
2
vulnerability VCID-1qt3-ctae-sfgw
3
vulnerability VCID-1v6c-f56v-hqh1
4
vulnerability VCID-241m-q6vd-kudk
5
vulnerability VCID-27q8-96un-9fbk
6
vulnerability VCID-2jnv-segx-zkfd
7
vulnerability VCID-4rcx-xfn5-7kdb
8
vulnerability VCID-6epr-2hbd-skcz
9
vulnerability VCID-6p3e-4u8s-17ep
10
vulnerability VCID-7969-7a8h-zyhh
11
vulnerability VCID-7kjm-p97s-zuh8
12
vulnerability VCID-86ur-vudp-4yc2
13
vulnerability VCID-87p8-zvvf-y7dm
14
vulnerability VCID-88v7-kc2y-bfd7
15
vulnerability VCID-8ebv-6941-jqdy
16
vulnerability VCID-a9cu-fxqw-xkdg
17
vulnerability VCID-acmu-9eqb-fya5
18
vulnerability VCID-bhq7-d545-27bj
19
vulnerability VCID-bung-pa58-ayfv
20
vulnerability VCID-d9ys-kxh6-nkgr
21
vulnerability VCID-dcrp-rae1-zfcm
22
vulnerability VCID-dhun-hj5q-dfch
23
vulnerability VCID-egye-da2v-4ybh
24
vulnerability VCID-f2zy-gq57-ufat
25
vulnerability VCID-fvvt-kufu-k3a6
26
vulnerability VCID-g7eg-s99s-xqe7
27
vulnerability VCID-g998-xymt-fudu
28
vulnerability VCID-hhk9-cr54-8fgc
29
vulnerability VCID-mctd-9zgv-5qgp
30
vulnerability VCID-mnf8-t3ew-4fgb
31
vulnerability VCID-n76n-ywja-rbhh
32
vulnerability VCID-peya-mr7j-vugf
33
vulnerability VCID-q7jp-hn4a-4kec
34
vulnerability VCID-qdck-q54n-rkcv
35
vulnerability VCID-quwu-ep21-cyew
36
vulnerability VCID-qxkf-4ddv-j3b7
37
vulnerability VCID-r5rc-rdd9-bfbk
38
vulnerability VCID-r84b-7ay9-ekcm
39
vulnerability VCID-rrdj-ssn7-zfdj
40
vulnerability VCID-rwvj-tq6x-2ubs
41
vulnerability VCID-skar-qk57-qkdv
42
vulnerability VCID-su1y-2bxh-9qe2
43
vulnerability VCID-tcju-3rvu-wkht
44
vulnerability VCID-tfn5-6ckq-wyce
45
vulnerability VCID-v94p-bxm3-akfd
46
vulnerability VCID-vm4b-26sq-tfev
47
vulnerability VCID-wsn2-pd9b-b3g8
48
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.0
1
url pkg:maven/org.apache.tomcat/tomcat@6.0.0
purl pkg:maven/org.apache.tomcat/tomcat@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-18q4-zark-s7a7
2
vulnerability VCID-1k8f-vsg1-k3d6
3
vulnerability VCID-1qt3-ctae-sfgw
4
vulnerability VCID-1v6c-f56v-hqh1
5
vulnerability VCID-241m-q6vd-kudk
6
vulnerability VCID-27q8-96un-9fbk
7
vulnerability VCID-3cr9-g81m-4ugy
8
vulnerability VCID-3n4t-bvb1-5qer
9
vulnerability VCID-3r3s-q21j-c3au
10
vulnerability VCID-4mkw-7haq-pkgn
11
vulnerability VCID-4rcx-xfn5-7kdb
12
vulnerability VCID-68fk-4g86-ekbp
13
vulnerability VCID-6epr-2hbd-skcz
14
vulnerability VCID-6p3e-4u8s-17ep
15
vulnerability VCID-7969-7a8h-zyhh
16
vulnerability VCID-7cpu-h5fr-8ffd
17
vulnerability VCID-7ej8-5f77-cybb
18
vulnerability VCID-7kjm-p97s-zuh8
19
vulnerability VCID-7pd9-1r19-73fe
20
vulnerability VCID-87p8-zvvf-y7dm
21
vulnerability VCID-88v7-kc2y-bfd7
22
vulnerability VCID-8ebv-6941-jqdy
23
vulnerability VCID-95d1-arxd-hkd1
24
vulnerability VCID-a1by-zvtm-akdc
25
vulnerability VCID-a9cu-fxqw-xkdg
26
vulnerability VCID-acmu-9eqb-fya5
27
vulnerability VCID-bung-pa58-ayfv
28
vulnerability VCID-d9ys-kxh6-nkgr
29
vulnerability VCID-dcrp-rae1-zfcm
30
vulnerability VCID-dhun-hj5q-dfch
31
vulnerability VCID-egup-27ub-6uaf
32
vulnerability VCID-egye-da2v-4ybh
33
vulnerability VCID-f2zy-gq57-ufat
34
vulnerability VCID-fpuc-fe6m-47c6
35
vulnerability VCID-g7eg-s99s-xqe7
36
vulnerability VCID-g998-xymt-fudu
37
vulnerability VCID-h9ds-trhx-m7aj
38
vulnerability VCID-hhk9-cr54-8fgc
39
vulnerability VCID-hhkg-mfp5-2kax
40
vulnerability VCID-jau7-gfz8-dkfa
41
vulnerability VCID-jf7u-dvpd-b7f4
42
vulnerability VCID-jtg7-217a-qqhk
43
vulnerability VCID-kagr-74d9-kyhx
44
vulnerability VCID-kgd1-bzst-muh7
45
vulnerability VCID-kzzv-rhya-j7dd
46
vulnerability VCID-m1zd-uytj-3bej
47
vulnerability VCID-mctd-9zgv-5qgp
48
vulnerability VCID-mnf8-t3ew-4fgb
49
vulnerability VCID-mwk8-b5c9-kbb9
50
vulnerability VCID-n76n-ywja-rbhh
51
vulnerability VCID-p4dn-y54m-8fd1
52
vulnerability VCID-p6ch-pc73-b3ck
53
vulnerability VCID-peya-mr7j-vugf
54
vulnerability VCID-qdck-q54n-rkcv
55
vulnerability VCID-quwu-ep21-cyew
56
vulnerability VCID-qxkf-4ddv-j3b7
57
vulnerability VCID-r5rc-rdd9-bfbk
58
vulnerability VCID-r84b-7ay9-ekcm
59
vulnerability VCID-rrdj-ssn7-zfdj
60
vulnerability VCID-rwvj-tq6x-2ubs
61
vulnerability VCID-su1y-2bxh-9qe2
62
vulnerability VCID-t9y6-suc2-2kcg
63
vulnerability VCID-ta1m-dh8x-nubc
64
vulnerability VCID-tcbc-3kgt-muam
65
vulnerability VCID-tcju-3rvu-wkht
66
vulnerability VCID-tfn5-6ckq-wyce
67
vulnerability VCID-tfrs-d458-tfaq
68
vulnerability VCID-twh8-87va-juf9
69
vulnerability VCID-v94p-bxm3-akfd
70
vulnerability VCID-vd1s-m27a-8ucc
71
vulnerability VCID-vm4b-26sq-tfev
72
vulnerability VCID-w82a-7kk2-p3f1
73
vulnerability VCID-wsn2-pd9b-b3g8
74
vulnerability VCID-xf8r-kqxb-7qdy
75
vulnerability VCID-ygvw-69am-s7ae
76
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.0
2
url pkg:maven/org.apache.tomcat/tomcat@7.0.0
purl pkg:maven/org.apache.tomcat/tomcat@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-18q4-zark-s7a7
2
vulnerability VCID-1k8f-vsg1-k3d6
3
vulnerability VCID-1v6c-f56v-hqh1
4
vulnerability VCID-241m-q6vd-kudk
5
vulnerability VCID-2sbh-sy57-3uez
6
vulnerability VCID-3cr9-g81m-4ugy
7
vulnerability VCID-3n4t-bvb1-5qer
8
vulnerability VCID-3r3s-q21j-c3au
9
vulnerability VCID-4aaa-errb-2qdw
10
vulnerability VCID-4mkw-7haq-pkgn
11
vulnerability VCID-5eqm-218u-p7gq
12
vulnerability VCID-618c-ar98-qfcr
13
vulnerability VCID-66kh-s6cr-tqf9
14
vulnerability VCID-68fk-4g86-ekbp
15
vulnerability VCID-7cpu-h5fr-8ffd
16
vulnerability VCID-7ej8-5f77-cybb
17
vulnerability VCID-886n-1vzv-syc6
18
vulnerability VCID-8ebv-6941-jqdy
19
vulnerability VCID-95d1-arxd-hkd1
20
vulnerability VCID-95fn-d2ad-qyg6
21
vulnerability VCID-9exq-fhv6-bbea
22
vulnerability VCID-a1by-zvtm-akdc
23
vulnerability VCID-a8gk-n8bq-87cp
24
vulnerability VCID-afm2-uj45-xkgx
25
vulnerability VCID-arkn-bca7-hqam
26
vulnerability VCID-c4jv-ws83-x7g2
27
vulnerability VCID-d9ys-kxh6-nkgr
28
vulnerability VCID-dhun-hj5q-dfch
29
vulnerability VCID-dzpn-w4b3-vbcm
30
vulnerability VCID-e2kr-7pmg-gfc9
31
vulnerability VCID-eb37-mkxf-7fgw
32
vulnerability VCID-egye-da2v-4ybh
33
vulnerability VCID-f2zy-gq57-ufat
34
vulnerability VCID-fpuc-fe6m-47c6
35
vulnerability VCID-fyfz-6tr5-2fc7
36
vulnerability VCID-g7bk-891a-uufy
37
vulnerability VCID-g7eg-s99s-xqe7
38
vulnerability VCID-gv12-4ruf-kfhq
39
vulnerability VCID-gyed-x6s8-ybhr
40
vulnerability VCID-h9ds-trhx-m7aj
41
vulnerability VCID-hhk9-cr54-8fgc
42
vulnerability VCID-hmbm-5ysw-77bu
43
vulnerability VCID-hves-r5bg-yfes
44
vulnerability VCID-hxj6-mupf-abbc
45
vulnerability VCID-j2j9-avuw-n3eq
46
vulnerability VCID-jau7-gfz8-dkfa
47
vulnerability VCID-jf7u-dvpd-b7f4
48
vulnerability VCID-kagr-74d9-kyhx
49
vulnerability VCID-kgd1-bzst-muh7
50
vulnerability VCID-kwab-3s4q-eka4
51
vulnerability VCID-kyb8-rvyw-s7b1
52
vulnerability VCID-kzzv-rhya-j7dd
53
vulnerability VCID-m1zd-uytj-3bej
54
vulnerability VCID-mctd-9zgv-5qgp
55
vulnerability VCID-mwk8-b5c9-kbb9
56
vulnerability VCID-n3ab-nk7c-hqc9
57
vulnerability VCID-n76n-ywja-rbhh
58
vulnerability VCID-p4dn-y54m-8fd1
59
vulnerability VCID-p6ch-pc73-b3ck
60
vulnerability VCID-pqxe-tfhk-47b7
61
vulnerability VCID-q6hm-mmfs-zka5
62
vulnerability VCID-quwu-ep21-cyew
63
vulnerability VCID-r5rc-rdd9-bfbk
64
vulnerability VCID-rrdj-ssn7-zfdj
65
vulnerability VCID-ruuh-g3fa-m7d8
66
vulnerability VCID-ryha-ndms-afbn
67
vulnerability VCID-ta1m-dh8x-nubc
68
vulnerability VCID-tcbc-3kgt-muam
69
vulnerability VCID-tfn5-6ckq-wyce
70
vulnerability VCID-tfrs-d458-tfaq
71
vulnerability VCID-vd1s-m27a-8ucc
72
vulnerability VCID-vdnj-sqmx-e3ep
73
vulnerability VCID-w82a-7kk2-p3f1
74
vulnerability VCID-xf8r-kqxb-7qdy
75
vulnerability VCID-xqrn-wuv5-x7de
76
vulnerability VCID-yfx4-4gsc-2kgh
77
vulnerability VCID-ygvw-69am-s7ae
78
vulnerability VCID-zbbr-wded-9ffj
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.0
3
url pkg:rpm/redhat/jbossweb@2.1.13-3_patch_02.ep5?arch=el5
purl pkg:rpm/redhat/jbossweb@2.1.13-3_patch_02.ep5?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-g7eg-s99s-xqe7
2
vulnerability VCID-r5rc-rdd9-bfbk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@2.1.13-3_patch_02.ep5%3Farch=el5
4
url pkg:rpm/redhat/jbossweb@2.1.13-3_patch_02.ep5?arch=el4
purl pkg:rpm/redhat/jbossweb@2.1.13-3_patch_02.ep5?arch=el4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-g7eg-s99s-xqe7
2
vulnerability VCID-r5rc-rdd9-bfbk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@2.1.13-3_patch_02.ep5%3Farch=el4
5
url pkg:rpm/redhat/jbossweb@2.1.13-4_patch_02.ep5?arch=el6
purl pkg:rpm/redhat/jbossweb@2.1.13-4_patch_02.ep5?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-g7eg-s99s-xqe7
2
vulnerability VCID-r5rc-rdd9-bfbk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@2.1.13-4_patch_02.ep5%3Farch=el6
6
url pkg:rpm/redhat/jbossweb@7.0.17-4.Final_redhat_3.ep6?arch=el5
purl pkg:rpm/redhat/jbossweb@7.0.17-4.Final_redhat_3.ep6?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-g7eg-s99s-xqe7
2
vulnerability VCID-r5rc-rdd9-bfbk
3
vulnerability VCID-ta1m-dh8x-nubc
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@7.0.17-4.Final_redhat_3.ep6%3Farch=el5
7
url pkg:rpm/redhat/jbossweb@7.0.17-4.Final_redhat_3.ep6?arch=el6
purl pkg:rpm/redhat/jbossweb@7.0.17-4.Final_redhat_3.ep6?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-g7eg-s99s-xqe7
2
vulnerability VCID-r5rc-rdd9-bfbk
3
vulnerability VCID-ta1m-dh8x-nubc
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jbossweb@7.0.17-4.Final_redhat_3.ep6%3Farch=el6
8
url pkg:rpm/redhat/tomcat5@5.5.23-0jpp.38?arch=el5_9
purl pkg:rpm/redhat/tomcat5@5.5.23-0jpp.38?arch=el5_9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-fpuc-fe6m-47c6
2
vulnerability VCID-g7eg-s99s-xqe7
3
vulnerability VCID-r5rc-rdd9-bfbk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.23-0jpp.38%3Farch=el5_9
9
url pkg:rpm/redhat/tomcat6@6.0.24-52?arch=el6_4
purl pkg:rpm/redhat/tomcat6@6.0.24-52?arch=el6_4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-fpuc-fe6m-47c6
2
vulnerability VCID-g7eg-s99s-xqe7
3
vulnerability VCID-mwk8-b5c9-kbb9
4
vulnerability VCID-r5rc-rdd9-bfbk
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat6@6.0.24-52%3Farch=el6_4
10
url pkg:rpm/redhat/tomcat6@6.0.35-6_patch_06.ep6?arch=el5
purl pkg:rpm/redhat/tomcat6@6.0.35-6_patch_06.ep6?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-g7eg-s99s-xqe7
2
vulnerability VCID-mwk8-b5c9-kbb9
3
vulnerability VCID-r5rc-rdd9-bfbk
4
vulnerability VCID-ta1m-dh8x-nubc
5
vulnerability VCID-vd1s-m27a-8ucc
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat6@6.0.35-6_patch_06.ep6%3Farch=el5
11
url pkg:rpm/redhat/tomcat6@6.0.35-29_patch_06.ep6?arch=el6
purl pkg:rpm/redhat/tomcat6@6.0.35-29_patch_06.ep6?arch=el6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-12du-1vyt-bkgx
1
vulnerability VCID-g7eg-s99s-xqe7
2
vulnerability VCID-mwk8-b5c9-kbb9
3
vulnerability VCID-r5rc-rdd9-bfbk
4
vulnerability VCID-ta1m-dh8x-nubc
5
vulnerability VCID-vd1s-m27a-8ucc
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat6@6.0.35-29_patch_06.ep6%3Farch=el6
References
0
reference_url http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html
1
reference_url http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html
2
reference_url http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html
3
reference_url http://rhn.redhat.com/errata/RHSA-2013-0623.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0623.html
4
reference_url http://rhn.redhat.com/errata/RHSA-2013-0629.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0629.html
5
reference_url http://rhn.redhat.com/errata/RHSA-2013-0631.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0631.html
6
reference_url http://rhn.redhat.com/errata/RHSA-2013-0632.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0632.html
7
reference_url http://rhn.redhat.com/errata/RHSA-2013-0633.html
reference_id
reference_type
scores
url http://rhn.redhat.com/errata/RHSA-2013-0633.html
8
reference_url http://rhn.redhat.com/errata/RHSA-2013-0640.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0640.html
9
reference_url http://rhn.redhat.com/errata/RHSA-2013-0647.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0647.html
10
reference_url http://rhn.redhat.com/errata/RHSA-2013-0648.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0648.html
11
reference_url http://rhn.redhat.com/errata/RHSA-2013-0726.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://rhn.redhat.com/errata/RHSA-2013-0726.html
12
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5887.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5887.json
13
reference_url https://api.first.org/data/v1/epss?cve=CVE-2012-5887
reference_id
reference_type
scores
0
value 0.00897
scoring_system epss
scoring_elements 0.75571
published_at 2026-04-01T12:55:00Z
1
value 0.00897
scoring_system epss
scoring_elements 0.75666
published_at 2026-04-16T12:55:00Z
2
value 0.00897
scoring_system epss
scoring_elements 0.75628
published_at 2026-04-13T12:55:00Z
3
value 0.00897
scoring_system epss
scoring_elements 0.75635
published_at 2026-04-12T12:55:00Z
4
value 0.00897
scoring_system epss
scoring_elements 0.75653
published_at 2026-04-11T12:55:00Z
5
value 0.00897
scoring_system epss
scoring_elements 0.75629
published_at 2026-04-09T12:55:00Z
6
value 0.00897
scoring_system epss
scoring_elements 0.75618
published_at 2026-04-08T12:55:00Z
7
value 0.00897
scoring_system epss
scoring_elements 0.75584
published_at 2026-04-07T12:55:00Z
8
value 0.00897
scoring_system epss
scoring_elements 0.75603
published_at 2026-04-04T12:55:00Z
9
value 0.00897
scoring_system epss
scoring_elements 0.75573
published_at 2026-04-02T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2012-5887
14
reference_url http://secunia.com/advisories/51371
reference_id
reference_type
scores
url http://secunia.com/advisories/51371
15
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/79809
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/79809
16
reference_url https://github.com/apache/tomcat
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/apache/tomcat
17
reference_url https://nvd.nist.gov/vuln/detail/CVE-2012-5887
reference_id
reference_type
scores
0
value 5.0
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:N/I:P/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2012-5887
18
reference_url http://svn.apache.org/viewvc?view=revision&revision=1377807
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1377807
19
reference_url http://svn.apache.org/viewvc?view=revision&revision=1380829
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1380829
20
reference_url http://svn.apache.org/viewvc?view=revision&revision=1392248
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://svn.apache.org/viewvc?view=revision&revision=1392248
21
reference_url http://tomcat.apache.org/security-5.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-5.html
22
reference_url http://tomcat.apache.org/security-6.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-6.html
23
reference_url http://tomcat.apache.org/security-7.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://tomcat.apache.org/security-7.html
24
reference_url http://www-01.ibm.com/support/docview.wss?uid=swg21626891
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www-01.ibm.com/support/docview.wss?uid=swg21626891
25
reference_url http://www.securityfocus.com/bid/56403
reference_id
reference_type
scores
url http://www.securityfocus.com/bid/56403
26
reference_url http://www.ubuntu.com/usn/USN-1637-1
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url http://www.ubuntu.com/usn/USN-1637-1
27
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=873664
reference_id 873664
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=873664
28
reference_url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
reference_id cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
reference_type
scores
url https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*
29
reference_url https://github.com/advisories/GHSA-28cq-6rmx-pjq4
reference_id GHSA-28cq-6rmx-pjq4
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-28cq-6rmx-pjq4
30
reference_url https://security.gentoo.org/glsa/201412-29
reference_id GLSA-201412-29
reference_type
scores
url https://security.gentoo.org/glsa/201412-29
31
reference_url https://access.redhat.com/errata/RHSA-2013:0265
reference_id RHSA-2013:0265
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0265
32
reference_url https://access.redhat.com/errata/RHSA-2013:0266
reference_id RHSA-2013:0266
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0266
33
reference_url https://access.redhat.com/errata/RHSA-2013:0623
reference_id RHSA-2013:0623
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0623
34
reference_url https://access.redhat.com/errata/RHSA-2013:0629
reference_id RHSA-2013:0629
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0629
35
reference_url https://access.redhat.com/errata/RHSA-2013:0631
reference_id RHSA-2013:0631
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0631
36
reference_url https://access.redhat.com/errata/RHSA-2013:0632
reference_id RHSA-2013:0632
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0632
37
reference_url https://access.redhat.com/errata/RHSA-2013:0633
reference_id RHSA-2013:0633
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0633
38
reference_url https://access.redhat.com/errata/RHSA-2013:0640
reference_id RHSA-2013:0640
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0640
39
reference_url https://access.redhat.com/errata/RHSA-2013:0647
reference_id RHSA-2013:0647
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0647
40
reference_url https://access.redhat.com/errata/RHSA-2013:0648
reference_id RHSA-2013:0648
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0648
41
reference_url https://access.redhat.com/errata/RHSA-2013:0665
reference_id RHSA-2013:0665
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0665
42
reference_url https://access.redhat.com/errata/RHSA-2013:0726
reference_id RHSA-2013:0726
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:0726
43
reference_url https://access.redhat.com/errata/RHSA-2013:1006
reference_id RHSA-2013:1006
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1006
44
reference_url https://usn.ubuntu.com/1637-1/
reference_id USN-1637-1
reference_type
scores
url https://usn.ubuntu.com/1637-1/
Weaknesses
0
cwe_id 287
name Improper Authentication
description When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
1
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-12du-1vyt-bkgx