Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/6842?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/6842?format=api", "vulnerability_id": "VCID-1c8y-usq6-q7bv", "summary": "multiple issues", "aliases": [ { "alias": "CVE-2022-30556" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/3513?format=api", "purl": "pkg:alpm/archlinux/apache@2.4.54-1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/apache@2.4.54-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/75021?format=api", "purl": "pkg:apache/httpd@2.4.54", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.54" }, { "url": "http://public2.vulnerablecode.io/api/packages/88246?format=api", "purl": "pkg:deb/debian/apache2@2.4.54-1~deb11u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache2@2.4.54-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/88245?format=api", "purl": "pkg:deb/debian/apache2@2.4.54-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache2@2.4.54-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/88145?format=api", "purl": "pkg:deb/debian/apache2@2.4.62-1~deb11u1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-urh9-bae6-1yc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache2@2.4.62-1~deb11u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/88143?format=api", "purl": "pkg:deb/debian/apache2@2.4.67-1~deb12u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-urh9-bae6-1yc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache2@2.4.67-1~deb12u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/88148?format=api", "purl": "pkg:deb/debian/apache2@2.4.67-1~deb13u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-urh9-bae6-1yc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache2@2.4.67-1~deb13u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/88146?format=api", "purl": "pkg:deb/debian/apache2@2.4.67-1?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-urh9-bae6-1yc8" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache2@2.4.67-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/88147?format=api", "purl": "pkg:deb/debian/apache2@2.4.67-2?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/apache2@2.4.67-2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/192936?format=api", "purl": "pkg:ebuild/app-admin/apache-tools@2.4.54", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/app-admin/apache-tools@2.4.54" }, { "url": "http://public2.vulnerablecode.io/api/packages/192937?format=api", "purl": "pkg:ebuild/www-servers/apache@2.4.54", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/apache@2.4.54" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/3512?format=api", "purl": "pkg:alpm/archlinux/apache@2.4.53-1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c8y-usq6-q7bv" }, { "vulnerability": "VCID-6vkt-ka6n-afg4" }, { "vulnerability": "VCID-b2t9-mha2-juem" }, { "vulnerability": "VCID-gqk6-pf69-tuc3" }, { "vulnerability": "VCID-p3qx-nxc2-w3aj" }, { "vulnerability": "VCID-sgfu-c8hw-ekdk" }, { "vulnerability": "VCID-yzb6-tgwx-wqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:alpm/archlinux/apache@2.4.53-1" }, { "url": "http://public2.vulnerablecode.io/api/packages/75020?format=api", "purl": "pkg:apache/httpd@2.4.53", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c8y-usq6-q7bv" }, { "vulnerability": "VCID-6vkt-ka6n-afg4" }, { "vulnerability": "VCID-b2t9-mha2-juem" }, { "vulnerability": "VCID-e1xg-d6e5-e7by" }, { "vulnerability": "VCID-gqk6-pf69-tuc3" }, { "vulnerability": "VCID-p3qx-nxc2-w3aj" }, { "vulnerability": "VCID-sgfu-c8hw-ekdk" }, { "vulnerability": "VCID-yzb6-tgwx-wqgc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apache/httpd@2.4.53" }, { "url": "http://public2.vulnerablecode.io/api/packages/131475?format=api", "purl": "pkg:rpm/redhat/httpd@2.4.53-7?arch=el9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c8y-usq6-q7bv" }, { "vulnerability": "VCID-6vkt-ka6n-afg4" }, { "vulnerability": "VCID-b2t9-mha2-juem" }, { "vulnerability": "VCID-gqk6-pf69-tuc3" }, { "vulnerability": "VCID-kvy3-w2np-eyfs" }, { "vulnerability": "VCID-p3qx-nxc2-w3aj" }, { "vulnerability": "VCID-sgfu-c8hw-ekdk" }, { "vulnerability": "VCID-yzb6-tgwx-wqgc" }, { "vulnerability": "VCID-z87v-y9cw-b3b5" }, { "vulnerability": "VCID-zgmf-k5kf-8qht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/httpd@2.4.53-7%3Farch=el9" }, { "url": "http://public2.vulnerablecode.io/api/packages/131472?format=api", "purl": "pkg:rpm/redhat/httpd24-httpd@2.4.34-23.el7?arch=5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1c8y-usq6-q7bv" }, { "vulnerability": "VCID-3xa7-ar49-fucn" }, { "vulnerability": "VCID-6vkt-ka6n-afg4" }, { "vulnerability": "VCID-b2t9-mha2-juem" }, { "vulnerability": "VCID-gqk6-pf69-tuc3" }, { "vulnerability": "VCID-k9t6-m45c-xyf4" }, { "vulnerability": "VCID-kgfq-eyta-wbgz" }, { "vulnerability": "VCID-kvy3-w2np-eyfs" }, { "vulnerability": "VCID-p3qx-nxc2-w3aj" }, { "vulnerability": "VCID-sgfu-c8hw-ekdk" }, { "vulnerability": "VCID-vztc-xrcf-x7bk" }, { "vulnerability": "VCID-yzb6-tgwx-wqgc" }, { "vulnerability": "VCID-z87v-y9cw-b3b5" }, { "vulnerability": "VCID-zgmf-k5kf-8qht" }, { "vulnerability": "VCID-zz8m-9k7f-ckb6" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/httpd24-httpd@2.4.34-23.el7%3Farch=5" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-30556.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-30556.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-30556", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00491", "scoring_system": "epss", "scoring_elements": "0.65965", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-30556" }, { "reference_url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012513", "reference_id": "1012513", "reference_type": "", "scores": [], "url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1012513" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095018", "reference_id": "2095018", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2095018" }, { "reference_url": "https://security.archlinux.org/AVG-2763", "reference_id": "AVG-2763", "reference_type": "", "scores": [ { "value": "Medium", "scoring_system": "archlinux", "scoring_elements": "" } ], "url": "https://security.archlinux.org/AVG-2763" }, { "reference_url": "https://httpd.apache.org/security/json/CVE-2022-30556.json", "reference_id": "CVE-2022-30556", "reference_type": "", "scores": [ { "value": "low", "scoring_system": "apache_httpd", "scoring_elements": "" } ], "url": "https://httpd.apache.org/security/json/CVE-2022-30556.json" }, { "reference_url": "https://security.gentoo.org/glsa/202208-20", "reference_id": "GLSA-202208-20", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202208-20" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:6753", "reference_id": "RHSA-2022:6753", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:6753" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:7647", "reference_id": "RHSA-2022:7647", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:7647" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2022:8067", "reference_id": "RHSA-2022:8067", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2022:8067" } ], "weaknesses": [ { "cwe_id": 200, "name": "Exposure of Sensitive Information to an Unauthorized Actor", "description": "The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information." } ], "exploits": [], "severity_range_score": "0.1 - 7.5", "exploitability": "0.5", "weighted_severity": "6.8", "risk_score": 3.4, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1c8y-usq6-q7bv" }