Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-su3k-9x5e-rqg4
SummaryJDK: XML External Entity Injection (XXE) error when processing XML data
Aliases
0
alias CVE-2017-1289
Fixed_packages
Affected_packages
0
url pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.16.45-1jpp.1?arch=el6_9
purl pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.16.45-1jpp.1?arch=el6_9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-c9qw-1g2p-qqcr
1
vulnerability VCID-eyjp-7kks-jbfr
2
vulnerability VCID-fsu1-jy1q-qkh1
3
vulnerability VCID-ft81-49v3-a7cr
4
vulnerability VCID-m6xx-a91r-sbhu
5
vulnerability VCID-mr6h-6jrp-gyf3
6
vulnerability VCID-smft-ms93-6kf1
7
vulnerability VCID-su3k-9x5e-rqg4
8
vulnerability VCID-zzqd-253d-ykca
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.16.45-1jpp.1%3Farch=el6_9
1
url pkg:rpm/redhat/java-1.7.1-ibm@1:1.7.1.4.5-1jpp.1?arch=el7_3
purl pkg:rpm/redhat/java-1.7.1-ibm@1:1.7.1.4.5-1jpp.1?arch=el7_3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-69zc-r9uw-jke5
1
vulnerability VCID-c9qw-1g2p-qqcr
2
vulnerability VCID-eyjp-7kks-jbfr
3
vulnerability VCID-fsu1-jy1q-qkh1
4
vulnerability VCID-ft81-49v3-a7cr
5
vulnerability VCID-m6xx-a91r-sbhu
6
vulnerability VCID-mr6h-6jrp-gyf3
7
vulnerability VCID-smft-ms93-6kf1
8
vulnerability VCID-su3k-9x5e-rqg4
9
vulnerability VCID-zzqd-253d-ykca
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.7.1-ibm@1:1.7.1.4.5-1jpp.1%3Farch=el7_3
2
url pkg:rpm/redhat/java-1.7.1-ibm@1:1.7.1.4.5-1jpp.2?arch=el6_9
purl pkg:rpm/redhat/java-1.7.1-ibm@1:1.7.1.4.5-1jpp.2?arch=el6_9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-69zc-r9uw-jke5
1
vulnerability VCID-c9qw-1g2p-qqcr
2
vulnerability VCID-eyjp-7kks-jbfr
3
vulnerability VCID-fsu1-jy1q-qkh1
4
vulnerability VCID-ft81-49v3-a7cr
5
vulnerability VCID-m6xx-a91r-sbhu
6
vulnerability VCID-mr6h-6jrp-gyf3
7
vulnerability VCID-smft-ms93-6kf1
8
vulnerability VCID-su3k-9x5e-rqg4
9
vulnerability VCID-zzqd-253d-ykca
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.7.1-ibm@1:1.7.1.4.5-1jpp.2%3Farch=el6_9
3
url pkg:rpm/redhat/java-1.8.0-ibm@1:1.8.0.4.5-1jpp.1?arch=el6_9
purl pkg:rpm/redhat/java-1.8.0-ibm@1:1.8.0.4.5-1jpp.1?arch=el6_9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-69zc-r9uw-jke5
1
vulnerability VCID-c9qw-1g2p-qqcr
2
vulnerability VCID-eyjp-7kks-jbfr
3
vulnerability VCID-fsu1-jy1q-qkh1
4
vulnerability VCID-ft81-49v3-a7cr
5
vulnerability VCID-m6xx-a91r-sbhu
6
vulnerability VCID-mr6h-6jrp-gyf3
7
vulnerability VCID-smft-ms93-6kf1
8
vulnerability VCID-su3k-9x5e-rqg4
9
vulnerability VCID-zzqd-253d-ykca
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.8.0-ibm@1:1.8.0.4.5-1jpp.1%3Farch=el6_9
4
url pkg:rpm/redhat/java-1.8.0-ibm@1:1.8.0.4.5-1jpp.1?arch=el7_3
purl pkg:rpm/redhat/java-1.8.0-ibm@1:1.8.0.4.5-1jpp.1?arch=el7_3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-69zc-r9uw-jke5
1
vulnerability VCID-c9qw-1g2p-qqcr
2
vulnerability VCID-eyjp-7kks-jbfr
3
vulnerability VCID-fsu1-jy1q-qkh1
4
vulnerability VCID-ft81-49v3-a7cr
5
vulnerability VCID-m6xx-a91r-sbhu
6
vulnerability VCID-mr6h-6jrp-gyf3
7
vulnerability VCID-smft-ms93-6kf1
8
vulnerability VCID-su3k-9x5e-rqg4
9
vulnerability VCID-zzqd-253d-ykca
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.8.0-ibm@1:1.8.0.4.5-1jpp.1%3Farch=el7_3
5
url pkg:rpm/redhat/java-1.8.0-ibm@1:1.8.0.5.5-1jpp.1?arch=el6_9
purl pkg:rpm/redhat/java-1.8.0-ibm@1:1.8.0.5.5-1jpp.1?arch=el6_9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2r75-1ccm-d7aw
1
vulnerability VCID-3xyb-xeyq-n3dm
2
vulnerability VCID-43vy-2etx-9ucx
3
vulnerability VCID-45wy-ban5-qqg8
4
vulnerability VCID-49z5-4djw-xuav
5
vulnerability VCID-4ucs-3zp9-rqey
6
vulnerability VCID-5jvq-evzj-tfcc
7
vulnerability VCID-5vrc-h4t3-uucb
8
vulnerability VCID-69zc-r9uw-jke5
9
vulnerability VCID-7d2e-14yp-pkhq
10
vulnerability VCID-8vr7-v6d5-gfhw
11
vulnerability VCID-8y3w-1sev-27d4
12
vulnerability VCID-9bbp-mutu-bqbf
13
vulnerability VCID-9yds-dpzg-4ba9
14
vulnerability VCID-a6rq-d1rv-j7dn
15
vulnerability VCID-awrz-da8u-7ud2
16
vulnerability VCID-bg39-wvte-83c1
17
vulnerability VCID-bthw-frhn-wqf6
18
vulnerability VCID-c9qw-1g2p-qqcr
19
vulnerability VCID-d4gw-vgm6-qbf3
20
vulnerability VCID-dtcg-vqnh-kugk
21
vulnerability VCID-edzj-4q7d-4bdj
22
vulnerability VCID-eyjp-7kks-jbfr
23
vulnerability VCID-fsu1-jy1q-qkh1
24
vulnerability VCID-ft81-49v3-a7cr
25
vulnerability VCID-hxb8-qu7h-8bdu
26
vulnerability VCID-kejc-5261-t7c6
27
vulnerability VCID-m6xx-a91r-sbhu
28
vulnerability VCID-m84d-m2tw-tyet
29
vulnerability VCID-mr6h-6jrp-gyf3
30
vulnerability VCID-n46g-eb9y-9bds
31
vulnerability VCID-ps35-n8f5-uqcr
32
vulnerability VCID-qfam-11ye-tkd8
33
vulnerability VCID-rvvx-ed8u-auc5
34
vulnerability VCID-smft-ms93-6kf1
35
vulnerability VCID-su3k-9x5e-rqg4
36
vulnerability VCID-u1c5-pgk4-8bcj
37
vulnerability VCID-wcc9-n2hm-87fx
38
vulnerability VCID-wjun-m9my-5qbb
39
vulnerability VCID-xayg-2xtc-r7ej
40
vulnerability VCID-xx3g-udjr-7yep
41
vulnerability VCID-zzqd-253d-ykca
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.8.0-ibm@1:1.8.0.5.5-1jpp.1%3Farch=el6_9
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1289.json
reference_id
reference_type
scores
0
value 8.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1289.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2017-1289
reference_id
reference_type
scores
0
value 0.00923
scoring_system epss
scoring_elements 0.75935
published_at 2026-04-01T12:55:00Z
1
value 0.00923
scoring_system epss
scoring_elements 0.76034
published_at 2026-04-18T12:55:00Z
2
value 0.00923
scoring_system epss
scoring_elements 0.75992
published_at 2026-04-13T12:55:00Z
3
value 0.00923
scoring_system epss
scoring_elements 0.76031
published_at 2026-04-16T12:55:00Z
4
value 0.00923
scoring_system epss
scoring_elements 0.75938
published_at 2026-04-02T12:55:00Z
5
value 0.00923
scoring_system epss
scoring_elements 0.75971
published_at 2026-04-04T12:55:00Z
6
value 0.00923
scoring_system epss
scoring_elements 0.75949
published_at 2026-04-07T12:55:00Z
7
value 0.00923
scoring_system epss
scoring_elements 0.75982
published_at 2026-04-08T12:55:00Z
8
value 0.00923
scoring_system epss
scoring_elements 0.75997
published_at 2026-04-09T12:55:00Z
9
value 0.00923
scoring_system epss
scoring_elements 0.76022
published_at 2026-04-11T12:55:00Z
10
value 0.00923
scoring_system epss
scoring_elements 0.75998
published_at 2026-04-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2017-1289
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 6.4
scoring_system cvssv2
scoring_elements AV:N/AC:L/Au:N/C:P/I:N/A:P
1
value 8.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1449603
reference_id 1449603
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1449603
4
reference_url https://access.redhat.com/errata/RHSA-2017:1220
reference_id RHSA-2017:1220
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1220
5
reference_url https://access.redhat.com/errata/RHSA-2017:1221
reference_id RHSA-2017:1221
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1221
6
reference_url https://access.redhat.com/errata/RHSA-2017:1222
reference_id RHSA-2017:1222
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:1222
7
reference_url https://access.redhat.com/errata/RHSA-2017:3453
reference_id RHSA-2017:3453
reference_type
scores
url https://access.redhat.com/errata/RHSA-2017:3453
Weaknesses
0
cwe_id 611
name Improper Restriction of XML External Entity Reference
description The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output.
Exploits
Severity_range_score6.4 - 8.2
Exploitability0.5
Weighted_severity7.4
Risk_score3.7
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-su3k-9x5e-rqg4