Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-yc3v-ejep-xydr
SummaryJDK: XML4J xml entity expansion excessive memory use (XML)
Aliases
0
alias CVE-2013-5372
Fixed_packages
Affected_packages
0
url pkg:rpm/redhat/java-1.5.0-ibm@1:1.5.0.16.4-1jpp.1?arch=el6_4
purl pkg:rpm/redhat/java-1.5.0-ibm@1:1.5.0.16.4-1jpp.1?arch=el6_4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2gme-zs8y-bqec
1
vulnerability VCID-2nc7-hgsm-9yd7
2
vulnerability VCID-6dhw-uqtb-kua5
3
vulnerability VCID-7bdw-8b72-5fhr
4
vulnerability VCID-831v-7kmc-aucv
5
vulnerability VCID-8faz-85u1-zbeq
6
vulnerability VCID-98s6-fdp7-gkg6
7
vulnerability VCID-dzaq-rw8t-wqba
8
vulnerability VCID-e62p-4szd-3ubj
9
vulnerability VCID-erxc-qxay-ayhr
10
vulnerability VCID-f4d5-mkub-b3e1
11
vulnerability VCID-ha9m-r5c1-2ffd
12
vulnerability VCID-khuw-dsag-p7ey
13
vulnerability VCID-kn39-nd68-a7c8
14
vulnerability VCID-m2d2-shze-ybgs
15
vulnerability VCID-msup-sd1d-j3b8
16
vulnerability VCID-n7ju-v5t7-h3eq
17
vulnerability VCID-pbdx-8nxr-nbew
18
vulnerability VCID-q5c8-hwra-zyfr
19
vulnerability VCID-qmvf-8y88-gqhh
20
vulnerability VCID-r3jr-7dkg-5khb
21
vulnerability VCID-twms-mj8q-pye1
22
vulnerability VCID-uvbz-c5pd-a3hc
23
vulnerability VCID-yc3v-ejep-xydr
24
vulnerability VCID-z63k-wes3-gqgw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.5.0-ibm@1:1.5.0.16.4-1jpp.1%3Farch=el6_4
1
url pkg:rpm/redhat/java-1.5.0-ibm@1:1.5.0.16.4-1jpp.1?arch=el5_10
purl pkg:rpm/redhat/java-1.5.0-ibm@1:1.5.0.16.4-1jpp.1?arch=el5_10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2gme-zs8y-bqec
1
vulnerability VCID-2nc7-hgsm-9yd7
2
vulnerability VCID-6dhw-uqtb-kua5
3
vulnerability VCID-7bdw-8b72-5fhr
4
vulnerability VCID-831v-7kmc-aucv
5
vulnerability VCID-8faz-85u1-zbeq
6
vulnerability VCID-98s6-fdp7-gkg6
7
vulnerability VCID-dzaq-rw8t-wqba
8
vulnerability VCID-e62p-4szd-3ubj
9
vulnerability VCID-erxc-qxay-ayhr
10
vulnerability VCID-f4d5-mkub-b3e1
11
vulnerability VCID-ha9m-r5c1-2ffd
12
vulnerability VCID-khuw-dsag-p7ey
13
vulnerability VCID-kn39-nd68-a7c8
14
vulnerability VCID-m2d2-shze-ybgs
15
vulnerability VCID-msup-sd1d-j3b8
16
vulnerability VCID-n7ju-v5t7-h3eq
17
vulnerability VCID-pbdx-8nxr-nbew
18
vulnerability VCID-q5c8-hwra-zyfr
19
vulnerability VCID-qmvf-8y88-gqhh
20
vulnerability VCID-r3jr-7dkg-5khb
21
vulnerability VCID-twms-mj8q-pye1
22
vulnerability VCID-uvbz-c5pd-a3hc
23
vulnerability VCID-yc3v-ejep-xydr
24
vulnerability VCID-z63k-wes3-gqgw
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.5.0-ibm@1:1.5.0.16.4-1jpp.1%3Farch=el5_10
2
url pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.15.0-1jpp.1?arch=el5
purl pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.15.0-1jpp.1?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17nn-wrs1-fkb6
1
vulnerability VCID-2gme-zs8y-bqec
2
vulnerability VCID-2jj1-ebr5-5bbj
3
vulnerability VCID-2nc7-hgsm-9yd7
4
vulnerability VCID-4j1g-wau3-3ya5
5
vulnerability VCID-5fd6-geeb-fufj
6
vulnerability VCID-6q4h-4h6p-nufq
7
vulnerability VCID-7bdw-8b72-5fhr
8
vulnerability VCID-831v-7kmc-aucv
9
vulnerability VCID-8faz-85u1-zbeq
10
vulnerability VCID-98s6-fdp7-gkg6
11
vulnerability VCID-bkcn-7xu6-g7at
12
vulnerability VCID-dzaq-rw8t-wqba
13
vulnerability VCID-e62p-4szd-3ubj
14
vulnerability VCID-erxc-qxay-ayhr
15
vulnerability VCID-f4d5-mkub-b3e1
16
vulnerability VCID-ha9m-r5c1-2ffd
17
vulnerability VCID-j3es-uvqp-byes
18
vulnerability VCID-jktb-47k1-rffu
19
vulnerability VCID-khuw-dsag-p7ey
20
vulnerability VCID-kn39-nd68-a7c8
21
vulnerability VCID-m2d2-shze-ybgs
22
vulnerability VCID-mmhg-araa-fkb8
23
vulnerability VCID-msup-sd1d-j3b8
24
vulnerability VCID-n6gc-cnsc-z7a6
25
vulnerability VCID-n7ju-v5t7-h3eq
26
vulnerability VCID-pbdx-8nxr-nbew
27
vulnerability VCID-q5c8-hwra-zyfr
28
vulnerability VCID-qmvf-8y88-gqhh
29
vulnerability VCID-r3jr-7dkg-5khb
30
vulnerability VCID-r6a5-wtaz-8bgu
31
vulnerability VCID-sk3j-q3uf-5yfp
32
vulnerability VCID-te2n-je4h-j7bc
33
vulnerability VCID-twms-mj8q-pye1
34
vulnerability VCID-uvbz-c5pd-a3hc
35
vulnerability VCID-vf6r-a833-fbg6
36
vulnerability VCID-wj8s-enzz-aka2
37
vulnerability VCID-x65k-nney-23b5
38
vulnerability VCID-yc3v-ejep-xydr
39
vulnerability VCID-z63k-wes3-gqgw
40
vulnerability VCID-zx4b-qwy1-fkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.15.0-1jpp.1%3Farch=el5
3
url pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.15.0-1jpp.1?arch=el6_4
purl pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.15.0-1jpp.1?arch=el6_4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17nn-wrs1-fkb6
1
vulnerability VCID-2gme-zs8y-bqec
2
vulnerability VCID-2jj1-ebr5-5bbj
3
vulnerability VCID-2nc7-hgsm-9yd7
4
vulnerability VCID-4j1g-wau3-3ya5
5
vulnerability VCID-5fd6-geeb-fufj
6
vulnerability VCID-6q4h-4h6p-nufq
7
vulnerability VCID-7bdw-8b72-5fhr
8
vulnerability VCID-831v-7kmc-aucv
9
vulnerability VCID-8faz-85u1-zbeq
10
vulnerability VCID-98s6-fdp7-gkg6
11
vulnerability VCID-bkcn-7xu6-g7at
12
vulnerability VCID-dzaq-rw8t-wqba
13
vulnerability VCID-e62p-4szd-3ubj
14
vulnerability VCID-erxc-qxay-ayhr
15
vulnerability VCID-f4d5-mkub-b3e1
16
vulnerability VCID-ha9m-r5c1-2ffd
17
vulnerability VCID-j3es-uvqp-byes
18
vulnerability VCID-jktb-47k1-rffu
19
vulnerability VCID-khuw-dsag-p7ey
20
vulnerability VCID-kn39-nd68-a7c8
21
vulnerability VCID-m2d2-shze-ybgs
22
vulnerability VCID-mmhg-araa-fkb8
23
vulnerability VCID-msup-sd1d-j3b8
24
vulnerability VCID-n6gc-cnsc-z7a6
25
vulnerability VCID-n7ju-v5t7-h3eq
26
vulnerability VCID-pbdx-8nxr-nbew
27
vulnerability VCID-q5c8-hwra-zyfr
28
vulnerability VCID-qmvf-8y88-gqhh
29
vulnerability VCID-r3jr-7dkg-5khb
30
vulnerability VCID-r6a5-wtaz-8bgu
31
vulnerability VCID-sk3j-q3uf-5yfp
32
vulnerability VCID-te2n-je4h-j7bc
33
vulnerability VCID-twms-mj8q-pye1
34
vulnerability VCID-uvbz-c5pd-a3hc
35
vulnerability VCID-vf6r-a833-fbg6
36
vulnerability VCID-wj8s-enzz-aka2
37
vulnerability VCID-x65k-nney-23b5
38
vulnerability VCID-yc3v-ejep-xydr
39
vulnerability VCID-z63k-wes3-gqgw
40
vulnerability VCID-zx4b-qwy1-fkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.15.0-1jpp.1%3Farch=el6_4
4
url pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.15.0-1jpp.1?arch=el5_10
purl pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.15.0-1jpp.1?arch=el5_10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17nn-wrs1-fkb6
1
vulnerability VCID-2gme-zs8y-bqec
2
vulnerability VCID-2jj1-ebr5-5bbj
3
vulnerability VCID-2nc7-hgsm-9yd7
4
vulnerability VCID-4j1g-wau3-3ya5
5
vulnerability VCID-5fd6-geeb-fufj
6
vulnerability VCID-6q4h-4h6p-nufq
7
vulnerability VCID-7bdw-8b72-5fhr
8
vulnerability VCID-831v-7kmc-aucv
9
vulnerability VCID-8faz-85u1-zbeq
10
vulnerability VCID-98s6-fdp7-gkg6
11
vulnerability VCID-bkcn-7xu6-g7at
12
vulnerability VCID-dzaq-rw8t-wqba
13
vulnerability VCID-e62p-4szd-3ubj
14
vulnerability VCID-erxc-qxay-ayhr
15
vulnerability VCID-f4d5-mkub-b3e1
16
vulnerability VCID-ha9m-r5c1-2ffd
17
vulnerability VCID-j3es-uvqp-byes
18
vulnerability VCID-jktb-47k1-rffu
19
vulnerability VCID-khuw-dsag-p7ey
20
vulnerability VCID-kn39-nd68-a7c8
21
vulnerability VCID-m2d2-shze-ybgs
22
vulnerability VCID-mmhg-araa-fkb8
23
vulnerability VCID-msup-sd1d-j3b8
24
vulnerability VCID-n6gc-cnsc-z7a6
25
vulnerability VCID-n7ju-v5t7-h3eq
26
vulnerability VCID-pbdx-8nxr-nbew
27
vulnerability VCID-q5c8-hwra-zyfr
28
vulnerability VCID-qmvf-8y88-gqhh
29
vulnerability VCID-r3jr-7dkg-5khb
30
vulnerability VCID-r6a5-wtaz-8bgu
31
vulnerability VCID-sk3j-q3uf-5yfp
32
vulnerability VCID-te2n-je4h-j7bc
33
vulnerability VCID-twms-mj8q-pye1
34
vulnerability VCID-uvbz-c5pd-a3hc
35
vulnerability VCID-vf6r-a833-fbg6
36
vulnerability VCID-wj8s-enzz-aka2
37
vulnerability VCID-x65k-nney-23b5
38
vulnerability VCID-yc3v-ejep-xydr
39
vulnerability VCID-z63k-wes3-gqgw
40
vulnerability VCID-zx4b-qwy1-fkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.6.0-ibm@1:1.6.0.15.0-1jpp.1%3Farch=el5_10
5
url pkg:rpm/redhat/java-1.7.0-ibm@1:1.7.0.6.0-1jpp.1?arch=el5_10
purl pkg:rpm/redhat/java-1.7.0-ibm@1:1.7.0.6.0-1jpp.1?arch=el5_10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17nn-wrs1-fkb6
1
vulnerability VCID-2gme-zs8y-bqec
2
vulnerability VCID-2jj1-ebr5-5bbj
3
vulnerability VCID-2nc7-hgsm-9yd7
4
vulnerability VCID-393d-wgcy-dfc4
5
vulnerability VCID-4j1g-wau3-3ya5
6
vulnerability VCID-5fd6-geeb-fufj
7
vulnerability VCID-6dhw-uqtb-kua5
8
vulnerability VCID-6q4h-4h6p-nufq
9
vulnerability VCID-7bdw-8b72-5fhr
10
vulnerability VCID-7n2c-p6xz-97gw
11
vulnerability VCID-831v-7kmc-aucv
12
vulnerability VCID-8faz-85u1-zbeq
13
vulnerability VCID-98s6-fdp7-gkg6
14
vulnerability VCID-aqtv-nbes-33aw
15
vulnerability VCID-bkcn-7xu6-g7at
16
vulnerability VCID-dzaq-rw8t-wqba
17
vulnerability VCID-e62p-4szd-3ubj
18
vulnerability VCID-erxc-qxay-ayhr
19
vulnerability VCID-eysz-1t1f-uyd6
20
vulnerability VCID-f4d5-mkub-b3e1
21
vulnerability VCID-ha9m-r5c1-2ffd
22
vulnerability VCID-j3es-uvqp-byes
23
vulnerability VCID-jktb-47k1-rffu
24
vulnerability VCID-khuw-dsag-p7ey
25
vulnerability VCID-kn39-nd68-a7c8
26
vulnerability VCID-m2d2-shze-ybgs
27
vulnerability VCID-mmhg-araa-fkb8
28
vulnerability VCID-msup-sd1d-j3b8
29
vulnerability VCID-n6gc-cnsc-z7a6
30
vulnerability VCID-n7ju-v5t7-h3eq
31
vulnerability VCID-pbdx-8nxr-nbew
32
vulnerability VCID-q5c8-hwra-zyfr
33
vulnerability VCID-qmvf-8y88-gqhh
34
vulnerability VCID-r3jr-7dkg-5khb
35
vulnerability VCID-r6a5-wtaz-8bgu
36
vulnerability VCID-sk3j-q3uf-5yfp
37
vulnerability VCID-te2n-je4h-j7bc
38
vulnerability VCID-twms-mj8q-pye1
39
vulnerability VCID-uvbz-c5pd-a3hc
40
vulnerability VCID-vf6r-a833-fbg6
41
vulnerability VCID-wj8s-enzz-aka2
42
vulnerability VCID-x65k-nney-23b5
43
vulnerability VCID-x72p-yry2-bugs
44
vulnerability VCID-yc3v-ejep-xydr
45
vulnerability VCID-z63k-wes3-gqgw
46
vulnerability VCID-zx4b-qwy1-fkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.7.0-ibm@1:1.7.0.6.0-1jpp.1%3Farch=el5_10
6
url pkg:rpm/redhat/java-1.7.0-ibm@1:1.7.0.6.0-1jpp.1?arch=el6_4
purl pkg:rpm/redhat/java-1.7.0-ibm@1:1.7.0.6.0-1jpp.1?arch=el6_4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-17nn-wrs1-fkb6
1
vulnerability VCID-2gme-zs8y-bqec
2
vulnerability VCID-2jj1-ebr5-5bbj
3
vulnerability VCID-2nc7-hgsm-9yd7
4
vulnerability VCID-393d-wgcy-dfc4
5
vulnerability VCID-4j1g-wau3-3ya5
6
vulnerability VCID-5fd6-geeb-fufj
7
vulnerability VCID-6dhw-uqtb-kua5
8
vulnerability VCID-6q4h-4h6p-nufq
9
vulnerability VCID-7bdw-8b72-5fhr
10
vulnerability VCID-7n2c-p6xz-97gw
11
vulnerability VCID-831v-7kmc-aucv
12
vulnerability VCID-8faz-85u1-zbeq
13
vulnerability VCID-98s6-fdp7-gkg6
14
vulnerability VCID-aqtv-nbes-33aw
15
vulnerability VCID-bkcn-7xu6-g7at
16
vulnerability VCID-dzaq-rw8t-wqba
17
vulnerability VCID-e62p-4szd-3ubj
18
vulnerability VCID-erxc-qxay-ayhr
19
vulnerability VCID-eysz-1t1f-uyd6
20
vulnerability VCID-f4d5-mkub-b3e1
21
vulnerability VCID-ha9m-r5c1-2ffd
22
vulnerability VCID-j3es-uvqp-byes
23
vulnerability VCID-jktb-47k1-rffu
24
vulnerability VCID-khuw-dsag-p7ey
25
vulnerability VCID-kn39-nd68-a7c8
26
vulnerability VCID-m2d2-shze-ybgs
27
vulnerability VCID-mmhg-araa-fkb8
28
vulnerability VCID-msup-sd1d-j3b8
29
vulnerability VCID-n6gc-cnsc-z7a6
30
vulnerability VCID-n7ju-v5t7-h3eq
31
vulnerability VCID-pbdx-8nxr-nbew
32
vulnerability VCID-q5c8-hwra-zyfr
33
vulnerability VCID-qmvf-8y88-gqhh
34
vulnerability VCID-r3jr-7dkg-5khb
35
vulnerability VCID-r6a5-wtaz-8bgu
36
vulnerability VCID-sk3j-q3uf-5yfp
37
vulnerability VCID-te2n-je4h-j7bc
38
vulnerability VCID-twms-mj8q-pye1
39
vulnerability VCID-uvbz-c5pd-a3hc
40
vulnerability VCID-vf6r-a833-fbg6
41
vulnerability VCID-wj8s-enzz-aka2
42
vulnerability VCID-x65k-nney-23b5
43
vulnerability VCID-x72p-yry2-bugs
44
vulnerability VCID-yc3v-ejep-xydr
45
vulnerability VCID-z63k-wes3-gqgw
46
vulnerability VCID-zx4b-qwy1-fkf8
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.7.0-ibm@1:1.7.0.6.0-1jpp.1%3Farch=el6_4
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5372.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-5372.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2013-5372
reference_id
reference_type
scores
0
value 0.01728
scoring_system epss
scoring_elements 0.82368
published_at 2026-04-01T12:55:00Z
1
value 0.01728
scoring_system epss
scoring_elements 0.82382
published_at 2026-04-02T12:55:00Z
2
value 0.01728
scoring_system epss
scoring_elements 0.82399
published_at 2026-04-04T12:55:00Z
3
value 0.01728
scoring_system epss
scoring_elements 0.82396
published_at 2026-04-07T12:55:00Z
4
value 0.01728
scoring_system epss
scoring_elements 0.82424
published_at 2026-04-08T12:55:00Z
5
value 0.01728
scoring_system epss
scoring_elements 0.82431
published_at 2026-04-09T12:55:00Z
6
value 0.01728
scoring_system epss
scoring_elements 0.8245
published_at 2026-04-11T12:55:00Z
7
value 0.01728
scoring_system epss
scoring_elements 0.82446
published_at 2026-04-12T12:55:00Z
8
value 0.01728
scoring_system epss
scoring_elements 0.82441
published_at 2026-04-13T12:55:00Z
9
value 0.01728
scoring_system epss
scoring_elements 0.82476
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2013-5372
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1027825
reference_id 1027825
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1027825
3
reference_url https://access.redhat.com/errata/RHSA-2013:1507
reference_id RHSA-2013:1507
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1507
4
reference_url https://access.redhat.com/errata/RHSA-2013:1508
reference_id RHSA-2013:1508
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1508
5
reference_url https://access.redhat.com/errata/RHSA-2013:1509
reference_id RHSA-2013:1509
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1509
6
reference_url https://access.redhat.com/errata/RHSA-2013:1793
reference_id RHSA-2013:1793
reference_type
scores
url https://access.redhat.com/errata/RHSA-2013:1793
Weaknesses
Exploits
Severity_range_scorenull
Exploitability0.5
Weighted_severity0.0
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-yc3v-ejep-xydr