Lookup for vulnerable packages by Package URL.

Purlpkg:deb/debian/thunderbird@1:102.2.0-1?distro=trixie
Typedeb
Namespacedebian
Namethunderbird
Version1:102.2.0-1
Qualifiers
distro trixie
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version1:102.2.1-1
Latest_non_vulnerable_version1:140.11.0esr-1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-5re9-y1r5-13a6
vulnerability_id VCID-5re9-y1r5-13a6
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38472.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38472.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-38472
reference_id
reference_type
scores
0
value 0.0017
scoring_system epss
scoring_elements 0.38021
published_at 2026-06-11T12:55:00Z
1
value 0.0017
scoring_system epss
scoring_elements 0.3821
published_at 2026-06-14T12:55:00Z
2
value 0.0017
scoring_system epss
scoring_elements 0.38223
published_at 2026-06-13T12:55:00Z
3
value 0.0017
scoring_system epss
scoring_elements 0.38197
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-38472
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38472
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38473
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38478
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38478
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2120673
reference_id 2120673
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2120673
7
reference_url https://security.gentoo.org/glsa/202208-37
reference_id GLSA-202208-37
reference_type
scores
url https://security.gentoo.org/glsa/202208-37
8
reference_url https://security.gentoo.org/glsa/202208-38
reference_id GLSA-202208-38
reference_type
scores
url https://security.gentoo.org/glsa/202208-38
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-33
reference_id mfsa2022-33
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-33
10
reference_url https://www.mozilla.org/security/advisories/mfsa2022-33/
reference_id mfsa2022-33
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T16:50:08Z/
url https://www.mozilla.org/security/advisories/mfsa2022-33/
11
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-34
reference_id mfsa2022-34
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-34
12
reference_url https://www.mozilla.org/security/advisories/mfsa2022-34/
reference_id mfsa2022-34
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T16:50:08Z/
url https://www.mozilla.org/security/advisories/mfsa2022-34/
13
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-35
reference_id mfsa2022-35
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-35
14
reference_url https://www.mozilla.org/security/advisories/mfsa2022-35/
reference_id mfsa2022-35
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T16:50:08Z/
url https://www.mozilla.org/security/advisories/mfsa2022-35/
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-36
reference_id mfsa2022-36
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-36
16
reference_url https://www.mozilla.org/security/advisories/mfsa2022-36/
reference_id mfsa2022-36
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T16:50:08Z/
url https://www.mozilla.org/security/advisories/mfsa2022-36/
17
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-37
reference_id mfsa2022-37
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-37
18
reference_url https://www.mozilla.org/security/advisories/mfsa2022-37/
reference_id mfsa2022-37
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T16:50:08Z/
url https://www.mozilla.org/security/advisories/mfsa2022-37/
19
reference_url https://access.redhat.com/errata/RHSA-2022:6164
reference_id RHSA-2022:6164
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6164
20
reference_url https://access.redhat.com/errata/RHSA-2022:6165
reference_id RHSA-2022:6165
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6165
21
reference_url https://access.redhat.com/errata/RHSA-2022:6166
reference_id RHSA-2022:6166
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6166
22
reference_url https://access.redhat.com/errata/RHSA-2022:6167
reference_id RHSA-2022:6167
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6167
23
reference_url https://access.redhat.com/errata/RHSA-2022:6168
reference_id RHSA-2022:6168
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6168
24
reference_url https://access.redhat.com/errata/RHSA-2022:6169
reference_id RHSA-2022:6169
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6169
25
reference_url https://access.redhat.com/errata/RHSA-2022:6174
reference_id RHSA-2022:6174
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6174
26
reference_url https://access.redhat.com/errata/RHSA-2022:6175
reference_id RHSA-2022:6175
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6175
27
reference_url https://access.redhat.com/errata/RHSA-2022:6176
reference_id RHSA-2022:6176
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6176
28
reference_url https://access.redhat.com/errata/RHSA-2022:6177
reference_id RHSA-2022:6177
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6177
29
reference_url https://access.redhat.com/errata/RHSA-2022:6178
reference_id RHSA-2022:6178
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6178
30
reference_url https://access.redhat.com/errata/RHSA-2022:6179
reference_id RHSA-2022:6179
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6179
31
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1769155
reference_id show_bug.cgi?id=1769155
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-15T16:50:08Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1769155
32
reference_url https://usn.ubuntu.com/5581-1/
reference_id USN-5581-1
reference_type
scores
url https://usn.ubuntu.com/5581-1/
33
reference_url https://usn.ubuntu.com/5663-1/
reference_id USN-5663-1
reference_type
scores
url https://usn.ubuntu.com/5663-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@1:91.13.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:91.13.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:91.13.0-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:102.2.0-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:102.2.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:102.2.0-1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.11.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.11.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.11.0esr-1%3Fdistro=trixie
aliases CVE-2022-38472
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5re9-y1r5-13a6
1
url VCID-8gda-ckwa-3bcf
vulnerability_id VCID-8gda-ckwa-3bcf
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38473.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38473.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-38473
reference_id
reference_type
scores
0
value 0.00251
scoring_system epss
scoring_elements 0.48752
published_at 2026-06-11T12:55:00Z
1
value 0.00251
scoring_system epss
scoring_elements 0.48893
published_at 2026-06-14T12:55:00Z
2
value 0.00251
scoring_system epss
scoring_elements 0.48907
published_at 2026-06-13T12:55:00Z
3
value 0.00251
scoring_system epss
scoring_elements 0.48889
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-38473
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38472
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38473
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38478
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38478
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2120674
reference_id 2120674
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2120674
7
reference_url https://security.gentoo.org/glsa/202208-37
reference_id GLSA-202208-37
reference_type
scores
url https://security.gentoo.org/glsa/202208-37
8
reference_url https://security.gentoo.org/glsa/202208-38
reference_id GLSA-202208-38
reference_type
scores
url https://security.gentoo.org/glsa/202208-38
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-33
reference_id mfsa2022-33
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-33
10
reference_url https://www.mozilla.org/security/advisories/mfsa2022-33/
reference_id mfsa2022-33
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T16:13:59Z/
url https://www.mozilla.org/security/advisories/mfsa2022-33/
11
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-34
reference_id mfsa2022-34
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-34
12
reference_url https://www.mozilla.org/security/advisories/mfsa2022-34/
reference_id mfsa2022-34
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T16:13:59Z/
url https://www.mozilla.org/security/advisories/mfsa2022-34/
13
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-35
reference_id mfsa2022-35
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-35
14
reference_url https://www.mozilla.org/security/advisories/mfsa2022-35/
reference_id mfsa2022-35
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T16:13:59Z/
url https://www.mozilla.org/security/advisories/mfsa2022-35/
15
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-36
reference_id mfsa2022-36
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-36
16
reference_url https://www.mozilla.org/security/advisories/mfsa2022-36/
reference_id mfsa2022-36
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T16:13:59Z/
url https://www.mozilla.org/security/advisories/mfsa2022-36/
17
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-37
reference_id mfsa2022-37
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-37
18
reference_url https://www.mozilla.org/security/advisories/mfsa2022-37/
reference_id mfsa2022-37
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T16:13:59Z/
url https://www.mozilla.org/security/advisories/mfsa2022-37/
19
reference_url https://access.redhat.com/errata/RHSA-2022:6164
reference_id RHSA-2022:6164
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6164
20
reference_url https://access.redhat.com/errata/RHSA-2022:6165
reference_id RHSA-2022:6165
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6165
21
reference_url https://access.redhat.com/errata/RHSA-2022:6166
reference_id RHSA-2022:6166
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6166
22
reference_url https://access.redhat.com/errata/RHSA-2022:6167
reference_id RHSA-2022:6167
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6167
23
reference_url https://access.redhat.com/errata/RHSA-2022:6168
reference_id RHSA-2022:6168
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6168
24
reference_url https://access.redhat.com/errata/RHSA-2022:6169
reference_id RHSA-2022:6169
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6169
25
reference_url https://access.redhat.com/errata/RHSA-2022:6174
reference_id RHSA-2022:6174
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6174
26
reference_url https://access.redhat.com/errata/RHSA-2022:6175
reference_id RHSA-2022:6175
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6175
27
reference_url https://access.redhat.com/errata/RHSA-2022:6176
reference_id RHSA-2022:6176
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6176
28
reference_url https://access.redhat.com/errata/RHSA-2022:6177
reference_id RHSA-2022:6177
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6177
29
reference_url https://access.redhat.com/errata/RHSA-2022:6178
reference_id RHSA-2022:6178
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6178
30
reference_url https://access.redhat.com/errata/RHSA-2022:6179
reference_id RHSA-2022:6179
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6179
31
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1771685
reference_id show_bug.cgi?id=1771685
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T16:13:59Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1771685
32
reference_url https://usn.ubuntu.com/5581-1/
reference_id USN-5581-1
reference_type
scores
url https://usn.ubuntu.com/5581-1/
33
reference_url https://usn.ubuntu.com/5663-1/
reference_id USN-5663-1
reference_type
scores
url https://usn.ubuntu.com/5663-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@1:91.13.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:91.13.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:91.13.0-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:102.2.0-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:102.2.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:102.2.0-1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.11.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.11.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.11.0esr-1%3Fdistro=trixie
aliases CVE-2022-38473
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8gda-ckwa-3bcf
2
url VCID-h6bb-zetn-7qha
vulnerability_id VCID-h6bb-zetn-7qha
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38477.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38477.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-38477
reference_id
reference_type
scores
0
value 0.00199
scoring_system epss
scoring_elements 0.42108
published_at 2026-06-14T12:55:00Z
1
value 0.00199
scoring_system epss
scoring_elements 0.42117
published_at 2026-06-13T12:55:00Z
2
value 0.00199
scoring_system epss
scoring_elements 0.42096
published_at 2026-06-12T12:55:00Z
3
value 0.00199
scoring_system epss
scoring_elements 0.41933
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-38477
2
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
3
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2120695
reference_id 2120695
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2120695
4
reference_url https://bugzilla.mozilla.org/buglist.cgi?bug_id=1760611%2C1770219%2C1771159%2C1773363
reference_id buglist.cgi?bug_id=1760611%2C1770219%2C1771159%2C1773363
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T17:21:30Z/
url https://bugzilla.mozilla.org/buglist.cgi?bug_id=1760611%2C1770219%2C1771159%2C1773363
5
reference_url https://security.gentoo.org/glsa/202208-37
reference_id GLSA-202208-37
reference_type
scores
url https://security.gentoo.org/glsa/202208-37
6
reference_url https://security.gentoo.org/glsa/202208-38
reference_id GLSA-202208-38
reference_type
scores
url https://security.gentoo.org/glsa/202208-38
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-33
reference_id mfsa2022-33
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-33
8
reference_url https://www.mozilla.org/security/advisories/mfsa2022-33/
reference_id mfsa2022-33
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T17:21:30Z/
url https://www.mozilla.org/security/advisories/mfsa2022-33/
9
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-34
reference_id mfsa2022-34
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-34
10
reference_url https://www.mozilla.org/security/advisories/mfsa2022-34/
reference_id mfsa2022-34
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T17:21:30Z/
url https://www.mozilla.org/security/advisories/mfsa2022-34/
11
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-36
reference_id mfsa2022-36
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-36
12
reference_url https://www.mozilla.org/security/advisories/mfsa2022-36/
reference_id mfsa2022-36
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T17:21:30Z/
url https://www.mozilla.org/security/advisories/mfsa2022-36/
13
reference_url https://access.redhat.com/errata/RHSA-2022:6164
reference_id RHSA-2022:6164
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6164
14
reference_url https://access.redhat.com/errata/RHSA-2022:6165
reference_id RHSA-2022:6165
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6165
15
reference_url https://access.redhat.com/errata/RHSA-2022:6166
reference_id RHSA-2022:6166
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6166
16
reference_url https://access.redhat.com/errata/RHSA-2022:6167
reference_id RHSA-2022:6167
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6167
17
reference_url https://access.redhat.com/errata/RHSA-2022:6168
reference_id RHSA-2022:6168
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6168
18
reference_url https://access.redhat.com/errata/RHSA-2022:6169
reference_id RHSA-2022:6169
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6169
19
reference_url https://access.redhat.com/errata/RHSA-2022:6174
reference_id RHSA-2022:6174
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6174
20
reference_url https://access.redhat.com/errata/RHSA-2022:6175
reference_id RHSA-2022:6175
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6175
21
reference_url https://access.redhat.com/errata/RHSA-2022:6176
reference_id RHSA-2022:6176
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6176
22
reference_url https://access.redhat.com/errata/RHSA-2022:6177
reference_id RHSA-2022:6177
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6177
23
reference_url https://access.redhat.com/errata/RHSA-2022:6178
reference_id RHSA-2022:6178
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6178
24
reference_url https://access.redhat.com/errata/RHSA-2022:6179
reference_id RHSA-2022:6179
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6179
25
reference_url https://usn.ubuntu.com/5581-1/
reference_id USN-5581-1
reference_type
scores
url https://usn.ubuntu.com/5581-1/
26
reference_url https://usn.ubuntu.com/5663-1/
reference_id USN-5663-1
reference_type
scores
url https://usn.ubuntu.com/5663-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@0?distro=trixie
purl pkg:deb/debian/thunderbird@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@0%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:102.2.0-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:102.2.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:102.2.0-1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.11.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.11.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.11.0esr-1%3Fdistro=trixie
aliases CVE-2022-38477
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h6bb-zetn-7qha
3
url VCID-rp2p-y4ns-fkft
vulnerability_id VCID-rp2p-y4ns-fkft
summary
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38478.json
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38478.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-38478
reference_id
reference_type
scores
0
value 0.00272
scoring_system epss
scoring_elements 0.50913
published_at 2026-06-11T12:55:00Z
1
value 0.00272
scoring_system epss
scoring_elements 0.51048
published_at 2026-06-14T12:55:00Z
2
value 0.00272
scoring_system epss
scoring_elements 0.5106
published_at 2026-06-13T12:55:00Z
3
value 0.00272
scoring_system epss
scoring_elements 0.51045
published_at 2026-06-12T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-38478
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38472
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38472
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38473
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38473
4
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38478
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38478
5
reference_url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml
6
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2120696
reference_id 2120696
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2120696
7
reference_url https://bugzilla.mozilla.org/buglist.cgi?bug_id=1770630%2C1776658
reference_id buglist.cgi?bug_id=1770630%2C1776658
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T17:19:42Z/
url https://bugzilla.mozilla.org/buglist.cgi?bug_id=1770630%2C1776658
8
reference_url https://security.gentoo.org/glsa/202208-37
reference_id GLSA-202208-37
reference_type
scores
url https://security.gentoo.org/glsa/202208-37
9
reference_url https://security.gentoo.org/glsa/202208-38
reference_id GLSA-202208-38
reference_type
scores
url https://security.gentoo.org/glsa/202208-38
10
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-33
reference_id mfsa2022-33
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-33
11
reference_url https://www.mozilla.org/security/advisories/mfsa2022-33/
reference_id mfsa2022-33
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T17:19:42Z/
url https://www.mozilla.org/security/advisories/mfsa2022-33/
12
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-34
reference_id mfsa2022-34
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-34
13
reference_url https://www.mozilla.org/security/advisories/mfsa2022-34/
reference_id mfsa2022-34
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T17:19:42Z/
url https://www.mozilla.org/security/advisories/mfsa2022-34/
14
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-35
reference_id mfsa2022-35
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-35
15
reference_url https://www.mozilla.org/security/advisories/mfsa2022-35/
reference_id mfsa2022-35
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T17:19:42Z/
url https://www.mozilla.org/security/advisories/mfsa2022-35/
16
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-36
reference_id mfsa2022-36
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-36
17
reference_url https://www.mozilla.org/security/advisories/mfsa2022-36/
reference_id mfsa2022-36
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T17:19:42Z/
url https://www.mozilla.org/security/advisories/mfsa2022-36/
18
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-37
reference_id mfsa2022-37
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-37
19
reference_url https://www.mozilla.org/security/advisories/mfsa2022-37/
reference_id mfsa2022-37
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T17:19:42Z/
url https://www.mozilla.org/security/advisories/mfsa2022-37/
20
reference_url https://access.redhat.com/errata/RHSA-2022:6164
reference_id RHSA-2022:6164
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6164
21
reference_url https://access.redhat.com/errata/RHSA-2022:6165
reference_id RHSA-2022:6165
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6165
22
reference_url https://access.redhat.com/errata/RHSA-2022:6166
reference_id RHSA-2022:6166
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6166
23
reference_url https://access.redhat.com/errata/RHSA-2022:6167
reference_id RHSA-2022:6167
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6167
24
reference_url https://access.redhat.com/errata/RHSA-2022:6168
reference_id RHSA-2022:6168
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6168
25
reference_url https://access.redhat.com/errata/RHSA-2022:6169
reference_id RHSA-2022:6169
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6169
26
reference_url https://access.redhat.com/errata/RHSA-2022:6174
reference_id RHSA-2022:6174
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6174
27
reference_url https://access.redhat.com/errata/RHSA-2022:6175
reference_id RHSA-2022:6175
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6175
28
reference_url https://access.redhat.com/errata/RHSA-2022:6176
reference_id RHSA-2022:6176
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6176
29
reference_url https://access.redhat.com/errata/RHSA-2022:6177
reference_id RHSA-2022:6177
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6177
30
reference_url https://access.redhat.com/errata/RHSA-2022:6178
reference_id RHSA-2022:6178
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6178
31
reference_url https://access.redhat.com/errata/RHSA-2022:6179
reference_id RHSA-2022:6179
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6179
32
reference_url https://usn.ubuntu.com/5581-1/
reference_id USN-5581-1
reference_type
scores
url https://usn.ubuntu.com/5581-1/
33
reference_url https://usn.ubuntu.com/5663-1/
reference_id USN-5663-1
reference_type
scores
url https://usn.ubuntu.com/5663-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@1:91.13.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:91.13.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:91.13.0-1~deb11u1%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:102.2.0-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:102.2.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:102.2.0-1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.11.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.11.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.11.0esr-1%3Fdistro=trixie
aliases CVE-2022-38478
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rp2p-y4ns-fkft
4
url VCID-ruk3-gdnn-cugr
vulnerability_id VCID-ruk3-gdnn-cugr
summary A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-free vulnerability. In Firefox, this lock protected the data when a user changed their master password. This vulnerability affects Firefox ESR < 102.2 and Thunderbird < 102.2.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38476.json
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-38476.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-38476
reference_id
reference_type
scores
0
value 0.00187
scoring_system epss
scoring_elements 0.40522
published_at 2026-06-14T12:55:00Z
1
value 0.00187
scoring_system epss
scoring_elements 0.40343
published_at 2026-06-11T12:55:00Z
2
value 0.00187
scoring_system epss
scoring_elements 0.4051
published_at 2026-06-12T12:55:00Z
3
value 0.00187
scoring_system epss
scoring_elements 0.40533
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-38476
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2120678
reference_id 2120678
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2120678
3
reference_url https://security.gentoo.org/glsa/202208-37
reference_id GLSA-202208-37
reference_type
scores
url https://security.gentoo.org/glsa/202208-37
4
reference_url https://security.gentoo.org/glsa/202208-38
reference_id GLSA-202208-38
reference_type
scores
url https://security.gentoo.org/glsa/202208-38
5
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-34
reference_id mfsa2022-34
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-34
6
reference_url https://www.mozilla.org/security/advisories/mfsa2022-34/
reference_id mfsa2022-34
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T17:23:43Z/
url https://www.mozilla.org/security/advisories/mfsa2022-34/
7
reference_url https://www.mozilla.org/en-US/security/advisories/mfsa2022-36
reference_id mfsa2022-36
reference_type
scores
0
value high
scoring_system generic_textual
scoring_elements
url https://www.mozilla.org/en-US/security/advisories/mfsa2022-36
8
reference_url https://www.mozilla.org/security/advisories/mfsa2022-36/
reference_id mfsa2022-36
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T17:23:43Z/
url https://www.mozilla.org/security/advisories/mfsa2022-36/
9
reference_url https://access.redhat.com/errata/RHSA-2022:6164
reference_id RHSA-2022:6164
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6164
10
reference_url https://access.redhat.com/errata/RHSA-2022:6165
reference_id RHSA-2022:6165
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6165
11
reference_url https://access.redhat.com/errata/RHSA-2022:6166
reference_id RHSA-2022:6166
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6166
12
reference_url https://access.redhat.com/errata/RHSA-2022:6167
reference_id RHSA-2022:6167
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6167
13
reference_url https://access.redhat.com/errata/RHSA-2022:6168
reference_id RHSA-2022:6168
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6168
14
reference_url https://access.redhat.com/errata/RHSA-2022:6169
reference_id RHSA-2022:6169
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6169
15
reference_url https://access.redhat.com/errata/RHSA-2022:6174
reference_id RHSA-2022:6174
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6174
16
reference_url https://access.redhat.com/errata/RHSA-2022:6175
reference_id RHSA-2022:6175
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6175
17
reference_url https://access.redhat.com/errata/RHSA-2022:6176
reference_id RHSA-2022:6176
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6176
18
reference_url https://access.redhat.com/errata/RHSA-2022:6177
reference_id RHSA-2022:6177
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6177
19
reference_url https://access.redhat.com/errata/RHSA-2022:6178
reference_id RHSA-2022:6178
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6178
20
reference_url https://access.redhat.com/errata/RHSA-2022:6179
reference_id RHSA-2022:6179
reference_type
scores
url https://access.redhat.com/errata/RHSA-2022:6179
21
reference_url https://bugzilla.mozilla.org/show_bug.cgi?id=1760998
reference_id show_bug.cgi?id=1760998
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-04-15T17:23:43Z/
url https://bugzilla.mozilla.org/show_bug.cgi?id=1760998
22
reference_url https://usn.ubuntu.com/5663-1/
reference_id USN-5663-1
reference_type
scores
url https://usn.ubuntu.com/5663-1/
fixed_packages
0
url pkg:deb/debian/thunderbird@0?distro=trixie
purl pkg:deb/debian/thunderbird@0?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@0%3Fdistro=trixie
1
url pkg:deb/debian/thunderbird@1:102.2.0-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:102.2.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:102.2.0-1%3Fdistro=trixie
2
url pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:115.12.0-1~deb11u1%3Fdistro=trixie
3
url pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb12u1%3Fdistro=trixie
4
url pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.10.1esr-1~deb13u1%3Fdistro=trixie
5
url pkg:deb/debian/thunderbird@1:140.11.0esr-1?distro=trixie
purl pkg:deb/debian/thunderbird@1:140.11.0esr-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:140.11.0esr-1%3Fdistro=trixie
aliases CVE-2022-38476
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ruk3-gdnn-cugr
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:deb/debian/thunderbird@1:102.2.0-1%3Fdistro=trixie