Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.tomcat/tomcat@4.1.12
Typemaven
Namespaceorg.apache.tomcat
Nametomcat
Version4.1.12
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version6.0.38
Latest_non_vulnerable_version11.0.22
Affected_by_vulnerabilities
0
url VCID-5f34-rc96-a7ge
vulnerability_id VCID-5f34-rc96-a7ge
summary Apache Tomcat DoS via Malicious Get Request
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2002-2272
reference_id
reference_type
scores
0
value 0.30885
scoring_system epss
scoring_elements 0.96851
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2002-2272
1
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/10771
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/10771
2
reference_url https://web.archive.org/web/20030501051114/http://www.securityfocus.com/bid/6320
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20030501051114/http://www.securityfocus.com/bid/6320
3
reference_url https://web.archive.org/web/20051124132812/http://archives.neohapsis.com/archives/bugtraq/2002-12/0045.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20051124132812/http://archives.neohapsis.com/archives/bugtraq/2002-12/0045.html
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2002-2272
reference_id CVE-2002-2272
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2002-2272
5
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/unix/dos/22068.pl
reference_id CVE-2002-2272;OSVDB-7394
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/unix/dos/22068.pl
6
reference_url https://www.securityfocus.com/bid/6320/info
reference_id CVE-2002-2272;OSVDB-7394
reference_type exploit
scores
url https://www.securityfocus.com/bid/6320/info
7
reference_url https://github.com/advisories/GHSA-pqr5-9v2j-44xg
reference_id GHSA-pqr5-9v2j-44xg
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pqr5-9v2j-44xg
fixed_packages
aliases CVE-2002-2272, GHSA-pqr5-9v2j-44xg
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5f34-rc96-a7ge
1
url VCID-k8xu-5a74-x7ep
vulnerability_id VCID-k8xu-5a74-x7ep
summary
references
0
reference_url http://issues.apache.org/bugzilla/show_bug.cgi?id=13365
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://issues.apache.org/bugzilla/show_bug.cgi?id=13365
1
reference_url http://marc.info/?l=bugtraq&m=103470282514938&w=2
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=bugtraq&m=103470282514938&w=2
2
reference_url http://marc.info/?l=tomcat-dev&m=103417249325526&w=2
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url http://marc.info/?l=tomcat-dev&m=103417249325526&w=2
3
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2002-1394.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2002-1394.json
4
reference_url https://api.first.org/data/v1/epss?cve=CVE-2002-1394
reference_id
reference_type
scores
0
value 0.05353
scoring_system epss
scoring_elements 0.90286
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2002-1394
5
reference_url https://archive.apache.org/dist/tomcat/tomcat-4/archive/v4.0.6/README.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://archive.apache.org/dist/tomcat/tomcat-4/archive/v4.0.6/README.html
6
reference_url https://exchange.xforce.ibmcloud.com/vulnerabilities/10376
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://exchange.xforce.ibmcloud.com/vulnerabilities/10376
7
reference_url https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@<dev.tomcat.apache.org>
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/29dc6c2b625789e70a9c4756b5a327e6547273ff8bde7e0327af48c5@<dev.tomcat.apache.org>
8
reference_url https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@<dev.tomcat.apache.org>
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/rb71997f506c6cc8b530dd845c084995a9878098846c7b4eacfae8db3@<dev.tomcat.apache.org>
9
reference_url https://web.archive.org/web/20030412075128/http://rhn.redhat.com/errata/RHSA-2003-075.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20030412075128/http://rhn.redhat.com/errata/RHSA-2003-075.html
10
reference_url https://web.archive.org/web/20030705143220/http://www.securityfocus.com/bid/6562
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20030705143220/http://www.securityfocus.com/bid/6562
11
reference_url https://web.archive.org/web/20041024213235/http://rhn.redhat.com/errata/RHSA-2003-082.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20041024213235/http://rhn.redhat.com/errata/RHSA-2003-082.html
12
reference_url https://web.archive.org/web/20070430073829/http://www.debian.org/security/2003/dsa-225
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://web.archive.org/web/20070430073829/http://www.debian.org/security/2003/dsa-225
13
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1616907
reference_id 1616907
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=1616907
14
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1394
reference_id CVE-2002-1394
reference_type
scores
0
value Important
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1394
15
reference_url https://nvd.nist.gov/vuln/detail/CVE-2002-1394
reference_id CVE-2002-1394
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2002-1394
16
reference_url https://github.com/advisories/GHSA-8v5p-2cpv-c2x6
reference_id GHSA-8v5p-2cpv-c2x6
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8v5p-2cpv-c2x6
17
reference_url https://access.redhat.com/errata/RHSA-2003:075
reference_id RHSA-2003:075
reference_type
scores
url https://access.redhat.com/errata/RHSA-2003:075
18
reference_url https://access.redhat.com/errata/RHSA-2003:082
reference_id RHSA-2003:082
reference_type
scores
url https://access.redhat.com/errata/RHSA-2003:082
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@4.1.13%2C
purl pkg:maven/org.apache.tomcat/tomcat@4.1.13%2C
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@4.1.13%252C
aliases CVE-2002-1394, GHSA-8v5p-2cpv-c2x6
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k8xu-5a74-x7ep
2
url VCID-v3ut-xwhq-rkcz
vulnerability_id VCID-v3ut-xwhq-rkcz
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2002-0682
reference_id
reference_type
scores
0
value 0.83058
scoring_system epss
scoring_elements 0.99278
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2002-0682
1
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0682
reference_id CVE-2002-0682
reference_type
scores
0
value Moderate
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-0682
2
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/21604.txt
reference_id CVE-2002-0682;OSVDB-4973
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/linux/remote/21604.txt
3
reference_url https://www.securityfocus.com/bid/5193/info
reference_id CVE-2002-0682;OSVDB-4973
reference_type exploit
scores
url https://www.securityfocus.com/bid/5193/info
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@4.1.13%2C
purl pkg:maven/org.apache.tomcat/tomcat@4.1.13%2C
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@4.1.13%252C
aliases CVE-2002-0682
risk_score 10.0
exploitability 2.0
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-v3ut-xwhq-rkcz
Fixing_vulnerabilities
Risk_score10.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@4.1.12