{"url":"http://public2.vulnerablecode.io/api/packages/129399?format=json","purl":"pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.10-1jpp.2?arch=el5","type":"rpm","namespace":"redhat","name":"java-1.4.2-ibm","version":"1.4.2.10-1jpp.2","qualifiers":{"arch":"el5"},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":null,"latest_non_vulnerable_version":null,"affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46510?format=json","vulnerability_id":"VCID-4nky-wb1a-vyar","summary":"Multiple vulnerabilities have been identified in Sun Java Development Kit\n    (JDK) and Java Runtime Environment (JRE).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5240.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5240.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2007-5240","reference_id":"","reference_type":"","scores":[{"value":"0.02661","scoring_system":"epss","scoring_elements":"0.85714","published_at":"2026-04-01T12:55:00Z"},{"value":"0.02661","scoring_system":"epss","scoring_elements":"0.85726","published_at":"2026-04-02T12:55:00Z"},{"value":"0.02661","scoring_system":"epss","scoring_elements":"0.85745","published_at":"2026-04-04T12:55:00Z"},{"value":"0.02661","scoring_system":"epss","scoring_elements":"0.8575","published_at":"2026-04-07T12:55:00Z"},{"value":"0.02661","scoring_system":"epss","scoring_elements":"0.85769","published_at":"2026-04-08T12:55:00Z"},{"value":"0.02661","scoring_system":"epss","scoring_elements":"0.8578","published_at":"2026-04-09T12:55:00Z"},{"value":"0.02661","scoring_system":"epss","scoring_elements":"0.85795","published_at":"2026-04-11T12:55:00Z"},{"value":"0.02661","scoring_system":"epss","scoring_elements":"0.85791","published_at":"2026-04-12T12:55:00Z"},{"value":"0.02661","scoring_system":"epss","scoring_elements":"0.85788","published_at":"2026-04-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2007-5240"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=321991","reference_id":"321991","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=321991"},{"reference_url":"https://security.gentoo.org/glsa/200804-20","reference_id":"GLSA-200804-20","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200804-20"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:0963","reference_id":"RHSA-2007:0963","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:0963"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:1041","reference_id":"RHSA-2007:1041","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:1041"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0100","reference_id":"RHSA-2008:0100","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0100"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0132","reference_id":"RHSA-2008:0132","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0132"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0156","reference_id":"RHSA-2008:0156","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0156"}],"fixed_packages":[],"aliases":["CVE-2007-5240"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-4nky-wb1a-vyar"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46529?format=json","vulnerability_id":"VCID-8h6v-tdt7-kbf8","summary":"Multiple vulnerabilities have been identified in Sun Java Development Kit\n    (JDK) and Java Runtime Environment (JRE).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1195.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1195.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2008-1195","reference_id":"","reference_type":"","scores":[{"value":"0.14426","scoring_system":"epss","scoring_elements":"0.94429","published_at":"2026-04-13T12:55:00Z"},{"value":"0.14426","scoring_system":"epss","scoring_elements":"0.9439","published_at":"2026-04-01T12:55:00Z"},{"value":"0.14426","scoring_system":"epss","scoring_elements":"0.94397","published_at":"2026-04-02T12:55:00Z"},{"value":"0.14426","scoring_system":"epss","scoring_elements":"0.94409","published_at":"2026-04-04T12:55:00Z"},{"value":"0.14426","scoring_system":"epss","scoring_elements":"0.94411","published_at":"2026-04-07T12:55:00Z"},{"value":"0.14426","scoring_system":"epss","scoring_elements":"0.9442","published_at":"2026-04-08T12:55:00Z"},{"value":"0.14426","scoring_system":"epss","scoring_elements":"0.94424","published_at":"2026-04-09T12:55:00Z"},{"value":"0.14426","scoring_system":"epss","scoring_elements":"0.94427","published_at":"2026-04-11T12:55:00Z"},{"value":"0.14426","scoring_system":"epss","scoring_elements":"0.94428","published_at":"2026-04-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2008-1195"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=436299","reference_id":"436299","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=436299"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1195","reference_id":"CVE-2008-1195","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1195"},{"reference_url":"https://security.gentoo.org/glsa/200804-20","reference_id":"GLSA-200804-20","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200804-20"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2008-18","reference_id":"mfsa2008-18","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2008-18"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0132","reference_id":"RHSA-2008:0132","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0132"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0186","reference_id":"RHSA-2008:0186","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0186"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0210","reference_id":"RHSA-2008:0210","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0210"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0267","reference_id":"RHSA-2008:0267","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0267"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0638","reference_id":"RHSA-2008:0638","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0638"},{"reference_url":"https://usn.ubuntu.com/592-1/","reference_id":"USN-592-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/592-1/"}],"fixed_packages":[],"aliases":["CVE-2008-1195"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-8h6v-tdt7-kbf8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/37739?format=json","vulnerability_id":"VCID-d5e5-vaa8-wbdr","summary":"BEA JRockit contains several vulnerabilities, some of which may allow the\n    execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4381.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-4381.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2007-4381","reference_id":"","reference_type":"","scores":[{"value":"0.15848","scoring_system":"epss","scoring_elements":"0.94709","published_at":"2026-04-01T12:55:00Z"},{"value":"0.15848","scoring_system":"epss","scoring_elements":"0.94718","published_at":"2026-04-02T12:55:00Z"},{"value":"0.15848","scoring_system":"epss","scoring_elements":"0.94722","published_at":"2026-04-04T12:55:00Z"},{"value":"0.18441","scoring_system":"epss","scoring_elements":"0.95217","published_at":"2026-04-07T12:55:00Z"},{"value":"0.18441","scoring_system":"epss","scoring_elements":"0.95224","published_at":"2026-04-08T12:55:00Z"},{"value":"0.18441","scoring_system":"epss","scoring_elements":"0.95227","published_at":"2026-04-09T12:55:00Z"},{"value":"0.18441","scoring_system":"epss","scoring_elements":"0.95233","published_at":"2026-04-12T12:55:00Z"},{"value":"0.18441","scoring_system":"epss","scoring_elements":"0.95236","published_at":"2026-04-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2007-4381"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=253488","reference_id":"253488","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=253488"},{"reference_url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/java/remote/30502.txt","reference_id":"CVE-2007-4381;OSVDB-37766","reference_type":"exploit","scores":[],"url":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/java/remote/30502.txt"},{"reference_url":"https://www.securityfocus.com/bid/25340/info","reference_id":"CVE-2007-4381;OSVDB-37766","reference_type":"exploit","scores":[],"url":"https://www.securityfocus.com/bid/25340/info"},{"reference_url":"https://security.gentoo.org/glsa/200709-15","reference_id":"GLSA-200709-15","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200709-15"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:0829","reference_id":"RHSA-2007:0829","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:0829"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:0956","reference_id":"RHSA-2007:0956","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:0956"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:1086","reference_id":"RHSA-2007:1086","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:1086"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0100","reference_id":"RHSA-2008:0100","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0100"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0132","reference_id":"RHSA-2008:0132","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0132"}],"fixed_packages":[],"aliases":["CVE-2007-4381"],"risk_score":0.4,"exploitability":"2.0","weighted_severity":"0.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-d5e5-vaa8-wbdr"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46523?format=json","vulnerability_id":"VCID-d9fa-tvr9-gqdw","summary":"Multiple vulnerabilities have been identified in Sun Java Development Kit\n    (JDK) and Java Runtime Environment (JRE).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1190.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1190.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2008-1190","reference_id":"","reference_type":"","scores":[{"value":"0.1722","scoring_system":"epss","scoring_elements":"0.94989","published_at":"2026-04-01T12:55:00Z"},{"value":"0.1722","scoring_system":"epss","scoring_elements":"0.94998","published_at":"2026-04-02T12:55:00Z"},{"value":"0.1722","scoring_system":"epss","scoring_elements":"0.95","published_at":"2026-04-04T12:55:00Z"},{"value":"0.1722","scoring_system":"epss","scoring_elements":"0.95003","published_at":"2026-04-07T12:55:00Z"},{"value":"0.1722","scoring_system":"epss","scoring_elements":"0.95011","published_at":"2026-04-08T12:55:00Z"},{"value":"0.1722","scoring_system":"epss","scoring_elements":"0.95015","published_at":"2026-04-09T12:55:00Z"},{"value":"0.1722","scoring_system":"epss","scoring_elements":"0.9502","published_at":"2026-04-11T12:55:00Z"},{"value":"0.1722","scoring_system":"epss","scoring_elements":"0.95022","published_at":"2026-04-12T12:55:00Z"},{"value":"0.1722","scoring_system":"epss","scoring_elements":"0.95024","published_at":"2026-04-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2008-1190"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=436293","reference_id":"436293","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=436293"},{"reference_url":"https://security.gentoo.org/glsa/200804-20","reference_id":"GLSA-200804-20","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200804-20"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0132","reference_id":"RHSA-2008:0132","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0132"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0186","reference_id":"RHSA-2008:0186","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0186"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0210","reference_id":"RHSA-2008:0210","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0210"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0267","reference_id":"RHSA-2008:0267","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0267"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0638","reference_id":"RHSA-2008:0638","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0638"}],"fixed_packages":[],"aliases":["CVE-2008-1190"],"risk_score":0.1,"exploitability":"0.5","weighted_severity":"0.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-d9fa-tvr9-gqdw"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46514?format=json","vulnerability_id":"VCID-deym-ger9-87h2","summary":"Multiple vulnerabilities have been identified in Sun Java Development Kit\n    (JDK) and Java Runtime Environment (JRE).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5274.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5274.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2007-5274","reference_id":"","reference_type":"","scores":[{"value":"0.05089","scoring_system":"epss","scoring_elements":"0.8977","published_at":"2026-04-01T12:55:00Z"},{"value":"0.05089","scoring_system":"epss","scoring_elements":"0.89772","published_at":"2026-04-02T12:55:00Z"},{"value":"0.05089","scoring_system":"epss","scoring_elements":"0.89787","published_at":"2026-04-04T12:55:00Z"},{"value":"0.05089","scoring_system":"epss","scoring_elements":"0.8979","published_at":"2026-04-07T12:55:00Z"},{"value":"0.05089","scoring_system":"epss","scoring_elements":"0.89807","published_at":"2026-04-08T12:55:00Z"},{"value":"0.05089","scoring_system":"epss","scoring_elements":"0.89814","published_at":"2026-04-09T12:55:00Z"},{"value":"0.05089","scoring_system":"epss","scoring_elements":"0.8982","published_at":"2026-04-11T12:55:00Z"},{"value":"0.05089","scoring_system":"epss","scoring_elements":"0.89818","published_at":"2026-04-12T12:55:00Z"},{"value":"0.05089","scoring_system":"epss","scoring_elements":"0.89811","published_at":"2026-04-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2007-5274"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=324361","reference_id":"324361","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=324361"},{"reference_url":"https://security.gentoo.org/glsa/200804-20","reference_id":"GLSA-200804-20","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200804-20"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:0963","reference_id":"RHSA-2007:0963","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:0963"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:1041","reference_id":"RHSA-2007:1041","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:1041"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0132","reference_id":"RHSA-2008:0132","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0132"}],"fixed_packages":[],"aliases":["CVE-2007-5274"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-deym-ger9-87h2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46522?format=json","vulnerability_id":"VCID-ds36-fjg3-jbg7","summary":"Multiple vulnerabilities have been identified in Sun Java Development Kit\n    (JDK) and Java Runtime Environment (JRE).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1189.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1189.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2008-1189","reference_id":"","reference_type":"","scores":[{"value":"0.31651","scoring_system":"epss","scoring_elements":"0.96765","published_at":"2026-04-01T12:55:00Z"},{"value":"0.31651","scoring_system":"epss","scoring_elements":"0.96775","published_at":"2026-04-02T12:55:00Z"},{"value":"0.31651","scoring_system":"epss","scoring_elements":"0.96777","published_at":"2026-04-04T12:55:00Z"},{"value":"0.31651","scoring_system":"epss","scoring_elements":"0.96781","published_at":"2026-04-07T12:55:00Z"},{"value":"0.31651","scoring_system":"epss","scoring_elements":"0.96789","published_at":"2026-04-08T12:55:00Z"},{"value":"0.31651","scoring_system":"epss","scoring_elements":"0.9679","published_at":"2026-04-09T12:55:00Z"},{"value":"0.31651","scoring_system":"epss","scoring_elements":"0.96793","published_at":"2026-04-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2008-1189"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=436293","reference_id":"436293","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=436293"},{"reference_url":"https://security.gentoo.org/glsa/200804-20","reference_id":"GLSA-200804-20","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200804-20"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0132","reference_id":"RHSA-2008:0132","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0132"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0186","reference_id":"RHSA-2008:0186","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0186"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0210","reference_id":"RHSA-2008:0210","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0210"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0267","reference_id":"RHSA-2008:0267","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0267"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0638","reference_id":"RHSA-2008:0638","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0638"}],"fixed_packages":[],"aliases":["CVE-2008-1189"],"risk_score":0.1,"exploitability":"0.5","weighted_severity":"0.3","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ds36-fjg3-jbg7"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46508?format=json","vulnerability_id":"VCID-fxfe-8v21-qkf9","summary":"Multiple vulnerabilities have been identified in Sun Java Development Kit\n    (JDK) and Java Runtime Environment (JRE).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5239.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5239.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2007-5239","reference_id":"","reference_type":"","scores":[{"value":"0.01642","scoring_system":"epss","scoring_elements":"0.81882","published_at":"2026-04-01T12:55:00Z"},{"value":"0.01642","scoring_system":"epss","scoring_elements":"0.81893","published_at":"2026-04-02T12:55:00Z"},{"value":"0.01642","scoring_system":"epss","scoring_elements":"0.81916","published_at":"2026-04-04T12:55:00Z"},{"value":"0.01642","scoring_system":"epss","scoring_elements":"0.81912","published_at":"2026-04-07T12:55:00Z"},{"value":"0.01642","scoring_system":"epss","scoring_elements":"0.81938","published_at":"2026-04-08T12:55:00Z"},{"value":"0.01642","scoring_system":"epss","scoring_elements":"0.81946","published_at":"2026-04-09T12:55:00Z"},{"value":"0.01642","scoring_system":"epss","scoring_elements":"0.81966","published_at":"2026-04-11T12:55:00Z"},{"value":"0.01642","scoring_system":"epss","scoring_elements":"0.81955","published_at":"2026-04-12T12:55:00Z"},{"value":"0.01642","scoring_system":"epss","scoring_elements":"0.81949","published_at":"2026-04-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2007-5239"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=321981","reference_id":"321981","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=321981"},{"reference_url":"https://security.gentoo.org/glsa/200804-20","reference_id":"GLSA-200804-20","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200804-20"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:0963","reference_id":"RHSA-2007:0963","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:0963"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:1041","reference_id":"RHSA-2007:1041","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:1041"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0100","reference_id":"RHSA-2008:0100","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0100"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0132","reference_id":"RHSA-2008:0132","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0132"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0156","reference_id":"RHSA-2008:0156","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0156"}],"fixed_packages":[],"aliases":["CVE-2007-5239"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-fxfe-8v21-qkf9"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46504?format=json","vulnerability_id":"VCID-hbzj-mff2-j7f2","summary":"Multiple vulnerabilities have been identified in Sun Java Development Kit\n    (JDK) and Java Runtime Environment (JRE).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5232.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5232.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2007-5232","reference_id":"","reference_type":"","scores":[{"value":"0.08711","scoring_system":"epss","scoring_elements":"0.9245","published_at":"2026-04-01T12:55:00Z"},{"value":"0.08711","scoring_system":"epss","scoring_elements":"0.92457","published_at":"2026-04-02T12:55:00Z"},{"value":"0.08711","scoring_system":"epss","scoring_elements":"0.92465","published_at":"2026-04-04T12:55:00Z"},{"value":"0.08711","scoring_system":"epss","scoring_elements":"0.92468","published_at":"2026-04-07T12:55:00Z"},{"value":"0.08711","scoring_system":"epss","scoring_elements":"0.9248","published_at":"2026-04-08T12:55:00Z"},{"value":"0.08711","scoring_system":"epss","scoring_elements":"0.92485","published_at":"2026-04-09T12:55:00Z"},{"value":"0.08711","scoring_system":"epss","scoring_elements":"0.92491","published_at":"2026-04-13T12:55:00Z"},{"value":"0.08711","scoring_system":"epss","scoring_elements":"0.92493","published_at":"2026-04-12T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2007-5232"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=321951","reference_id":"321951","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=321951"},{"reference_url":"https://security.gentoo.org/glsa/200804-20","reference_id":"GLSA-200804-20","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200804-20"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:0963","reference_id":"RHSA-2007:0963","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:0963"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:1041","reference_id":"RHSA-2007:1041","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:1041"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0100","reference_id":"RHSA-2008:0100","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0100"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0132","reference_id":"RHSA-2008:0132","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0132"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0156","reference_id":"RHSA-2008:0156","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0156"}],"fixed_packages":[],"aliases":["CVE-2007-5232"],"risk_score":0.1,"exploitability":"0.5","weighted_severity":"0.1","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-hbzj-mff2-j7f2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46525?format=json","vulnerability_id":"VCID-pqcy-hw6d-mbh1","summary":"Multiple vulnerabilities have been identified in Sun Java Development Kit\n    (JDK) and Java Runtime Environment (JRE).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1192.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2008-1192.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2008-1192","reference_id":"","reference_type":"","scores":[{"value":"0.13064","scoring_system":"epss","scoring_elements":"0.94056","published_at":"2026-04-01T12:55:00Z"},{"value":"0.13064","scoring_system":"epss","scoring_elements":"0.94066","published_at":"2026-04-02T12:55:00Z"},{"value":"0.13064","scoring_system":"epss","scoring_elements":"0.94076","published_at":"2026-04-04T12:55:00Z"},{"value":"0.13064","scoring_system":"epss","scoring_elements":"0.9408","published_at":"2026-04-07T12:55:00Z"},{"value":"0.13064","scoring_system":"epss","scoring_elements":"0.94088","published_at":"2026-04-08T12:55:00Z"},{"value":"0.13064","scoring_system":"epss","scoring_elements":"0.94092","published_at":"2026-04-09T12:55:00Z"},{"value":"0.13064","scoring_system":"epss","scoring_elements":"0.94097","published_at":"2026-04-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2008-1192"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=436295","reference_id":"436295","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=436295"},{"reference_url":"https://security.gentoo.org/glsa/200804-20","reference_id":"GLSA-200804-20","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200804-20"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0132","reference_id":"RHSA-2008:0132","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0132"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0186","reference_id":"RHSA-2008:0186","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0186"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0210","reference_id":"RHSA-2008:0210","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0210"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0267","reference_id":"RHSA-2008:0267","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0267"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0638","reference_id":"RHSA-2008:0638","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0638"}],"fixed_packages":[],"aliases":["CVE-2008-1192"],"risk_score":0.1,"exploitability":"0.5","weighted_severity":"0.1","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pqcy-hw6d-mbh1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46506?format=json","vulnerability_id":"VCID-x6r6-7bv1-e3d8","summary":"Multiple vulnerabilities have been identified in Sun Java Development Kit\n    (JDK) and Java Runtime Environment (JRE).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5238.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5238.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2007-5238","reference_id":"","reference_type":"","scores":[{"value":"0.0105","scoring_system":"epss","scoring_elements":"0.77481","published_at":"2026-04-01T12:55:00Z"},{"value":"0.0105","scoring_system":"epss","scoring_elements":"0.77487","published_at":"2026-04-02T12:55:00Z"},{"value":"0.0105","scoring_system":"epss","scoring_elements":"0.77512","published_at":"2026-04-04T12:55:00Z"},{"value":"0.0105","scoring_system":"epss","scoring_elements":"0.77493","published_at":"2026-04-07T12:55:00Z"},{"value":"0.0105","scoring_system":"epss","scoring_elements":"0.77522","published_at":"2026-04-08T12:55:00Z"},{"value":"0.0105","scoring_system":"epss","scoring_elements":"0.77531","published_at":"2026-04-09T12:55:00Z"},{"value":"0.0105","scoring_system":"epss","scoring_elements":"0.77557","published_at":"2026-04-11T12:55:00Z"},{"value":"0.0105","scoring_system":"epss","scoring_elements":"0.77542","published_at":"2026-04-12T12:55:00Z"},{"value":"0.0105","scoring_system":"epss","scoring_elements":"0.77539","published_at":"2026-04-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2007-5238"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=321961","reference_id":"321961","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=321961"},{"reference_url":"https://security.gentoo.org/glsa/200804-20","reference_id":"GLSA-200804-20","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200804-20"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:0963","reference_id":"RHSA-2007:0963","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:0963"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:1041","reference_id":"RHSA-2007:1041","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:1041"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0132","reference_id":"RHSA-2008:0132","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0132"}],"fixed_packages":[],"aliases":["CVE-2007-5238"],"risk_score":null,"exploitability":"0.5","weighted_severity":"0.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-x6r6-7bv1-e3d8"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/37720?format=json","vulnerability_id":"VCID-yugs-rwuf-q7gh","summary":"BEA JRockit contains several vulnerabilities, some of which may allow the\n    execution of arbitrary code.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3698.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3698.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2007-3698","reference_id":"","reference_type":"","scores":[{"value":"0.17351","scoring_system":"epss","scoring_elements":"0.9502","published_at":"2026-04-01T12:55:00Z"},{"value":"0.17351","scoring_system":"epss","scoring_elements":"0.95031","published_at":"2026-04-02T12:55:00Z"},{"value":"0.17351","scoring_system":"epss","scoring_elements":"0.95032","published_at":"2026-04-04T12:55:00Z"},{"value":"0.19037","scoring_system":"epss","scoring_elements":"0.95314","published_at":"2026-04-07T12:55:00Z"},{"value":"0.19037","scoring_system":"epss","scoring_elements":"0.95321","published_at":"2026-04-08T12:55:00Z"},{"value":"0.19037","scoring_system":"epss","scoring_elements":"0.95324","published_at":"2026-04-09T12:55:00Z"},{"value":"0.19037","scoring_system":"epss","scoring_elements":"0.95329","published_at":"2026-04-12T12:55:00Z"},{"value":"0.19037","scoring_system":"epss","scoring_elements":"0.95331","published_at":"2026-04-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2007-3698"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=249539","reference_id":"249539","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=249539"},{"reference_url":"https://security.gentoo.org/glsa/200709-15","reference_id":"GLSA-200709-15","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200709-15"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:0818","reference_id":"RHSA-2007:0818","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:0818"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:0956","reference_id":"RHSA-2007:0956","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:0956"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:1086","reference_id":"RHSA-2007:1086","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:1086"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0100","reference_id":"RHSA-2008:0100","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0100"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0132","reference_id":"RHSA-2008:0132","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0132"}],"fixed_packages":[],"aliases":["CVE-2007-3698"],"risk_score":0.1,"exploitability":"0.5","weighted_severity":"0.2","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-yugs-rwuf-q7gh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/46512?format=json","vulnerability_id":"VCID-ywnv-p1xk-bfgm","summary":"Multiple vulnerabilities have been identified in Sun Java Development Kit\n    (JDK) and Java Runtime Environment (JRE).","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5273.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-5273.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2007-5273","reference_id":"","reference_type":"","scores":[{"value":"0.06917","scoring_system":"epss","scoring_elements":"0.91354","published_at":"2026-04-01T12:55:00Z"},{"value":"0.06917","scoring_system":"epss","scoring_elements":"0.9136","published_at":"2026-04-02T12:55:00Z"},{"value":"0.06917","scoring_system":"epss","scoring_elements":"0.91371","published_at":"2026-04-04T12:55:00Z"},{"value":"0.06917","scoring_system":"epss","scoring_elements":"0.91378","published_at":"2026-04-07T12:55:00Z"},{"value":"0.06917","scoring_system":"epss","scoring_elements":"0.9139","published_at":"2026-04-08T12:55:00Z"},{"value":"0.06917","scoring_system":"epss","scoring_elements":"0.91397","published_at":"2026-04-09T12:55:00Z"},{"value":"0.06917","scoring_system":"epss","scoring_elements":"0.91403","published_at":"2026-04-11T12:55:00Z"},{"value":"0.06917","scoring_system":"epss","scoring_elements":"0.91406","published_at":"2026-04-12T12:55:00Z"},{"value":"0.06917","scoring_system":"epss","scoring_elements":"0.91405","published_at":"2026-04-13T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2007-5273"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=324351","reference_id":"324351","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=324351"},{"reference_url":"https://security.gentoo.org/glsa/200804-20","reference_id":"GLSA-200804-20","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/200804-20"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:0963","reference_id":"RHSA-2007:0963","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:0963"},{"reference_url":"https://access.redhat.com/errata/RHSA-2007:1041","reference_id":"RHSA-2007:1041","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2007:1041"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0100","reference_id":"RHSA-2008:0100","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0100"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0132","reference_id":"RHSA-2008:0132","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0132"},{"reference_url":"https://access.redhat.com/errata/RHSA-2008:0156","reference_id":"RHSA-2008:0156","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2008:0156"}],"fixed_packages":[],"aliases":["CVE-2007-5273"],"risk_score":0.1,"exploitability":"0.5","weighted_severity":"0.1","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-ywnv-p1xk-bfgm"}],"fixing_vulnerabilities":[],"risk_score":"4.0","resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/java-1.4.2-ibm@1.4.2.10-1jpp.2%3Farch=el5"}