Django REST framework

Lookup for vulnerable packages by Package URL.

Purl pkg:rpm/redhat/eap7-apache-cxf@3.1.8-3.redhat_1.1.ep7?arch=el6

Type rpm

Namespace redhat

Name eap7-apache-cxf

Version 3.1.8-3.redhat_1.1.ep7

Qualifiers

arch	el6

Subpath

Is_vulnerable true

Next_non_vulnerable_version null

Latest_non_vulnerable_version null

Affected_by_vulnerabilities

url

VCID-98ct-w5q2-nyhz

vulnerability_id

VCID-98ct-w5q2-nyhz

summary

admin-cli: Potential EAP resource starvation DOS attack via GET requests for server log files

references

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8627.json

reference_id

reference_type

scores

value	4.3
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-8627.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2016-8627

reference_id

reference_type

scores

value	0.00801
scoring_system	epss
scoring_elements	0.74429
published_at	2026-06-04T12:55:00Z

value	0.00801
scoring_system	epss
scoring_elements	0.74461
published_at	2026-06-05T12:55:00Z

value	0.00801
scoring_system	epss
scoring_elements	0.74467
published_at	2026-06-06T12:55:00Z

value	0.00801
scoring_system	epss
scoring_elements	0.74455
published_at	2026-06-07T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2016-8627

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1388240
reference_id	1388240
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1388240

reference_url	https://access.redhat.com/errata/RHSA-2017:0170
reference_id	RHSA-2017:0170
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0170

reference_url	https://access.redhat.com/errata/RHSA-2017:0171
reference_id	RHSA-2017:0171
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0171

reference_url	https://access.redhat.com/errata/RHSA-2017:0172
reference_id	RHSA-2017:0172
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0172

reference_url	https://access.redhat.com/errata/RHSA-2017:0173
reference_id	RHSA-2017:0173
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0173

reference_url	https://access.redhat.com/errata/RHSA-2017:0244
reference_id	RHSA-2017:0244
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0244

reference_url	https://access.redhat.com/errata/RHSA-2017:0245
reference_id	RHSA-2017:0245
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0245

reference_url	https://access.redhat.com/errata/RHSA-2017:0246
reference_id	RHSA-2017:0246
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0246

reference_url	https://access.redhat.com/errata/RHSA-2017:0247
reference_id	RHSA-2017:0247
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0247

reference_url	https://access.redhat.com/errata/RHSA-2017:0250
reference_id	RHSA-2017:0250
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0250

fixed_packages

aliases

CVE-2016-8627

risk_score

1.9

exploitability

0.5

weighted_severity

3.9

resource_url

http://public2.vulnerablecode.io/vulnerabilities/VCID-98ct-w5q2-nyhz

url

VCID-yjzc-ysux-euay

vulnerability_id

VCID-yjzc-ysux-euay

summary

EAP: Sensitive data can be exposed at the server level in domain mode

references

reference_url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7061.json

reference_id

reference_type

scores

value	3.5
scoring_system	cvssv3
scoring_elements	CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

url

https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-7061.json

reference_url

https://api.first.org/data/v1/epss?cve=CVE-2016-7061

reference_id

reference_type

scores

value	0.0056
scoring_system	epss
scoring_elements	0.68651
published_at	2026-06-04T12:55:00Z

value	0.0056
scoring_system	epss
scoring_elements	0.68692
published_at	2026-06-07T12:55:00Z

value	0.0056
scoring_system	epss
scoring_elements	0.687
published_at	2026-06-06T12:55:00Z

url

https://api.first.org/data/v1/epss?cve=CVE-2016-7061

reference_url	https://bugzilla.redhat.com/show_bug.cgi?id=1380852
reference_id	1380852
reference_type
scores
url	https://bugzilla.redhat.com/show_bug.cgi?id=1380852

reference_url	https://access.redhat.com/errata/RHSA-2017:0170
reference_id	RHSA-2017:0170
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0170

reference_url	https://access.redhat.com/errata/RHSA-2017:0171
reference_id	RHSA-2017:0171
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0171

reference_url	https://access.redhat.com/errata/RHSA-2017:0172
reference_id	RHSA-2017:0172
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0172

reference_url	https://access.redhat.com/errata/RHSA-2017:0173
reference_id	RHSA-2017:0173
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0173

reference_url	https://access.redhat.com/errata/RHSA-2017:0244
reference_id	RHSA-2017:0244
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0244

reference_url	https://access.redhat.com/errata/RHSA-2017:0245
reference_id	RHSA-2017:0245
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0245

reference_url	https://access.redhat.com/errata/RHSA-2017:0246
reference_id	RHSA-2017:0246
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0246

reference_url	https://access.redhat.com/errata/RHSA-2017:0247
reference_id	RHSA-2017:0247
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0247

reference_url	https://access.redhat.com/errata/RHSA-2017:0250
reference_id	RHSA-2017:0250
reference_type
scores
url	https://access.redhat.com/errata/RHSA-2017:0250

fixed_packages

aliases

CVE-2016-7061

risk_score

1.6

exploitability

0.5

weighted_severity

3.1

resource_url

http://public2.vulnerablecode.io/vulnerabilities/VCID-yjzc-ysux-euay

Fixing_vulnerabilities

Risk_score 1.9

Resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/eap7-apache-cxf@3.1.8-3.redhat_1.1.ep7%3Farch=el6

Package Instance