Lookup for vulnerable packages by Package URL.

Purlpkg:maven/org.apache.tomcat/tomcat@9.0.2
Typemaven
Namespaceorg.apache.tomcat
Nametomcat
Version9.0.2
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version9.0.5
Latest_non_vulnerable_version11.0.18
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-q1cf-qg1v-3ybr
vulnerability_id VCID-q1cf-qg1v-3ybr
summary
Improperly Implemented Security Check for Standard
Some scripts may have failed to execute as expected and other scripts may have been executed unexpectedly. Note that the behaviour of the CGI servlet has remained unchanged in this regard. It is only the documentation of the behaviour that was wrong and has been corrected.
references
0
reference_url https://nvd.nist.gov/vuln/detail/CVE-2017-15706
reference_id CVE-2017-15706
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2017-15706
fixed_packages
0
url pkg:maven/org.apache.tomcat/tomcat@7.0.84
purl pkg:maven/org.apache.tomcat/tomcat@7.0.84
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5udv-rheh-kqfy
1
vulnerability VCID-g3vd-74yh-s7bn
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@7.0.84
1
url pkg:maven/org.apache.tomcat/tomcat@8.0.48
purl pkg:maven/org.apache.tomcat/tomcat@8.0.48
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.0.48
2
url pkg:maven/org.apache.tomcat/tomcat@8.5.24
purl pkg:maven/org.apache.tomcat/tomcat@8.5.24
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@8.5.24
3
url pkg:maven/org.apache.tomcat/tomcat@9.0.2
purl pkg:maven/org.apache.tomcat/tomcat@9.0.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.2
aliases CVE-2017-15706
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-q1cf-qg1v-3ybr
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@9.0.2