Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-dr52-xewb-k7hv
Summary
Remote code execution in Apache TomEE
If Apache TomEE - - - - is configured to use the embedded ActiveMQ broker, and the broker config is misconfigured, a JMX port is opened on TCP port, which does not include authentication. CVE-2020-11969 previously addressed the creation of the JMX management interface, however the incomplete fix does not cover this edge case.
Aliases
0
alias CVE-2020-13931
1
alias GHSA-mp28-rq7g-qx62
Fixed_packages
0
url pkg:maven/org.apache.tomee/apache-tomee@7.0.9
purl pkg:maven/org.apache.tomee/apache-tomee@7.0.9
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/apache-tomee@7.0.9
1
url pkg:maven/org.apache.tomee/apache-tomee@7.1.4
purl pkg:maven/org.apache.tomee/apache-tomee@7.1.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/apache-tomee@7.1.4
2
url pkg:maven/org.apache.tomee/apache-tomee@8.0.4
purl pkg:maven/org.apache.tomee/apache-tomee@8.0.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/apache-tomee@8.0.4
3
url pkg:maven/org.apache.tomee/openejb-lite@7.0.0-M1
purl pkg:maven/org.apache.tomee/openejb-lite@7.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.0.0-M1
4
url pkg:maven/org.apache.tomee/openejb-lite@7.1.4
purl pkg:maven/org.apache.tomee/openejb-lite@7.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.1.4
5
url pkg:maven/org.apache.tomee/openejb-lite@8.0.4
purl pkg:maven/org.apache.tomee/openejb-lite@8.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@8.0.4
6
url pkg:maven/org.apache.tomee/tomee@7.0.0-M1
purl pkg:maven/org.apache.tomee/tomee@7.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.0.0-M1
7
url pkg:maven/org.apache.tomee/tomee@7.1.4
purl pkg:maven/org.apache.tomee/tomee@7.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.1.4
8
url pkg:maven/org.apache.tomee/tomee@8.0.4
purl pkg:maven/org.apache.tomee/tomee@8.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@8.0.4
9
url pkg:maven/org.apache.tomee/tomee-webapp@7.0.0-M1
purl pkg:maven/org.apache.tomee/tomee-webapp@7.0.0-M1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-gvqm-rteu-w3e5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.0.0-M1
10
url pkg:maven/org.apache.tomee/tomee-webapp@7.1.4
purl pkg:maven/org.apache.tomee/tomee-webapp@7.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.1.4
11
url pkg:maven/org.apache.tomee/tomee-webapp@8.0.4
purl pkg:maven/org.apache.tomee/tomee-webapp@8.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@8.0.4
Affected_packages
0
url pkg:maven/org.apache.tomee/apache-tomee@7.1.0
purl pkg:maven/org.apache.tomee/apache-tomee@7.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/apache-tomee@7.1.0
1
url pkg:maven/org.apache.tomee/apache-tomee@8.0.0
purl pkg:maven/org.apache.tomee/apache-tomee@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/apache-tomee@8.0.0
2
url pkg:maven/org.apache.tomee/openejb-lite@1.0.0
purl pkg:maven/org.apache.tomee/openejb-lite@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5vbc-strc-5ue5
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@1.0.0
3
url pkg:maven/org.apache.tomee/openejb-lite@1.7.5
purl pkg:maven/org.apache.tomee/openejb-lite@1.7.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5vbc-strc-5ue5
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@1.7.5
4
url pkg:maven/org.apache.tomee/openejb-lite@7.0.0
purl pkg:maven/org.apache.tomee/openejb-lite@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.0.0
5
url pkg:maven/org.apache.tomee/openejb-lite@7.0.1
purl pkg:maven/org.apache.tomee/openejb-lite@7.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.0.1
6
url pkg:maven/org.apache.tomee/openejb-lite@7.0.2
purl pkg:maven/org.apache.tomee/openejb-lite@7.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.0.2
7
url pkg:maven/org.apache.tomee/openejb-lite@7.0.3
purl pkg:maven/org.apache.tomee/openejb-lite@7.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.0.3
8
url pkg:maven/org.apache.tomee/openejb-lite@7.0.4
purl pkg:maven/org.apache.tomee/openejb-lite@7.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.0.4
9
url pkg:maven/org.apache.tomee/openejb-lite@7.0.5
purl pkg:maven/org.apache.tomee/openejb-lite@7.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.0.5
10
url pkg:maven/org.apache.tomee/openejb-lite@7.0.6
purl pkg:maven/org.apache.tomee/openejb-lite@7.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.0.6
11
url pkg:maven/org.apache.tomee/openejb-lite@7.0.7
purl pkg:maven/org.apache.tomee/openejb-lite@7.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.0.7
12
url pkg:maven/org.apache.tomee/openejb-lite@7.0.8
purl pkg:maven/org.apache.tomee/openejb-lite@7.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.0.8
13
url pkg:maven/org.apache.tomee/openejb-lite@7.0.9
purl pkg:maven/org.apache.tomee/openejb-lite@7.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.0.9
14
url pkg:maven/org.apache.tomee/openejb-lite@7.1.0
purl pkg:maven/org.apache.tomee/openejb-lite@7.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.1.0
15
url pkg:maven/org.apache.tomee/openejb-lite@7.1.1
purl pkg:maven/org.apache.tomee/openejb-lite@7.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.1.1
16
url pkg:maven/org.apache.tomee/openejb-lite@7.1.2
purl pkg:maven/org.apache.tomee/openejb-lite@7.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.1.2
17
url pkg:maven/org.apache.tomee/openejb-lite@7.1.3
purl pkg:maven/org.apache.tomee/openejb-lite@7.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@7.1.3
18
url pkg:maven/org.apache.tomee/openejb-lite@8.0.0
purl pkg:maven/org.apache.tomee/openejb-lite@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@8.0.0
19
url pkg:maven/org.apache.tomee/openejb-lite@8.0.1
purl pkg:maven/org.apache.tomee/openejb-lite@8.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@8.0.1
20
url pkg:maven/org.apache.tomee/openejb-lite@8.0.2
purl pkg:maven/org.apache.tomee/openejb-lite@8.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@8.0.2
21
url pkg:maven/org.apache.tomee/openejb-lite@8.0.3
purl pkg:maven/org.apache.tomee/openejb-lite@8.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/openejb-lite@8.0.3
22
url pkg:maven/org.apache.tomee/tomee@1.0.0
purl pkg:maven/org.apache.tomee/tomee@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5vbc-strc-5ue5
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@1.0.0
23
url pkg:maven/org.apache.tomee/tomee@1.7.5
purl pkg:maven/org.apache.tomee/tomee@1.7.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-5vbc-strc-5ue5
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@1.7.5
24
url pkg:maven/org.apache.tomee/tomee@7.0.0
purl pkg:maven/org.apache.tomee/tomee@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.0.0
25
url pkg:maven/org.apache.tomee/tomee@7.0.1
purl pkg:maven/org.apache.tomee/tomee@7.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.0.1
26
url pkg:maven/org.apache.tomee/tomee@7.0.2
purl pkg:maven/org.apache.tomee/tomee@7.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.0.2
27
url pkg:maven/org.apache.tomee/tomee@7.0.3
purl pkg:maven/org.apache.tomee/tomee@7.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.0.3
28
url pkg:maven/org.apache.tomee/tomee@7.0.4
purl pkg:maven/org.apache.tomee/tomee@7.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.0.4
29
url pkg:maven/org.apache.tomee/tomee@7.0.5
purl pkg:maven/org.apache.tomee/tomee@7.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.0.5
30
url pkg:maven/org.apache.tomee/tomee@7.0.6
purl pkg:maven/org.apache.tomee/tomee@7.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.0.6
31
url pkg:maven/org.apache.tomee/tomee@7.0.7
purl pkg:maven/org.apache.tomee/tomee@7.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.0.7
32
url pkg:maven/org.apache.tomee/tomee@7.0.8
purl pkg:maven/org.apache.tomee/tomee@7.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.0.8
33
url pkg:maven/org.apache.tomee/tomee@7.0.9
purl pkg:maven/org.apache.tomee/tomee@7.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.0.9
34
url pkg:maven/org.apache.tomee/tomee@7.1.0
purl pkg:maven/org.apache.tomee/tomee@7.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.1.0
35
url pkg:maven/org.apache.tomee/tomee@7.1.1
purl pkg:maven/org.apache.tomee/tomee@7.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.1.1
36
url pkg:maven/org.apache.tomee/tomee@7.1.2
purl pkg:maven/org.apache.tomee/tomee@7.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.1.2
37
url pkg:maven/org.apache.tomee/tomee@7.1.3
purl pkg:maven/org.apache.tomee/tomee@7.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@7.1.3
38
url pkg:maven/org.apache.tomee/tomee@8.0.0
purl pkg:maven/org.apache.tomee/tomee@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@8.0.0
39
url pkg:maven/org.apache.tomee/tomee@8.0.1
purl pkg:maven/org.apache.tomee/tomee@8.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-5vbc-strc-5ue5
2
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@8.0.1
40
url pkg:maven/org.apache.tomee/tomee@8.0.2
purl pkg:maven/org.apache.tomee/tomee@8.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@8.0.2
41
url pkg:maven/org.apache.tomee/tomee@8.0.3
purl pkg:maven/org.apache.tomee/tomee@8.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee@8.0.3
42
url pkg:maven/org.apache.tomee/tomee-webapp@1.0.0
purl pkg:maven/org.apache.tomee/tomee-webapp@1.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@1.0.0
43
url pkg:maven/org.apache.tomee/tomee-webapp@1.7.5
purl pkg:maven/org.apache.tomee/tomee-webapp@1.7.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@1.7.5
44
url pkg:maven/org.apache.tomee/tomee-webapp@7.0.0
purl pkg:maven/org.apache.tomee/tomee-webapp@7.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
2
vulnerability VCID-gvqm-rteu-w3e5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.0.0
45
url pkg:maven/org.apache.tomee/tomee-webapp@7.0.1
purl pkg:maven/org.apache.tomee/tomee-webapp@7.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
2
vulnerability VCID-gvqm-rteu-w3e5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.0.1
46
url pkg:maven/org.apache.tomee/tomee-webapp@7.0.2
purl pkg:maven/org.apache.tomee/tomee-webapp@7.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
2
vulnerability VCID-gvqm-rteu-w3e5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.0.2
47
url pkg:maven/org.apache.tomee/tomee-webapp@7.0.3
purl pkg:maven/org.apache.tomee/tomee-webapp@7.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
2
vulnerability VCID-gvqm-rteu-w3e5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.0.3
48
url pkg:maven/org.apache.tomee/tomee-webapp@7.0.4
purl pkg:maven/org.apache.tomee/tomee-webapp@7.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
2
vulnerability VCID-gvqm-rteu-w3e5
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.0.4
49
url pkg:maven/org.apache.tomee/tomee-webapp@7.0.5
purl pkg:maven/org.apache.tomee/tomee-webapp@7.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.0.5
50
url pkg:maven/org.apache.tomee/tomee-webapp@7.0.6
purl pkg:maven/org.apache.tomee/tomee-webapp@7.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.0.6
51
url pkg:maven/org.apache.tomee/tomee-webapp@7.0.7
purl pkg:maven/org.apache.tomee/tomee-webapp@7.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.0.7
52
url pkg:maven/org.apache.tomee/tomee-webapp@7.0.8
purl pkg:maven/org.apache.tomee/tomee-webapp@7.0.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.0.8
53
url pkg:maven/org.apache.tomee/tomee-webapp@7.0.9
purl pkg:maven/org.apache.tomee/tomee-webapp@7.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.0.9
54
url pkg:maven/org.apache.tomee/tomee-webapp@7.1.0
purl pkg:maven/org.apache.tomee/tomee-webapp@7.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.1.0
55
url pkg:maven/org.apache.tomee/tomee-webapp@7.1.1
purl pkg:maven/org.apache.tomee/tomee-webapp@7.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.1.1
56
url pkg:maven/org.apache.tomee/tomee-webapp@7.1.2
purl pkg:maven/org.apache.tomee/tomee-webapp@7.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.1.2
57
url pkg:maven/org.apache.tomee/tomee-webapp@7.1.3
purl pkg:maven/org.apache.tomee/tomee-webapp@7.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@7.1.3
58
url pkg:maven/org.apache.tomee/tomee-webapp@8.0.0
purl pkg:maven/org.apache.tomee/tomee-webapp@8.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@8.0.0
59
url pkg:maven/org.apache.tomee/tomee-webapp@8.0.1
purl pkg:maven/org.apache.tomee/tomee-webapp@8.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@8.0.1
60
url pkg:maven/org.apache.tomee/tomee-webapp@8.0.2
purl pkg:maven/org.apache.tomee/tomee-webapp@8.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@8.0.2
61
url pkg:maven/org.apache.tomee/tomee-webapp@8.0.3
purl pkg:maven/org.apache.tomee/tomee-webapp@8.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-46y3-rx34-pyc6
1
vulnerability VCID-dr52-xewb-k7hv
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomee/tomee-webapp@8.0.3
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2020-13931
reference_id
reference_type
scores
0
value 0.01368
scoring_system epss
scoring_elements 0.80392
published_at 2026-05-14T12:55:00Z
1
value 0.01368
scoring_system epss
scoring_elements 0.80236
published_at 2026-04-21T12:55:00Z
2
value 0.01368
scoring_system epss
scoring_elements 0.80262
published_at 2026-04-24T12:55:00Z
3
value 0.01368
scoring_system epss
scoring_elements 0.80269
published_at 2026-04-26T12:55:00Z
4
value 0.01368
scoring_system epss
scoring_elements 0.80285
published_at 2026-04-29T12:55:00Z
5
value 0.01368
scoring_system epss
scoring_elements 0.80301
published_at 2026-05-05T12:55:00Z
6
value 0.01368
scoring_system epss
scoring_elements 0.80323
published_at 2026-05-07T12:55:00Z
7
value 0.01368
scoring_system epss
scoring_elements 0.80339
published_at 2026-05-09T12:55:00Z
8
value 0.01368
scoring_system epss
scoring_elements 0.80335
published_at 2026-05-11T12:55:00Z
9
value 0.01368
scoring_system epss
scoring_elements 0.80352
published_at 2026-05-12T12:55:00Z
10
value 0.01368
scoring_system epss
scoring_elements 0.8015
published_at 2026-04-01T12:55:00Z
11
value 0.01368
scoring_system epss
scoring_elements 0.80157
published_at 2026-04-02T12:55:00Z
12
value 0.01368
scoring_system epss
scoring_elements 0.80177
published_at 2026-04-04T12:55:00Z
13
value 0.01368
scoring_system epss
scoring_elements 0.80166
published_at 2026-04-07T12:55:00Z
14
value 0.01368
scoring_system epss
scoring_elements 0.80194
published_at 2026-04-08T12:55:00Z
15
value 0.01368
scoring_system epss
scoring_elements 0.80202
published_at 2026-04-09T12:55:00Z
16
value 0.01368
scoring_system epss
scoring_elements 0.80222
published_at 2026-04-11T12:55:00Z
17
value 0.01368
scoring_system epss
scoring_elements 0.80208
published_at 2026-04-12T12:55:00Z
18
value 0.01368
scoring_system epss
scoring_elements 0.80203
published_at 2026-04-13T12:55:00Z
19
value 0.01368
scoring_system epss
scoring_elements 0.80232
published_at 2026-04-16T12:55:00Z
20
value 0.01368
scoring_system epss
scoring_elements 0.80233
published_at 2026-04-18T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2020-13931
1
reference_url https://lists.apache.org/thread.html/r7f98907165b355dc65f28a57f15103a06173ce03261115fa46d569b4@%3Cdev.tomee.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r7f98907165b355dc65f28a57f15103a06173ce03261115fa46d569b4@%3Cdev.tomee.apache.org%3E
2
reference_url https://lists.apache.org/thread.html/r85b87478f8aa4751aa3a06e88622e80ffabae376ee7283e147ee56b9@%3Cdev.tomee.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/r85b87478f8aa4751aa3a06e88622e80ffabae376ee7283e147ee56b9@%3Cdev.tomee.apache.org%3E
3
reference_url https://lists.apache.org/thread.html/ref088c4732e1a8dd0bbbb96e13ffafcfe65f984238ffa55f438d78fe%40%3Cdev.tomee.apache.org%3E
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://lists.apache.org/thread.html/ref088c4732e1a8dd0bbbb96e13ffafcfe65f984238ffa55f438d78fe%40%3Cdev.tomee.apache.org%3E
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2020-13931
reference_id CVE-2020-13931
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2020-13931
5
reference_url https://github.com/advisories/GHSA-mp28-rq7g-qx62
reference_id GHSA-mp28-rq7g-qx62
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mp28-rq7g-qx62
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 306
name Missing Authentication for Critical Function
description The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Exploits
Severity_range_score9.0 - 10.0
Exploitability0.5
Weighted_severity9.0
Risk_score4.5
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-dr52-xewb-k7hv