{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/4716?format=json","vulnerability_id":"VCID-1qt3-ctae-sfgw","summary":"Directory traversal vulnerability in Apache Tomcat 5.5.0 through 5.5.28 and 6.0.0 through 6.0.20 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in an entry in a WAR file, as demonstrated by a ../../bin/catalina.bat entry.","aliases":[{"alias":"CVE-2009-2693"},{"alias":"GHSA-ggx9-4728-588r"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1447?format=json","purl":"pkg:apache/tomcat@5.5.29","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-7kjm-p97s-zuh8"},{"vulnerability":"VCID-f2zy-gq57-ufat"},{"vulnerability":"VCID-tfn5-6ckq-wyce"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.29"},{"url":"http://public2.vulnerablecode.io/api/packages/1410?format=json","purl":"pkg:apache/tomcat@6.0.24","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.24"},{"url":"http://public2.vulnerablecode.io/api/packages/71829?format=json","purl":"pkg:ebuild/www-servers/tomcat@7.0.23","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:ebuild/www-servers/tomcat@7.0.23"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/1433?format=json","purl":"pkg:apache/tomcat@5.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18j8-kwdv-dyak"},{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-241m-q6vd-kudk"},{"vulnerability":"VCID-27q8-96un-9fbk"},{"vulnerability":"VCID-2jnv-segx-zkfd"},{"vulnerability":"VCID-4rcx-xfn5-7kdb"},{"vulnerability":"VCID-6epr-2hbd-skcz"},{"vulnerability":"VCID-6p3e-4u8s-17ep"},{"vulnerability":"VCID-7969-7a8h-zyhh"},{"vulnerability":"VCID-7kjm-p97s-zuh8"},{"vulnerability":"VCID-86ur-vudp-4yc2"},{"vulnerability":"VCID-87p8-zvvf-y7dm"},{"vulnerability":"VCID-88v7-kc2y-bfd7"},{"vulnerability":"VCID-a9cu-fxqw-xkdg"},{"vulnerability":"VCID-acmu-9eqb-fya5"},{"vulnerability":"VCID-bhq7-d545-27bj"},{"vulnerability":"VCID-bung-pa58-ayfv"},{"vulnerability":"VCID-d9ys-kxh6-nkgr"},{"vulnerability":"VCID-dcrp-rae1-zfcm"},{"vulnerability":"VCID-dhun-hj5q-dfch"},{"vulnerability":"VCID-f2zy-gq57-ufat"},{"vulnerability":"VCID-fvvt-kufu-k3a6"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-hhk9-cr54-8fgc"},{"vulnerability":"VCID-mctd-9zgv-5qgp"},{"vulnerability":"VCID-mnf8-t3ew-4fgb"},{"vulnerability":"VCID-n76n-ywja-rbhh"},{"vulnerability":"VCID-peya-mr7j-vugf"},{"vulnerability":"VCID-q7jp-hn4a-4kec"},{"vulnerability":"VCID-qdck-q54n-rkcv"},{"vulnerability":"VCID-quwu-ep21-cyew"},{"vulnerability":"VCID-qxkf-4ddv-j3b7"},{"vulnerability":"VCID-r84b-7ay9-ekcm"},{"vulnerability":"VCID-skar-qk57-qkdv"},{"vulnerability":"VCID-su1y-2bxh-9qe2"},{"vulnerability":"VCID-tcju-3rvu-wkht"},{"vulnerability":"VCID-tfn5-6ckq-wyce"},{"vulnerability":"VCID-v94p-bxm3-akfd"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1451?format=json","purl":"pkg:apache/tomcat@5.5.28","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.28"},{"url":"http://public2.vulnerablecode.io/api/packages/1361?format=json","purl":"pkg:apache/tomcat@6.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-18q4-zark-s7a7"},{"vulnerability":"VCID-1k8f-vsg1-k3d6"},{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-241m-q6vd-kudk"},{"vulnerability":"VCID-27q8-96un-9fbk"},{"vulnerability":"VCID-3cr9-g81m-4ugy"},{"vulnerability":"VCID-3n4t-bvb1-5qer"},{"vulnerability":"VCID-3r3s-q21j-c3au"},{"vulnerability":"VCID-4mkw-7haq-pkgn"},{"vulnerability":"VCID-4rcx-xfn5-7kdb"},{"vulnerability":"VCID-68fk-4g86-ekbp"},{"vulnerability":"VCID-6epr-2hbd-skcz"},{"vulnerability":"VCID-6p3e-4u8s-17ep"},{"vulnerability":"VCID-7969-7a8h-zyhh"},{"vulnerability":"VCID-7cpu-h5fr-8ffd"},{"vulnerability":"VCID-7ej8-5f77-cybb"},{"vulnerability":"VCID-7kjm-p97s-zuh8"},{"vulnerability":"VCID-7pd9-1r19-73fe"},{"vulnerability":"VCID-87p8-zvvf-y7dm"},{"vulnerability":"VCID-88v7-kc2y-bfd7"},{"vulnerability":"VCID-95d1-arxd-hkd1"},{"vulnerability":"VCID-a1by-zvtm-akdc"},{"vulnerability":"VCID-a9cu-fxqw-xkdg"},{"vulnerability":"VCID-acmu-9eqb-fya5"},{"vulnerability":"VCID-bung-pa58-ayfv"},{"vulnerability":"VCID-d9ys-kxh6-nkgr"},{"vulnerability":"VCID-dcrp-rae1-zfcm"},{"vulnerability":"VCID-dhun-hj5q-dfch"},{"vulnerability":"VCID-egup-27ub-6uaf"},{"vulnerability":"VCID-f2zy-gq57-ufat"},{"vulnerability":"VCID-fpuc-fe6m-47c6"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-h9ds-trhx-m7aj"},{"vulnerability":"VCID-hhk9-cr54-8fgc"},{"vulnerability":"VCID-hhkg-mfp5-2kax"},{"vulnerability":"VCID-jf7u-dvpd-b7f4"},{"vulnerability":"VCID-kagr-74d9-kyhx"},{"vulnerability":"VCID-kgd1-bzst-muh7"},{"vulnerability":"VCID-kzzv-rhya-j7dd"},{"vulnerability":"VCID-m1zd-uytj-3bej"},{"vulnerability":"VCID-mctd-9zgv-5qgp"},{"vulnerability":"VCID-mnf8-t3ew-4fgb"},{"vulnerability":"VCID-mwk8-b5c9-kbb9"},{"vulnerability":"VCID-n76n-ywja-rbhh"},{"vulnerability":"VCID-p4dn-y54m-8fd1"},{"vulnerability":"VCID-p6ch-pc73-b3ck"},{"vulnerability":"VCID-peya-mr7j-vugf"},{"vulnerability":"VCID-qdck-q54n-rkcv"},{"vulnerability":"VCID-quwu-ep21-cyew"},{"vulnerability":"VCID-qxkf-4ddv-j3b7"},{"vulnerability":"VCID-r84b-7ay9-ekcm"},{"vulnerability":"VCID-su1y-2bxh-9qe2"},{"vulnerability":"VCID-tcbc-3kgt-muam"},{"vulnerability":"VCID-tcju-3rvu-wkht"},{"vulnerability":"VCID-tfn5-6ckq-wyce"},{"vulnerability":"VCID-tfrs-d458-tfaq"},{"vulnerability":"VCID-twh8-87va-juf9"},{"vulnerability":"VCID-v94p-bxm3-akfd"},{"vulnerability":"VCID-vd1s-m27a-8ucc"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-w82a-7kk2-p3f1"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-xf8r-kqxb-7qdy"},{"vulnerability":"VCID-ygvw-69am-s7ae"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1409?format=json","purl":"pkg:apache/tomcat@6.0.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.20"},{"url":"http://public2.vulnerablecode.io/api/packages/1436?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@5.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-12du-1vyt-bkgx"},{"vulnerability":"VCID-18j8-kwdv-dyak"},{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-1v6c-f56v-hqh1"},{"vulnerability":"VCID-241m-q6vd-kudk"},{"vulnerability":"VCID-27q8-96un-9fbk"},{"vulnerability":"VCID-2jnv-segx-zkfd"},{"vulnerability":"VCID-4rcx-xfn5-7kdb"},{"vulnerability":"VCID-6epr-2hbd-skcz"},{"vulnerability":"VCID-6p3e-4u8s-17ep"},{"vulnerability":"VCID-7969-7a8h-zyhh"},{"vulnerability":"VCID-7kjm-p97s-zuh8"},{"vulnerability":"VCID-86ur-vudp-4yc2"},{"vulnerability":"VCID-87p8-zvvf-y7dm"},{"vulnerability":"VCID-88v7-kc2y-bfd7"},{"vulnerability":"VCID-8ebv-6941-jqdy"},{"vulnerability":"VCID-a9cu-fxqw-xkdg"},{"vulnerability":"VCID-acmu-9eqb-fya5"},{"vulnerability":"VCID-bhq7-d545-27bj"},{"vulnerability":"VCID-bung-pa58-ayfv"},{"vulnerability":"VCID-d9ys-kxh6-nkgr"},{"vulnerability":"VCID-dcrp-rae1-zfcm"},{"vulnerability":"VCID-dhun-hj5q-dfch"},{"vulnerability":"VCID-egye-da2v-4ybh"},{"vulnerability":"VCID-f2zy-gq57-ufat"},{"vulnerability":"VCID-fvvt-kufu-k3a6"},{"vulnerability":"VCID-g7eg-s99s-xqe7"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-hhk9-cr54-8fgc"},{"vulnerability":"VCID-mctd-9zgv-5qgp"},{"vulnerability":"VCID-mnf8-t3ew-4fgb"},{"vulnerability":"VCID-n76n-ywja-rbhh"},{"vulnerability":"VCID-peya-mr7j-vugf"},{"vulnerability":"VCID-q7jp-hn4a-4kec"},{"vulnerability":"VCID-qdck-q54n-rkcv"},{"vulnerability":"VCID-quwu-ep21-cyew"},{"vulnerability":"VCID-qxkf-4ddv-j3b7"},{"vulnerability":"VCID-r5rc-rdd9-bfbk"},{"vulnerability":"VCID-r84b-7ay9-ekcm"},{"vulnerability":"VCID-rrdj-ssn7-zfdj"},{"vulnerability":"VCID-rwvj-tq6x-2ubs"},{"vulnerability":"VCID-skar-qk57-qkdv"},{"vulnerability":"VCID-su1y-2bxh-9qe2"},{"vulnerability":"VCID-tcju-3rvu-wkht"},{"vulnerability":"VCID-tfn5-6ckq-wyce"},{"vulnerability":"VCID-v94p-bxm3-akfd"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-zbbr-wded-9ffj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1452?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@5.5.28","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.28"},{"url":"http://public2.vulnerablecode.io/api/packages/1364?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@6.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-12du-1vyt-bkgx"},{"vulnerability":"VCID-18q4-zark-s7a7"},{"vulnerability":"VCID-1k8f-vsg1-k3d6"},{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-1v6c-f56v-hqh1"},{"vulnerability":"VCID-241m-q6vd-kudk"},{"vulnerability":"VCID-27q8-96un-9fbk"},{"vulnerability":"VCID-3cr9-g81m-4ugy"},{"vulnerability":"VCID-3n4t-bvb1-5qer"},{"vulnerability":"VCID-3r3s-q21j-c3au"},{"vulnerability":"VCID-4mkw-7haq-pkgn"},{"vulnerability":"VCID-4rcx-xfn5-7kdb"},{"vulnerability":"VCID-68fk-4g86-ekbp"},{"vulnerability":"VCID-6epr-2hbd-skcz"},{"vulnerability":"VCID-6p3e-4u8s-17ep"},{"vulnerability":"VCID-7969-7a8h-zyhh"},{"vulnerability":"VCID-7cpu-h5fr-8ffd"},{"vulnerability":"VCID-7ej8-5f77-cybb"},{"vulnerability":"VCID-7kjm-p97s-zuh8"},{"vulnerability":"VCID-7pd9-1r19-73fe"},{"vulnerability":"VCID-87p8-zvvf-y7dm"},{"vulnerability":"VCID-88v7-kc2y-bfd7"},{"vulnerability":"VCID-8ebv-6941-jqdy"},{"vulnerability":"VCID-95d1-arxd-hkd1"},{"vulnerability":"VCID-a1by-zvtm-akdc"},{"vulnerability":"VCID-a9cu-fxqw-xkdg"},{"vulnerability":"VCID-acmu-9eqb-fya5"},{"vulnerability":"VCID-bung-pa58-ayfv"},{"vulnerability":"VCID-d9ys-kxh6-nkgr"},{"vulnerability":"VCID-dcrp-rae1-zfcm"},{"vulnerability":"VCID-dhun-hj5q-dfch"},{"vulnerability":"VCID-egup-27ub-6uaf"},{"vulnerability":"VCID-egye-da2v-4ybh"},{"vulnerability":"VCID-f2zy-gq57-ufat"},{"vulnerability":"VCID-fpuc-fe6m-47c6"},{"vulnerability":"VCID-g7eg-s99s-xqe7"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-h9ds-trhx-m7aj"},{"vulnerability":"VCID-hhk9-cr54-8fgc"},{"vulnerability":"VCID-hhkg-mfp5-2kax"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-jf7u-dvpd-b7f4"},{"vulnerability":"VCID-jtg7-217a-qqhk"},{"vulnerability":"VCID-kagr-74d9-kyhx"},{"vulnerability":"VCID-kgd1-bzst-muh7"},{"vulnerability":"VCID-kzzv-rhya-j7dd"},{"vulnerability":"VCID-m1zd-uytj-3bej"},{"vulnerability":"VCID-mctd-9zgv-5qgp"},{"vulnerability":"VCID-mnf8-t3ew-4fgb"},{"vulnerability":"VCID-mwk8-b5c9-kbb9"},{"vulnerability":"VCID-n76n-ywja-rbhh"},{"vulnerability":"VCID-p4dn-y54m-8fd1"},{"vulnerability":"VCID-p6ch-pc73-b3ck"},{"vulnerability":"VCID-peya-mr7j-vugf"},{"vulnerability":"VCID-qdck-q54n-rkcv"},{"vulnerability":"VCID-quwu-ep21-cyew"},{"vulnerability":"VCID-qxkf-4ddv-j3b7"},{"vulnerability":"VCID-r5rc-rdd9-bfbk"},{"vulnerability":"VCID-r84b-7ay9-ekcm"},{"vulnerability":"VCID-rrdj-ssn7-zfdj"},{"vulnerability":"VCID-rwvj-tq6x-2ubs"},{"vulnerability":"VCID-su1y-2bxh-9qe2"},{"vulnerability":"VCID-t9y6-suc2-2kcg"},{"vulnerability":"VCID-ta1m-dh8x-nubc"},{"vulnerability":"VCID-tcbc-3kgt-muam"},{"vulnerability":"VCID-tcju-3rvu-wkht"},{"vulnerability":"VCID-tfn5-6ckq-wyce"},{"vulnerability":"VCID-tfrs-d458-tfaq"},{"vulnerability":"VCID-twh8-87va-juf9"},{"vulnerability":"VCID-v94p-bxm3-akfd"},{"vulnerability":"VCID-vd1s-m27a-8ucc"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-w82a-7kk2-p3f1"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-xf8r-kqxb-7qdy"},{"vulnerability":"VCID-ygvw-69am-s7ae"},{"vulnerability":"VCID-zbbr-wded-9ffj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/1411?format=json","purl":"pkg:maven/org.apache.tomcat/tomcat@6.0.20","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-g998-xymt-fudu"},{"vulnerability":"VCID-vm4b-26sq-tfev"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.20"},{"url":"http://public2.vulnerablecode.io/api/packages/128010?format=json","purl":"pkg:rpm/redhat/glassfish-jsf@1.2_13-2.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/glassfish-jsf@1.2_13-2.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/128008?format=json","purl":"pkg:rpm/redhat/glassfish-jsf@1.2_13-3.ep5?arch=el5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/glassfish-jsf@1.2_13-3.ep5%3Farch=el5"},{"url":"http://public2.vulnerablecode.io/api/packages/128005?format=json","purl":"pkg:rpm/redhat/httpd@2.2.14-1.2.1.ep5?arch=el5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/httpd@2.2.14-1.2.1.ep5%3Farch=el5"},{"url":"http://public2.vulnerablecode.io/api/packages/128018?format=json","purl":"pkg:rpm/redhat/httpd22@2.2.14-4.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/httpd22@2.2.14-4.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/128009?format=json","purl":"pkg:rpm/redhat/jakarta-commons-chain@1.2-2.1.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-chain@1.2-2.1.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/128004?format=json","purl":"pkg:rpm/redhat/jakarta-commons-chain@1.2-2.1.1.ep5?arch=el5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-chain@1.2-2.1.1.ep5%3Farch=el5"},{"url":"http://public2.vulnerablecode.io/api/packages/128011?format=json","purl":"pkg:rpm/redhat/jakarta-commons-digester@1.8.1-7.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-digester@1.8.1-7.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/128002?format=json","purl":"pkg:rpm/redhat/jakarta-commons-io@1.4-1.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-io@1.4-1.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/127996?format=json","purl":"pkg:rpm/redhat/jakarta-commons-io@1.4-1.1.ep5?arch=el5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-io@1.4-1.1.ep5%3Farch=el5"},{"url":"http://public2.vulnerablecode.io/api/packages/128016?format=json","purl":"pkg:rpm/redhat/jakarta-commons-modeler@2.0-3.3.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-modeler@2.0-3.3.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/128017?format=json","purl":"pkg:rpm/redhat/jakarta-commons-validator@1.3.1-7.4.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-commons-validator@1.3.1-7.4.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/128019?format=json","purl":"pkg:rpm/redhat/jakarta-oro@2.0.8-3jpp.ep1.3.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-oro@2.0.8-3jpp.ep1.3.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/128001?format=json","purl":"pkg:rpm/redhat/jakarta-oro@2.0.8-3.1.ep5?arch=el5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jakarta-oro@2.0.8-3.1.ep5%3Farch=el5"},{"url":"http://public2.vulnerablecode.io/api/packages/128014?format=json","purl":"pkg:rpm/redhat/jboss-javaee@5.0.1-2.3.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/jboss-javaee@5.0.1-2.3.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/128003?format=json","purl":"pkg:rpm/redhat/mod_jk@1.2.28-4.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mod_jk@1.2.28-4.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/127999?format=json","purl":"pkg:rpm/redhat/mod_jk@1.2.28-4.1.ep5?arch=el5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mod_jk@1.2.28-4.1.ep5%3Farch=el5"},{"url":"http://public2.vulnerablecode.io/api/packages/128007?format=json","purl":"pkg:rpm/redhat/struts12@1.2.9-2.ep5?arch=el5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/struts12@1.2.9-2.ep5%3Farch=el5"},{"url":"http://public2.vulnerablecode.io/api/packages/128006?format=json","purl":"pkg:rpm/redhat/struts12@1.2.9-2.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/struts12@1.2.9-2.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/127772?format=json","purl":"pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh?arch=17","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-f2zy-gq57-ufat"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh%3Farch=17"},{"url":"http://public2.vulnerablecode.io/api/packages/127773?format=json","purl":"pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh?arch=19","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-f2zy-gq57-ufat"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh%3Farch=19"},{"url":"http://public2.vulnerablecode.io/api/packages/127735?format=json","purl":"pkg:rpm/redhat/tomcat5@5.5.23-0jpp.9?arch=el5_5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-d3qr-b9n1-5bg4"},{"vulnerability":"VCID-f2zy-gq57-ufat"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.23-0jpp.9%3Farch=el5_5"},{"url":"http://public2.vulnerablecode.io/api/packages/127994?format=json","purl":"pkg:rpm/redhat/tomcat5@5.5.28-7.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.28-7.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/128015?format=json","purl":"pkg:rpm/redhat/tomcat5@5.5.28-7.1.ep5?arch=el5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.28-7.1.ep5%3Farch=el5"},{"url":"http://public2.vulnerablecode.io/api/packages/128013?format=json","purl":"pkg:rpm/redhat/tomcat6@6.0.24-2.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat6@6.0.24-2.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/127997?format=json","purl":"pkg:rpm/redhat/tomcat6@6.0.24-2.1.ep5?arch=el5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat6@6.0.24-2.1.ep5%3Farch=el5"},{"url":"http://public2.vulnerablecode.io/api/packages/128000?format=json","purl":"pkg:rpm/redhat/tomcat-native@1.1.19-2.0.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat-native@1.1.19-2.0.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/127995?format=json","purl":"pkg:rpm/redhat/tomcat-native@1.1.19-2.0.1.ep5?arch=el5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat-native@1.1.19-2.0.1.ep5%3Farch=el5"},{"url":"http://public2.vulnerablecode.io/api/packages/128012?format=json","purl":"pkg:rpm/redhat/xerces-j2@2.9.1-2.2_patch_01.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/xerces-j2@2.9.1-2.2_patch_01.ep5%3Farch=el4"},{"url":"http://public2.vulnerablecode.io/api/packages/127998?format=json","purl":"pkg:rpm/redhat/xml-commons-resolver12@1:1.2-1.1.ep5?arch=el4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1qt3-ctae-sfgw"},{"vulnerability":"VCID-jau7-gfz8-dkfa"},{"vulnerability":"VCID-wsn2-pd9b-b3g8"},{"vulnerability":"VCID-y94t-fwsg-sfey"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/xml-commons-resolver12@1:1.2-1.1.ep5%3Farch=el4"}],"references":[{"reference_url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113","reference_id":"","reference_type":"","scores":[],"url":"http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02241113"},{"reference_url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"},{"reference_url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html"},{"reference_url":"http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-updates/2012-12/msg00089.html"},{"reference_url":"http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-updates/2012-12/msg00090.html"},{"reference_url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://lists.opensuse.org/opensuse-updates/2013-01/msg00037.html"},{"reference_url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://marc.info/?l=bugtraq&m=127420533226623&w=2"},{"reference_url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://marc.info/?l=bugtraq&m=133469267822771&w=2"},{"reference_url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://marc.info/?l=bugtraq&m=136485229118404&w=2"},{"reference_url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://marc.info/?l=bugtraq&m=139344343412337&w=2"},{"reference_url":"https://access.redhat.com/errata/RHSA-2010:0119","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2010:0119"},{"reference_url":"https://access.redhat.com/errata/RHSA-2010:0580","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2010:0580"},{"reference_url":"https://access.redhat.com/errata/RHSA-2010:0582","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://access.redhat.com/errata/RHSA-2010:0582"},{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2693.json","reference_id":"","reference_type":"","scores":[],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-2693.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2009-2693","reference_id":"","reference_type":"","scores":[{"value":"0.15322","scoring_system":"epss","scoring_elements":"0.94635","published_at":"2026-04-13T12:55:00Z"},{"value":"0.15322","scoring_system":"epss","scoring_elements":"0.94597","published_at":"2026-04-01T12:55:00Z"},{"value":"0.15322","scoring_system":"epss","scoring_elements":"0.94605","published_at":"2026-04-02T12:55:00Z"},{"value":"0.15322","scoring_system":"epss","scoring_elements":"0.94611","published_at":"2026-04-04T12:55:00Z"},{"value":"0.15322","scoring_system":"epss","scoring_elements":"0.94613","published_at":"2026-04-07T12:55:00Z"},{"value":"0.15322","scoring_system":"epss","scoring_elements":"0.94623","published_at":"2026-04-08T12:55:00Z"},{"value":"0.15322","scoring_system":"epss","scoring_elements":"0.94627","published_at":"2026-04-09T12:55:00Z"},{"value":"0.15322","scoring_system":"epss","scoring_elements":"0.94632","published_at":"2026-04-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2009-2693"},{"reference_url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55855","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/55855"},{"reference_url":"https://github.com/apache/tomcat","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/apache/tomcat"},{"reference_url":"https://github.com/apache/tomcat55/commit/0299cb724ea71f304d54adfcdb950f59b01fb421","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/apache/tomcat55/commit/0299cb724ea71f304d54adfcdb950f59b01fb421"},{"reference_url":"https://github.com/apache/tomcat/commit/3e1010b1a2f648581fac3d68afbf18f2979f6bf6","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/apache/tomcat/commit/3e1010b1a2f648581fac3d68afbf18f2979f6bf6"},{"reference_url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/06cfb634bc7bf37af7d8f760f118018746ad8efbd519c4b789ac9c2e@%3Cdev.tomcat.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/8dcaf7c3894d66cb717646ea1504ea6e300021c85bb4e677dc16b1aa@%3Cdev.tomcat.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r3aacc40356defc3f248aa504b1e48e819dd0471a0a83349080c6bcbf@%3Cdev.tomcat.apache.org%3E"},{"reference_url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://lists.apache.org/thread.html/r584a714f141eff7b1c358d4679288177bd4ca4558e9999d15867d4b5@%3Cdev.tomcat.apache.org%3E"},{"reference_url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19355","reference_id":"","reference_type":"","scores":[],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19355"},{"reference_url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7017","reference_id":"","reference_type":"","scores":[],"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7017"},{"reference_url":"https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:19355","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:19355"},{"reference_url":"https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:7017","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:7017"},{"reference_url":"https://support.hpe.com/hpesc/public/docDisplay?docId=c02241113","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://support.hpe.com/hpesc/public/docDisplay?docId=c02241113"},{"reference_url":"https://svn.apache.org/viewvc?view=rev&rev=892815","reference_id":"","reference_type":"","scores":[],"url":"https://svn.apache.org/viewvc?view=rev&rev=892815"},{"reference_url":"https://svn.apache.org/viewvc?view=rev&rev=902650","reference_id":"","reference_type":"","scores":[],"url":"https://svn.apache.org/viewvc?view=rev&rev=902650"},{"reference_url":"http://support.apple.com/kb/HT4077","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://support.apple.com/kb/HT4077"},{"reference_url":"http://svn.apache.org/viewvc?rev=892815&view=rev","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://svn.apache.org/viewvc?rev=892815&view=rev"},{"reference_url":"http://svn.apache.org/viewvc?rev=902650&view=rev","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://svn.apache.org/viewvc?rev=902650&view=rev"},{"reference_url":"https://web.archive.org/web/20200229071135/http://www.securityfocus.com/bid/37944","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20200229071135/http://www.securityfocus.com/bid/37944"},{"reference_url":"https://web.archive.org/web/20200516121700/http://www.securityfocus.com/archive/1/516397/100/0/threaded","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20200516121700/http://www.securityfocus.com/archive/1/516397/100/0/threaded"},{"reference_url":"https://web.archive.org/web/20201206235536/http://www.securityfocus.com/archive/1/509148/100/0/threaded","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://web.archive.org/web/20201206235536/http://www.securityfocus.com/archive/1/509148/100/0/threaded"},{"reference_url":"http://tomcat.apache.org/security-5.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://tomcat.apache.org/security-5.html"},{"reference_url":"http://tomcat.apache.org/security-6.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://tomcat.apache.org/security-6.html"},{"reference_url":"http://ubuntu.com/usn/usn-899-1","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://ubuntu.com/usn/usn-899-1"},{"reference_url":"http://www.debian.org/security/2011/dsa-2207","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.debian.org/security/2011/dsa-2207"},{"reference_url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:176"},{"reference_url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:177","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:177"},{"reference_url":"http://www.redhat.com/support/errata/RHSA-2010-0119.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.redhat.com/support/errata/RHSA-2010-0119.html"},{"reference_url":"http://www.redhat.com/support/errata/RHSA-2010-0580.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.redhat.com/support/errata/RHSA-2010-0580.html"},{"reference_url":"http://www.redhat.com/support/errata/RHSA-2010-0582.html","reference_id":"","reference_type":"","scores":[],"url":"http://www.redhat.com/support/errata/RHSA-2010-0582.html"},{"reference_url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html"},{"reference_url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=559738","reference_id":"559738","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=559738"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2693","reference_id":"CVE-2009-2693","reference_type":"","scores":[{"value":"Low","scoring_system":"apache_tomcat","scoring_elements":""}],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2693"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2693","reference_id":"CVE-2009-2693","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-2693"},{"reference_url":"https://github.com/advisories/GHSA-ggx9-4728-588r","reference_id":"GHSA-ggx9-4728-588r","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-ggx9-4728-588r"},{"reference_url":"https://security.gentoo.org/glsa/201206-24","reference_id":"GLSA-201206-24","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/201206-24"},{"reference_url":"https://access.redhat.com/errata/RHSA-2010:0693","reference_id":"RHSA-2010:0693","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2010:0693"},{"reference_url":"https://usn.ubuntu.com/899-1/","reference_id":"USN-899-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/899-1/"}],"weaknesses":[{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":22,"name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."}],"exploits":[],"severity_range_score":"0.1 - 6.9","exploitability":"0.5","weighted_severity":"6.2","risk_score":3.1,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-1qt3-ctae-sfgw"}