Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-nmvx-w2sz-2kge
Summary
Aliases
0
alias CVE-2007-3386
Fixed_packages
0
url pkg:apache/tomcat@5.5.25
purl pkg:apache/tomcat@5.5.25
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-bv96-e6r9-xka7
1
vulnerability VCID-kxc3-vz2c-wqca
2
vulnerability VCID-qdvn-uc56-6fds
3
vulnerability VCID-qzyq-d6qk-67ag
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.25
1
url pkg:apache/tomcat@6.0.14
purl pkg:apache/tomcat@6.0.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kxc3-vz2c-wqca
1
vulnerability VCID-qdvn-uc56-6fds
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.14
Affected_packages
0
url pkg:apache/tomcat@5.5.0
purl pkg:apache/tomcat@5.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19dy-a2qt-9qdt
1
vulnerability VCID-24v5-jpna-rqg9
2
vulnerability VCID-2af1-rv9j-jugv
3
vulnerability VCID-2jws-wtvg-2khf
4
vulnerability VCID-4t2h-jjhm-y7fq
5
vulnerability VCID-7787-4bwm-efgq
6
vulnerability VCID-89e9-m968-vfhe
7
vulnerability VCID-96kt-5j22-pqg7
8
vulnerability VCID-9j31-459b-4qbm
9
vulnerability VCID-aar2-398x-p3d8
10
vulnerability VCID-cqz2-4njt-g3da
11
vulnerability VCID-crhe-rt8j-wycu
12
vulnerability VCID-eawm-8v9w-yfap
13
vulnerability VCID-eygg-nt7y-qubh
14
vulnerability VCID-fu9h-e3jx-abe2
15
vulnerability VCID-hmqa-jhuf-hfe2
16
vulnerability VCID-jfhv-r8ep-ykbm
17
vulnerability VCID-jw6e-g8z9-43ej
18
vulnerability VCID-kaem-zczd-pyhu
19
vulnerability VCID-kua1-kn4q-7kd2
20
vulnerability VCID-kxc3-vz2c-wqca
21
vulnerability VCID-nmvx-w2sz-2kge
22
vulnerability VCID-pzkk-4e94-aqag
23
vulnerability VCID-qdvn-uc56-6fds
24
vulnerability VCID-qrbz-jgfy-qqhm
25
vulnerability VCID-qz87-x4zb-rud7
26
vulnerability VCID-rbvf-c791-e7cg
27
vulnerability VCID-rdr4-db3y-p3cz
28
vulnerability VCID-rp5z-q8an-e3az
29
vulnerability VCID-t4mh-zvhq-27du
30
vulnerability VCID-ua64-94fd-ekad
31
vulnerability VCID-uwuf-vukf-cqck
32
vulnerability VCID-w6ay-nzvg-zbff
33
vulnerability VCID-w8uj-zy2r-fyca
34
vulnerability VCID-wg7f-pjmn-uudk
35
vulnerability VCID-y9yv-u4jh-mqew
36
vulnerability VCID-ypuq-2mr2-sybb
37
vulnerability VCID-yvcg-96dp-r7e6
38
vulnerability VCID-zam7-79x3-ekg3
39
vulnerability VCID-zm75-zwps-h3fv
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.0
1
url pkg:apache/tomcat@5.5.24
purl pkg:apache/tomcat@5.5.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kaem-zczd-pyhu
1
vulnerability VCID-nmvx-w2sz-2kge
2
vulnerability VCID-qz87-x4zb-rud7
3
vulnerability VCID-uwuf-vukf-cqck
4
vulnerability VCID-w8uj-zy2r-fyca
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@5.5.24
2
url pkg:apache/tomcat@6.0.0
purl pkg:apache/tomcat@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1b-3pdg-jbfq
1
vulnerability VCID-2jws-wtvg-2khf
2
vulnerability VCID-2kjh-4r2g-rqe6
3
vulnerability VCID-4qcn-52ug-mbd5
4
vulnerability VCID-4t2h-jjhm-y7fq
5
vulnerability VCID-5m85-3zyu-7qak
6
vulnerability VCID-6umz-z8db-kqcy
7
vulnerability VCID-6uuq-2a39-yubx
8
vulnerability VCID-7787-4bwm-efgq
9
vulnerability VCID-7fh9-36qs-jfg5
10
vulnerability VCID-89e9-m968-vfhe
11
vulnerability VCID-937w-2w2q-7fdy
12
vulnerability VCID-9j31-459b-4qbm
13
vulnerability VCID-aar2-398x-p3d8
14
vulnerability VCID-axzz-cadr-b7fv
15
vulnerability VCID-bv96-e6r9-xka7
16
vulnerability VCID-crhe-rt8j-wycu
17
vulnerability VCID-eawm-8v9w-yfap
18
vulnerability VCID-eygg-nt7y-qubh
19
vulnerability VCID-f4ka-47dk-zffs
20
vulnerability VCID-fu9h-e3jx-abe2
21
vulnerability VCID-hmqa-jhuf-hfe2
22
vulnerability VCID-hqzu-shyu-j3hp
23
vulnerability VCID-jfhv-r8ep-ykbm
24
vulnerability VCID-jw6e-g8z9-43ej
25
vulnerability VCID-jzta-navk-87bn
26
vulnerability VCID-kaem-zczd-pyhu
27
vulnerability VCID-kua1-kn4q-7kd2
28
vulnerability VCID-kxc3-vz2c-wqca
29
vulnerability VCID-mj47-ya6v-9kd3
30
vulnerability VCID-n4zk-mdyw-3fcz
31
vulnerability VCID-nmvx-w2sz-2kge
32
vulnerability VCID-nnye-4xbb-kuf5
33
vulnerability VCID-pq53-6deg-abfx
34
vulnerability VCID-pzkk-4e94-aqag
35
vulnerability VCID-qdvn-uc56-6fds
36
vulnerability VCID-qrbz-jgfy-qqhm
37
vulnerability VCID-qz87-x4zb-rud7
38
vulnerability VCID-qzyq-d6qk-67ag
39
vulnerability VCID-rbvf-c791-e7cg
40
vulnerability VCID-rdr4-db3y-p3cz
41
vulnerability VCID-s37s-p75k-27e6
42
vulnerability VCID-sk1w-8yt4-93cv
43
vulnerability VCID-t4mh-zvhq-27du
44
vulnerability VCID-t57j-pu79-dbbn
45
vulnerability VCID-tc66-7b7t-k7h3
46
vulnerability VCID-tcmv-6ftg-fqen
47
vulnerability VCID-tmjv-jvfy-judb
48
vulnerability VCID-ua64-94fd-ekad
49
vulnerability VCID-uwuf-vukf-cqck
50
vulnerability VCID-vsta-e8jg-4qa8
51
vulnerability VCID-w8uj-zy2r-fyca
52
vulnerability VCID-wg7f-pjmn-uudk
53
vulnerability VCID-xjj5-fy4e-e7ha
54
vulnerability VCID-xra9-q91u-rfd5
55
vulnerability VCID-y9hs-ymcm-3ucx
56
vulnerability VCID-y9yv-u4jh-mqew
57
vulnerability VCID-ypuq-2mr2-sybb
58
vulnerability VCID-yswq-hnqg-sycs
59
vulnerability VCID-yusx-ncpv-sfhg
60
vulnerability VCID-yvcg-96dp-r7e6
61
vulnerability VCID-zam7-79x3-ekg3
62
vulnerability VCID-zm75-zwps-h3fv
63
vulnerability VCID-zrc5-bf77-aygn
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.0
3
url pkg:apache/tomcat@6.0.13
purl pkg:apache/tomcat@6.0.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kaem-zczd-pyhu
1
vulnerability VCID-nmvx-w2sz-2kge
2
vulnerability VCID-qz87-x4zb-rud7
3
vulnerability VCID-uwuf-vukf-cqck
4
vulnerability VCID-w8uj-zy2r-fyca
resource_url http://public2.vulnerablecode.io/packages/pkg:apache/tomcat@6.0.13
4
url pkg:maven/org.apache.tomcat/tomcat@5.5.0
purl pkg:maven/org.apache.tomcat/tomcat@5.5.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-19dy-a2qt-9qdt
1
vulnerability VCID-24v5-jpna-rqg9
2
vulnerability VCID-2af1-rv9j-jugv
3
vulnerability VCID-2jws-wtvg-2khf
4
vulnerability VCID-46sr-9kr3-1ubw
5
vulnerability VCID-4t2h-jjhm-y7fq
6
vulnerability VCID-74c7-a56p-kufz
7
vulnerability VCID-7787-4bwm-efgq
8
vulnerability VCID-89e9-m968-vfhe
9
vulnerability VCID-96kt-5j22-pqg7
10
vulnerability VCID-9hm5-e4dw-6ffe
11
vulnerability VCID-9j31-459b-4qbm
12
vulnerability VCID-9tsr-9tv5-5kb7
13
vulnerability VCID-aar2-398x-p3d8
14
vulnerability VCID-cqz2-4njt-g3da
15
vulnerability VCID-crhe-rt8j-wycu
16
vulnerability VCID-dnsu-tqgt-audm
17
vulnerability VCID-eawm-8v9w-yfap
18
vulnerability VCID-eygg-nt7y-qubh
19
vulnerability VCID-fu9h-e3jx-abe2
20
vulnerability VCID-hmqa-jhuf-hfe2
21
vulnerability VCID-jfhv-r8ep-ykbm
22
vulnerability VCID-jw6e-g8z9-43ej
23
vulnerability VCID-kaem-zczd-pyhu
24
vulnerability VCID-kua1-kn4q-7kd2
25
vulnerability VCID-kxc3-vz2c-wqca
26
vulnerability VCID-nmvx-w2sz-2kge
27
vulnerability VCID-phm8-b2ym-rqd5
28
vulnerability VCID-pzkk-4e94-aqag
29
vulnerability VCID-qdvn-uc56-6fds
30
vulnerability VCID-qrbz-jgfy-qqhm
31
vulnerability VCID-qz87-x4zb-rud7
32
vulnerability VCID-rbvf-c791-e7cg
33
vulnerability VCID-rdr4-db3y-p3cz
34
vulnerability VCID-rp5z-q8an-e3az
35
vulnerability VCID-t4mh-zvhq-27du
36
vulnerability VCID-ua64-94fd-ekad
37
vulnerability VCID-uwuf-vukf-cqck
38
vulnerability VCID-w6ay-nzvg-zbff
39
vulnerability VCID-w8uj-zy2r-fyca
40
vulnerability VCID-wg7f-pjmn-uudk
41
vulnerability VCID-wtke-y2cx-x3et
42
vulnerability VCID-y9yv-u4jh-mqew
43
vulnerability VCID-ypuq-2mr2-sybb
44
vulnerability VCID-yvcg-96dp-r7e6
45
vulnerability VCID-zam7-79x3-ekg3
46
vulnerability VCID-zm75-zwps-h3fv
47
vulnerability VCID-zuee-5t4z-47he
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.0
5
url pkg:maven/org.apache.tomcat/tomcat@5.5.24
purl pkg:maven/org.apache.tomcat/tomcat@5.5.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kaem-zczd-pyhu
1
vulnerability VCID-nmvx-w2sz-2kge
2
vulnerability VCID-qz87-x4zb-rud7
3
vulnerability VCID-uwuf-vukf-cqck
4
vulnerability VCID-w8uj-zy2r-fyca
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@5.5.24
6
url pkg:maven/org.apache.tomcat/tomcat@6.0.0
purl pkg:maven/org.apache.tomcat/tomcat@6.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1a1b-3pdg-jbfq
1
vulnerability VCID-2jws-wtvg-2khf
2
vulnerability VCID-2kjh-4r2g-rqe6
3
vulnerability VCID-46sr-9kr3-1ubw
4
vulnerability VCID-4qcn-52ug-mbd5
5
vulnerability VCID-4t2h-jjhm-y7fq
6
vulnerability VCID-5m85-3zyu-7qak
7
vulnerability VCID-6umz-z8db-kqcy
8
vulnerability VCID-6uuq-2a39-yubx
9
vulnerability VCID-74c7-a56p-kufz
10
vulnerability VCID-7787-4bwm-efgq
11
vulnerability VCID-7fh9-36qs-jfg5
12
vulnerability VCID-89e9-m968-vfhe
13
vulnerability VCID-937w-2w2q-7fdy
14
vulnerability VCID-9hm5-e4dw-6ffe
15
vulnerability VCID-9j31-459b-4qbm
16
vulnerability VCID-9tsr-9tv5-5kb7
17
vulnerability VCID-aar2-398x-p3d8
18
vulnerability VCID-atus-ryef-17h1
19
vulnerability VCID-axzz-cadr-b7fv
20
vulnerability VCID-bv96-e6r9-xka7
21
vulnerability VCID-crhe-rt8j-wycu
22
vulnerability VCID-dnsu-tqgt-audm
23
vulnerability VCID-eawm-8v9w-yfap
24
vulnerability VCID-eygg-nt7y-qubh
25
vulnerability VCID-f4ka-47dk-zffs
26
vulnerability VCID-fu9h-e3jx-abe2
27
vulnerability VCID-fuxz-fqw3-ufa9
28
vulnerability VCID-hmqa-jhuf-hfe2
29
vulnerability VCID-hqzu-shyu-j3hp
30
vulnerability VCID-jfhv-r8ep-ykbm
31
vulnerability VCID-jw6e-g8z9-43ej
32
vulnerability VCID-jzta-navk-87bn
33
vulnerability VCID-kaem-zczd-pyhu
34
vulnerability VCID-kua1-kn4q-7kd2
35
vulnerability VCID-kxc3-vz2c-wqca
36
vulnerability VCID-mj47-ya6v-9kd3
37
vulnerability VCID-n4zk-mdyw-3fcz
38
vulnerability VCID-nmvx-w2sz-2kge
39
vulnerability VCID-nnye-4xbb-kuf5
40
vulnerability VCID-phm8-b2ym-rqd5
41
vulnerability VCID-pq53-6deg-abfx
42
vulnerability VCID-pzkk-4e94-aqag
43
vulnerability VCID-qdvn-uc56-6fds
44
vulnerability VCID-qrbz-jgfy-qqhm
45
vulnerability VCID-qz87-x4zb-rud7
46
vulnerability VCID-qzyq-d6qk-67ag
47
vulnerability VCID-rbvf-c791-e7cg
48
vulnerability VCID-rdr4-db3y-p3cz
49
vulnerability VCID-redv-2x5y-8khx
50
vulnerability VCID-s37s-p75k-27e6
51
vulnerability VCID-sk1w-8yt4-93cv
52
vulnerability VCID-t3ya-1w1r-h3dv
53
vulnerability VCID-t4mh-zvhq-27du
54
vulnerability VCID-t57j-pu79-dbbn
55
vulnerability VCID-tc66-7b7t-k7h3
56
vulnerability VCID-tcmv-6ftg-fqen
57
vulnerability VCID-tmjv-jvfy-judb
58
vulnerability VCID-ua64-94fd-ekad
59
vulnerability VCID-uwuf-vukf-cqck
60
vulnerability VCID-vsta-e8jg-4qa8
61
vulnerability VCID-w8uj-zy2r-fyca
62
vulnerability VCID-wg7f-pjmn-uudk
63
vulnerability VCID-wtke-y2cx-x3et
64
vulnerability VCID-xjj5-fy4e-e7ha
65
vulnerability VCID-xra9-q91u-rfd5
66
vulnerability VCID-y9hs-ymcm-3ucx
67
vulnerability VCID-y9yv-u4jh-mqew
68
vulnerability VCID-ypuq-2mr2-sybb
69
vulnerability VCID-yswq-hnqg-sycs
70
vulnerability VCID-yusx-ncpv-sfhg
71
vulnerability VCID-yvcg-96dp-r7e6
72
vulnerability VCID-zam7-79x3-ekg3
73
vulnerability VCID-zm75-zwps-h3fv
74
vulnerability VCID-zrc5-bf77-aygn
75
vulnerability VCID-zuee-5t4z-47he
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.0
7
url pkg:maven/org.apache.tomcat/tomcat@6.0.13
purl pkg:maven/org.apache.tomcat/tomcat@6.0.13
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-kaem-zczd-pyhu
1
vulnerability VCID-nmvx-w2sz-2kge
2
vulnerability VCID-qz87-x4zb-rud7
3
vulnerability VCID-uwuf-vukf-cqck
4
vulnerability VCID-w8uj-zy2r-fyca
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.tomcat/tomcat@6.0.13
8
url pkg:rpm/redhat/tomcat5@5.5.23-0jpp.3.0.2?arch=el5
purl pkg:rpm/redhat/tomcat5@5.5.23-0jpp.3.0.2?arch=el5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-nmvx-w2sz-2kge
1
vulnerability VCID-qz87-x4zb-rud7
2
vulnerability VCID-uwuf-vukf-cqck
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.23-0jpp.3.0.2%3Farch=el5
9
url pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh?arch=4
purl pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh?arch=4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2jws-wtvg-2khf
1
vulnerability VCID-kaem-zczd-pyhu
2
vulnerability VCID-nmvx-w2sz-2kge
3
vulnerability VCID-qz87-x4zb-rud7
4
vulnerability VCID-uwuf-vukf-cqck
5
vulnerability VCID-w8uj-zy2r-fyca
resource_url http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/tomcat5@5.5.23-0jpp_4rh%3Farch=4
References
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3386.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2007-3386.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2007-3386
reference_id
reference_type
scores
0
value 0.73782
scoring_system epss
scoring_elements 0.98837
published_at 2026-06-04T12:55:00Z
1
value 0.73782
scoring_system epss
scoring_elements 0.98839
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2007-3386
2
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=247994
reference_id 247994
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=247994
3
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386
reference_id CVE-2007-3386
reference_type
scores
0
value Low
scoring_system apache_tomcat
scoring_elements
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3386
4
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/30495.html
reference_id CVE-2007-3386;OSVDB-36417
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/multiple/remote/30495.html
5
reference_url https://www.securityfocus.com/bid/25314/info
reference_id CVE-2007-3386;OSVDB-36417
reference_type exploit
scores
url https://www.securityfocus.com/bid/25314/info
6
reference_url https://access.redhat.com/errata/RHSA-2007:0871
reference_id RHSA-2007:0871
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0871
7
reference_url https://access.redhat.com/errata/RHSA-2007:0876
reference_id RHSA-2007:0876
reference_type
scores
url https://access.redhat.com/errata/RHSA-2007:0876
Weaknesses
0
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Exploits
0
date_added 2007-08-14
description Apache Tomcat 6.0.13 - Host Manager Servlet Cross-Site Scripting
required_action null
due_date null
notes null
known_ransomware_campaign_use true
source_date_published 2007-08-14
exploit_type remote
platform multiple
source_date_updated 2013-12-25
data_source Exploit-DB
source_url https://www.securityfocus.com/bid/25314/info
Severity_range_score0.1 - 3
Exploitability2.0
Weighted_severity2.7
Risk_score5.4
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-nmvx-w2sz-2kge