Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/66421?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/66421?format=api", "vulnerability_id": "VCID-ttzx-uwaj-8uek", "summary": "mariadb: MariaDB: mariadb-dump utility vulnerable to remote code execution via improper path validation", "aliases": [ { "alias": "CVE-2025-13699" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/930445?format=api", "purl": "pkg:deb/debian/mariadb@11.8.6-0%2Bdeb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mariadb@11.8.6-0%252Bdeb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/930444?format=api", "purl": "pkg:deb/debian/mariadb@1:11.8.5-1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mariadb@1:11.8.5-1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/930436?format=api", "purl": "pkg:deb/debian/mariadb@1:11.8.6-0%2Bdeb13u1?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mariadb@1:11.8.6-0%252Bdeb13u1%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1055021?format=api", "purl": "pkg:deb/debian/mariadb@1:11.8.6-0%2Bdeb13u1", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mariadb@1:11.8.6-0%252Bdeb13u1" }, { "url": "http://public2.vulnerablecode.io/api/packages/930435?format=api", "purl": "pkg:deb/debian/mariadb@1:11.8.6-5?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mariadb@1:11.8.6-5%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1066833?format=api", "purl": "pkg:deb/debian/mariadb@1:11.8.6-6?distro=trixie", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mariadb@1:11.8.6-6%3Fdistro=trixie" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/930433?format=api", "purl": "pkg:deb/debian/mariadb@1:10.11.14-0%2Bdeb12u2?distro=trixie", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-sawk-emag-1ygs" }, { "vulnerability": "VCID-ttzx-uwaj-8uek" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mariadb@1:10.11.14-0%252Bdeb12u2%3Fdistro=trixie" }, { "url": "http://public2.vulnerablecode.io/api/packages/1055020?format=api", "purl": "pkg:deb/debian/mariadb@1:10.11.14-0%2Bdeb12u2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-sawk-emag-1ygs" }, { "vulnerability": "VCID-ttzx-uwaj-8uek" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/mariadb@1:10.11.14-0%252Bdeb12u2" }, { "url": "http://public2.vulnerablecode.io/api/packages/88024?format=api", "purl": "pkg:rpm/redhat/mariadb@1:5.5.68-1.el7_9?arch=1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ttzx-uwaj-8uek" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mariadb@1:5.5.68-1.el7_9%3Farch=1" }, { "url": "http://public2.vulnerablecode.io/api/packages/88026?format=api", "purl": "pkg:rpm/redhat/mariadb@3:10.5.22-1.el9_0?arch=1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ttzx-uwaj-8uek" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mariadb@3:10.5.22-1.el9_0%3Farch=1" }, { "url": "http://public2.vulnerablecode.io/api/packages/88027?format=api", "purl": "pkg:rpm/redhat/mariadb@3:10.5.22-2?arch=el9_4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ttzx-uwaj-8uek" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mariadb@3:10.5.22-2%3Farch=el9_4" }, { "url": "http://public2.vulnerablecode.io/api/packages/88025?format=api", "purl": "pkg:rpm/redhat/mariadb@3:10.5.22-2?arch=el9_2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ttzx-uwaj-8uek" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mariadb@3:10.5.22-2%3Farch=el9_2" }, { "url": "http://public2.vulnerablecode.io/api/packages/88028?format=api", "purl": "pkg:rpm/redhat/mariadb@3:10.5.29-3?arch=el9_7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ttzx-uwaj-8uek" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mariadb@3:10.5.29-3%3Farch=el9_7" }, { "url": "http://public2.vulnerablecode.io/api/packages/88023?format=api", "purl": "pkg:rpm/redhat/mariadb@3:10.5.29-3?arch=el9_6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ttzx-uwaj-8uek" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mariadb@3:10.5.29-3%3Farch=el9_6" }, { "url": "http://public2.vulnerablecode.io/api/packages/87351?format=api", "purl": "pkg:rpm/redhat/mariadb10.11@3:10.11.15-1?arch=el10_0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3tgc-def7-zufy" }, { "vulnerability": "VCID-45ah-27q3-tbbh" }, { "vulnerability": "VCID-7awt-vh1g-3fdj" }, { "vulnerability": "VCID-9c35-pmbb-efe9" }, { "vulnerability": "VCID-a732-u6ue-57h5" }, { "vulnerability": "VCID-sawk-emag-1ygs" }, { "vulnerability": "VCID-ttzx-uwaj-8uek" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mariadb10.11@3:10.11.15-1%3Farch=el10_0" }, { "url": "http://public2.vulnerablecode.io/api/packages/87350?format=api", "purl": "pkg:rpm/redhat/mariadb10.11@3:10.11.15-1?arch=el10_1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3tgc-def7-zufy" }, { "vulnerability": "VCID-45ah-27q3-tbbh" }, { "vulnerability": "VCID-7awt-vh1g-3fdj" }, { "vulnerability": "VCID-9c35-pmbb-efe9" }, { "vulnerability": "VCID-a732-u6ue-57h5" }, { "vulnerability": "VCID-sawk-emag-1ygs" }, { "vulnerability": "VCID-ttzx-uwaj-8uek" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mariadb10.11@3:10.11.15-1%3Farch=el10_1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1073108?format=api", "purl": "pkg:rpm/redhat/mariadb10-11-main@10.11.16-2.2?arch=hum1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ttzx-uwaj-8uek" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mariadb10-11-main@10.11.16-2.2%3Farch=hum1" }, { "url": "http://public2.vulnerablecode.io/api/packages/1073109?format=api", "purl": "pkg:rpm/redhat/mariadb11-8-main@11.8.6-2.2?arch=hum1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-ttzx-uwaj-8uek" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/mariadb11-8-main@11.8.6-2.2%3Farch=hum1" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-13699.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-13699.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2025-13699", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00116", "scoring_system": "epss", "scoring_elements": "0.29872", "published_at": "2026-05-15T12:55:00Z" }, { "value": "0.00116", "scoring_system": "epss", "scoring_elements": "0.29957", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00116", "scoring_system": "epss", "scoring_elements": "0.29887", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00116", "scoring_system": "epss", "scoring_elements": "0.29752", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00116", "scoring_system": "epss", "scoring_elements": "0.29822", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00116", "scoring_system": "epss", "scoring_elements": "0.29834", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00116", "scoring_system": "epss", "scoring_elements": "0.29763", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00116", "scoring_system": "epss", "scoring_elements": "0.29783", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00116", "scoring_system": "epss", "scoring_elements": "0.2986", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.36315", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.36299", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00155", "scoring_system": "epss", "scoring_elements": "0.36247", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00189", "scoring_system": "epss", "scoring_elements": "0.40626", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00211", "scoring_system": "epss", "scoring_elements": "0.43647", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00211", "scoring_system": "epss", "scoring_elements": "0.43666", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00211", "scoring_system": "epss", "scoring_elements": "0.43635", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00211", "scoring_system": "epss", "scoring_elements": "0.43617", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00211", "scoring_system": "epss", "scoring_elements": "0.43629", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00211", "scoring_system": "epss", "scoring_elements": "0.43654", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00211", "scoring_system": "epss", "scoring_elements": "0.43591", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00211", "scoring_system": "epss", "scoring_elements": "0.43642", "published_at": "2026-04-08T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2025-13699" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13699", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13699" }, { "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417693", "reference_id": "2417693", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2417693" }, { "reference_url": "https://jira.mariadb.org/browse/MDEV-37483", "reference_id": "MDEV-37483", "reference_type": "", "scores": [ { "value": "7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-24T16:10:37Z/" } ], "url": "https://jira.mariadb.org/browse/MDEV-37483" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0061", "reference_id": "RHSA-2026:0061", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0061" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0111", "reference_id": "RHSA-2026:0111", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0111" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0112", "reference_id": "RHSA-2026:0112", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0112" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0136", "reference_id": "RHSA-2026:0136", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0136" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0137", "reference_id": "RHSA-2026:0137", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0137" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0225", "reference_id": "RHSA-2026:0225", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0225" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0232", "reference_id": "RHSA-2026:0232", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0232" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0233", "reference_id": "RHSA-2026:0233", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0233" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0247", "reference_id": "RHSA-2026:0247", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0247" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0295", "reference_id": "RHSA-2026:0295", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0295" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0296", "reference_id": "RHSA-2026:0296", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0296" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0304", "reference_id": "RHSA-2026:0304", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0304" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0333", "reference_id": "RHSA-2026:0333", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0333" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0334", "reference_id": "RHSA-2026:0334", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0334" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0335", "reference_id": "RHSA-2026:0335", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0335" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0336", "reference_id": "RHSA-2026:0336", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0336" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0344", "reference_id": "RHSA-2026:0344", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0344" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0351", "reference_id": "RHSA-2026:0351", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0351" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0357", "reference_id": "RHSA-2026:0357", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0357" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0367", "reference_id": "RHSA-2026:0367", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0367" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0376", "reference_id": "RHSA-2026:0376", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0376" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:0698", "reference_id": "RHSA-2026:0698", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:0698" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:8812", "reference_id": "RHSA-2026:8812", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:8812" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2026:8813", "reference_id": "RHSA-2026:8813", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2026:8813" }, { "reference_url": "https://www.zerodayinitiative.com/advisories/ZDI-25-1025/", "reference_id": "ZDI-25-1025", "reference_type": "", "scores": [ { "value": "7", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-12-24T16:10:37Z/" } ], "url": "https://www.zerodayinitiative.com/advisories/ZDI-25-1025/" } ], "weaknesses": [ { "cwe_id": 22, "name": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "description": "The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory." } ], "exploits": [], "severity_range_score": "7.0 - 7.8", "exploitability": "0.5", "weighted_severity": "6.3", "risk_score": 3.1, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ttzx-uwaj-8uek" }