Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/8185?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/8185?format=api", "vulnerability_id": "VCID-492x-u9pr-auen", "summary": "DoS attack via crafted XML payload processed by REST Plugin using XStream library\nThe REST Plugin in this package is using an outdated XStream library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted XML payload.", "aliases": [ { "alias": "CVE-2017-9793" }, { "alias": "GHSA-vwxj-6m5m-rrvh" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/24696?format=api", "purl": "pkg:maven/org.apache.struts/struts2-core@2.5.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-3yq7-n972-j7dh" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-87fh-rvvb-6ubq" }, { "vulnerability": "VCID-95ts-vpk6-uubg" }, { "vulnerability": "VCID-b7zy-qhz9-tuar" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-cm62-bsdz-yye2" }, { "vulnerability": "VCID-dk2f-14xj-9bf8" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-tgd1-s1yg-9fdt" }, { "vulnerability": "VCID-y5uq-a6dx-3yd4" }, { "vulnerability": "VCID-zxww-8kb3-tufv" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-core@2.5.13" }, { "url": "http://public2.vulnerablecode.io/api/packages/22627?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.20.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" }, { "vulnerability": "VCID-vgp6-jxqt-pbf4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.20.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/22628?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.24", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" }, { "vulnerability": "VCID-vgp6-jxqt-pbf4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.24" }, { "url": "http://public2.vulnerablecode.io/api/packages/24747?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.34", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.34" }, { "url": "http://public2.vulnerablecode.io/api/packages/24748?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.13", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.13" } ], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/166497?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/166498?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.1.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.1.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/166499?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.1.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.1.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/166500?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.1.8.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.1.8.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/166501?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.2.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.2.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/166502?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.2.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.2.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/166503?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.2.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.2.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/166504?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.2.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.2.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/166505?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/166506?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.1.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.1.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/166507?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.1.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.1.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/166508?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/166509?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.4" }, { "url": "http://public2.vulnerablecode.io/api/packages/166510?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.4.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/24729?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.7" }, { "url": "http://public2.vulnerablecode.io/api/packages/164569?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/164570?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/164571?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.14", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.14" }, { "url": "http://public2.vulnerablecode.io/api/packages/164572?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.14.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.14.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/164573?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.14.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.14.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/24730?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.14.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.14.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/24731?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/164574?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.15.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-b59n-uxft-4qgz" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.15.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/82378?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.15.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.15.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/24732?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.15.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.15.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/24733?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.16", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.16" }, { "url": "http://public2.vulnerablecode.io/api/packages/164575?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.16.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.16.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/164576?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.16.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.16.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/24734?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.16.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.16.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/24735?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.17", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.17" }, { "url": "http://public2.vulnerablecode.io/api/packages/24736?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.19", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-vgp6-jxqt-pbf4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.19" }, { "url": "http://public2.vulnerablecode.io/api/packages/22625?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.20", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" }, { "vulnerability": "VCID-vgp6-jxqt-pbf4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.20" }, { "url": "http://public2.vulnerablecode.io/api/packages/22626?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.20.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" }, { "vulnerability": "VCID-vgp6-jxqt-pbf4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.20.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/24737?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.20.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.20.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/22627?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.20.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" }, { "vulnerability": "VCID-vgp6-jxqt-pbf4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.20.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/24738?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.21", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.21" }, { "url": "http://public2.vulnerablecode.io/api/packages/24739?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.23", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.23" }, { "url": "http://public2.vulnerablecode.io/api/packages/22628?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.24", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" }, { "vulnerability": "VCID-vgp6-jxqt-pbf4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.24" }, { "url": "http://public2.vulnerablecode.io/api/packages/22629?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.24.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" }, { "vulnerability": "VCID-vgp6-jxqt-pbf4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.24.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/24740?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.24.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.24.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/22630?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.24.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" }, { "vulnerability": "VCID-vgp6-jxqt-pbf4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.24.3" }, { "url": "http://public2.vulnerablecode.io/api/packages/24741?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.25", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.25" }, { "url": "http://public2.vulnerablecode.io/api/packages/22631?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.28", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" }, { "vulnerability": "VCID-vgp6-jxqt-pbf4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.28" }, { "url": "http://public2.vulnerablecode.io/api/packages/22632?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.28.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.28.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/24742?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.29", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.29" }, { "url": "http://public2.vulnerablecode.io/api/packages/164577?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.30", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.30" }, { "url": "http://public2.vulnerablecode.io/api/packages/164578?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.31", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.31" }, { "url": "http://public2.vulnerablecode.io/api/packages/164579?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.32", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.32" }, { "url": "http://public2.vulnerablecode.io/api/packages/24743?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.33", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.3.33" }, { "url": "http://public2.vulnerablecode.io/api/packages/31667?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.0" }, { "url": "http://public2.vulnerablecode.io/api/packages/24744?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/164580?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/164581?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/164582?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.5" }, { "url": "http://public2.vulnerablecode.io/api/packages/164583?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.8" }, { "url": "http://public2.vulnerablecode.io/api/packages/164584?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/24745?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.10.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.10.1" }, { "url": "http://public2.vulnerablecode.io/api/packages/24746?format=api", "purl": "pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-492x-u9pr-auen" }, { "vulnerability": "VCID-79j9-v8gz-rfax" }, { "vulnerability": "VCID-bgbt-j1n9-6yg5" }, { "vulnerability": "VCID-fy9j-w7r2-sugr" }, { "vulnerability": "VCID-gfxq-vtry-bqgg" }, { "vulnerability": "VCID-hgj2-vqzn-gyeb" }, { "vulnerability": "VCID-hpm1-euf1-vff1" }, { "vulnerability": "VCID-t1v1-vm43-sfhg" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:maven/org.apache.struts/struts2-rest-plugin@2.5.12" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9793.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.9", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-9793.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9793", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92123", "published_at": "2026-05-14T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92104", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92097", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92088", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92075", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92068", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92064", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92066", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92069", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92061", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92057", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92053", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92041", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92037", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92029", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.07937", "scoring_system": "epss", "scoring_elements": "0.92023", "published_at": "2026-04-01T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-9793" }, { "reference_url": "https://github.com/advisories/GHSA-vwxj-6m5m-rrvh", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vwxj-6m5m-rrvh" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20180629-0001", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://security.netapp.com/advisory/ntap-20180629-0001" }, { "reference_url": "https://security.netapp.com/advisory/ntap-20180629-0001/", "reference_id": "", "reference_type": "", "scores": [], "url": "https://security.netapp.com/advisory/ntap-20180629-0001/" }, { "reference_url": "https://struts.apache.org/docs/s2-051.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://struts.apache.org/docs/s2-051.html" }, { "reference_url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170907-struts2" }, { "reference_url": "http://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2017-429.htm", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.brocade.com/content/dam/common/documents/content-types/security-bulletin/brocade-security-advisory-2017-429.htm" }, { "reference_url": "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.oracle.com/technetwork/security-advisory/alert-cve-2017-9805-3889403.html" }, { "reference_url": "http://www.securityfocus.com/bid/100611", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securityfocus.com/bid/100611" }, { "reference_url": "http://www.securitytracker.com/id/1039262", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "http://www.securitytracker.com/id/1039262" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1488481", "reference_id": "1488481", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1488481" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.10:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.10:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.10:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.11:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.11:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.11:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.12:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.13:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.13:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.13:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.14:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.14.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.14.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.14.3:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.15:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.15.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.15.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.15.3:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.16:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.16.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.16.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.16.3:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.17:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.17:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.17:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.19:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.19:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.19:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.20:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.20.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.20.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.20.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.20.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.21:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.21:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.21:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.22:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.22:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.22:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.23:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.23:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.23:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.24.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.24.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.24.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.24.3:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.24.3:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.24.3:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.25:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.25:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.25:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.26:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.26:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.26:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.27:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.27:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.27:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.28:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.28:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.28:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.28.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.28.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.28.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.29:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.29:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.29:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.30:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.30:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.30:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.31:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.31:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.31:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.32:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.32:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.32:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.33:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.33:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.33:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.7:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.8:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.9:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.3.9:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.3.9:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.10:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5.10:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.10:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.10.1:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5.10.1:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.10.1:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.12:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5.12:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.12:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.2:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5.2:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.2:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.3:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5.3:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.3:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.4:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5.4:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.4:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.5:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5.5:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.5:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.6:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5.6:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.6:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.7:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5.7:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.7:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.8:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5.8:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.8:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.9:*:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5.9:*:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5.9:*:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5:beta1:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5:beta1:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5:beta1:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5:beta2:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5:beta2:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5:beta2:*:*:*:*:*:*" }, { "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5:beta3:*:*:*:*:*:*", "reference_id": "cpe:2.3:a:apache:struts:2.5:beta3:*:*:*:*:*:*", "reference_type": "", "scores": [], "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:apache:struts:2.5:beta3:*:*:*:*:*:*" }, { "reference_url": "https://access.redhat.com/security/cve/CVE-2017-9793", "reference_id": "CVE-2017-9793", "reference_type": "", "scores": [], "url": "https://access.redhat.com/security/cve/CVE-2017-9793" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9793", "reference_id": "CVE-2017-9793", "reference_type": "", "scores": [ { "value": "5.0", "scoring_system": "cvssv2", "scoring_elements": "AV:N/AC:L/Au:N/C:N/I:N/A:P" }, { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2017-9793" } ], "weaknesses": [ { "cwe_id": 1035, "name": "OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017." }, { "cwe_id": 20, "name": "Improper Input Validation", "description": "The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly." }, { "cwe_id": 937, "name": "OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities", "description": "Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013." } ], "exploits": [], "severity_range_score": "5.0 - 8.9", "exploitability": "0.5", "weighted_severity": "8.0", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-492x-u9pr-auen" }