Vulnerability Instance
Lookup for vulnerabilities affecting packages.
GET /api/vulnerabilities/84085?format=api
{ "url": "http://public2.vulnerablecode.io/api/vulnerabilities/84085?format=api", "vulnerability_id": "VCID-dnc4-fdex-euh5", "summary": "cfme: Execution of arbitrary methods through filter param", "aliases": [ { "alias": "CVE-2017-7530" } ], "fixed_packages": [], "affected_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/111658?format=api", "purl": "pkg:rpm/redhat/ansible@2.3.0.0-1?arch=el7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4wpn-x566-xycg" }, { "vulnerability": "VCID-dnc4-fdex-euh5" }, { "vulnerability": "VCID-rujs-6atg-6ybh" }, { "vulnerability": "VCID-twkw-1514-nygx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ansible@2.3.0.0-1%3Farch=el7" }, { "url": "http://public2.vulnerablecode.io/api/packages/111664?format=api", "purl": "pkg:rpm/redhat/ansible-tower@3.1.3-1?arch=el7at", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4wpn-x566-xycg" }, { "vulnerability": "VCID-dnc4-fdex-euh5" }, { "vulnerability": "VCID-rujs-6atg-6ybh" }, { "vulnerability": "VCID-twkw-1514-nygx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/ansible-tower@3.1.3-1%3Farch=el7at" }, { "url": "http://public2.vulnerablecode.io/api/packages/111665?format=api", "purl": "pkg:rpm/redhat/cfme@5.8.1.5-1?arch=el7cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4wpn-x566-xycg" }, { "vulnerability": "VCID-dnc4-fdex-euh5" }, { "vulnerability": "VCID-rujs-6atg-6ybh" }, { "vulnerability": "VCID-twkw-1514-nygx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme@5.8.1.5-1%3Farch=el7cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/111659?format=api", "purl": "pkg:rpm/redhat/cfme-appliance@5.8.1.5-1?arch=el7cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4wpn-x566-xycg" }, { "vulnerability": "VCID-dnc4-fdex-euh5" }, { "vulnerability": "VCID-rujs-6atg-6ybh" }, { "vulnerability": "VCID-twkw-1514-nygx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme-appliance@5.8.1.5-1%3Farch=el7cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/111660?format=api", "purl": "pkg:rpm/redhat/cfme-gemset@5.8.1.5-1?arch=el7cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4wpn-x566-xycg" }, { "vulnerability": "VCID-dnc4-fdex-euh5" }, { "vulnerability": "VCID-rujs-6atg-6ybh" }, { "vulnerability": "VCID-twkw-1514-nygx" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/cfme-gemset@5.8.1.5-1%3Farch=el7cf" }, { "url": "http://public2.vulnerablecode.io/api/packages/111661?format=api", "purl": "pkg:rpm/redhat/rh-ruby23-rubygem-nokogiri@1.7.2-1?arch=el7cf", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-4wpn-x566-xycg" }, { "vulnerability": "VCID-dnc4-fdex-euh5" }, { "vulnerability": "VCID-rujs-6atg-6ybh" }, { "vulnerability": "VCID-twkw-1514-nygx" }, { "vulnerability": "VCID-z5na-uzmt-x3gr" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/rh-ruby23-rubygem-nokogiri@1.7.2-1%3Farch=el7cf" } ], "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7530.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-7530.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2017-7530", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55492", "published_at": "2026-04-01T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55604", "published_at": "2026-04-02T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55629", "published_at": "2026-04-04T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55605", "published_at": "2026-04-07T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55657", "published_at": "2026-04-08T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.5566", "published_at": "2026-04-09T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55669", "published_at": "2026-04-11T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55649", "published_at": "2026-04-12T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55632", "published_at": "2026-04-13T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.5567", "published_at": "2026-04-16T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55674", "published_at": "2026-04-18T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55653", "published_at": "2026-04-21T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.5558", "published_at": "2026-04-24T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55597", "published_at": "2026-04-26T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55572", "published_at": "2026-04-29T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55518", "published_at": "2026-05-05T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55566", "published_at": "2026-05-07T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55624", "published_at": "2026-05-09T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55581", "published_at": "2026-05-11T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55608", "published_at": "2026-05-12T12:55:00Z" }, { "value": "0.00327", "scoring_system": "epss", "scoring_elements": "0.55667", "published_at": "2026-05-14T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2017-7530" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1465448", "reference_id": "1465448", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1465448" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2017:1758", "reference_id": "RHSA-2017:1758", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2017:1758" } ], "weaknesses": [ { "cwe_id": 862, "name": "Missing Authorization", "description": "The product does not perform an authorization check when an actor attempts to access a resource or perform an action." } ], "exploits": [], "severity_range_score": "8.8 - 8.8", "exploitability": "0.5", "weighted_severity": "7.9", "risk_score": 4.0, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dnc4-fdex-euh5" }