GET

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

GET /api/vulnerabilities/85385?format=api
HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/vulnerabilities/85385?format=api",
    "vulnerability_id": "VCID-nb1y-cbzs-abhc",
    "summary": "openstack-nova: Unprivileged API user can access host data using instance snapshot",
    "aliases": [
        {
            "alias": "CVE-2015-7548"
        }
    ],
    "fixed_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/932894?format=api",
            "purl": "pkg:deb/debian/nova@2:13.0.0~rc3-1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:13.0.0~rc3-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1037213?format=api",
            "purl": "pkg:deb/debian/nova@2:13.1.0-2~bpo8%2B1",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1fb2-ccby-7yfq"
                },
                {
                    "vulnerability": "VCID-1qbm-qguj-gkem"
                },
                {
                    "vulnerability": "VCID-2dpk-ncrc-1fcw"
                },
                {
                    "vulnerability": "VCID-br4q-499g-vqhg"
                },
                {
                    "vulnerability": "VCID-cwub-w9dp-wfgy"
                },
                {
                    "vulnerability": "VCID-cy7p-gzf8-eqcj"
                },
                {
                    "vulnerability": "VCID-h6rd-5p7q-s3gq"
                },
                {
                    "vulnerability": "VCID-jdb7-71q5-pfcx"
                },
                {
                    "vulnerability": "VCID-qfdm-g857-3yb5"
                },
                {
                    "vulnerability": "VCID-s69v-tc7x-37fe"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:13.1.0-2~bpo8%252B1"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/932857?format=api",
            "purl": "pkg:deb/debian/nova@2:22.0.1-2%2Bdeb11u1?distro=trixie",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-hd9e-1msb-uqa6"
                },
                {
                    "vulnerability": "VCID-m5vc-4my3-87gk"
                },
                {
                    "vulnerability": "VCID-zwuz-pgjz-rkb9"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:22.0.1-2%252Bdeb11u1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/932855?format=api",
            "purl": "pkg:deb/debian/nova@2:26.2.2-1~deb12u3?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:26.2.2-1~deb12u3%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/932860?format=api",
            "purl": "pkg:deb/debian/nova@2:31.0.0-6%2Bdeb13u2?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:31.0.0-6%252Bdeb13u2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/932858?format=api",
            "purl": "pkg:deb/debian/nova@2:33.0.0~rc1-5?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:33.0.0~rc1-5%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/932859?format=api",
            "purl": "pkg:deb/debian/nova@2:33.0.0-1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:33.0.0-1%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1000461?format=api",
            "purl": "pkg:deb/debian/nova@2:33.0.0-2?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:33.0.0-2%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1041985?format=api",
            "purl": "pkg:deb/debian/nova@2:33.0.0-3?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:33.0.0-3%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1066837?format=api",
            "purl": "pkg:deb/debian/nova@2:33.0.0-4?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:33.0.0-4%3Fdistro=trixie"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1088711?format=api",
            "purl": "pkg:deb/debian/nova@2:33.0.1-1?distro=trixie",
            "is_vulnerable": false,
            "affected_by_vulnerabilities": [],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2:33.0.1-1%3Fdistro=trixie"
        }
    ],
    "affected_packages": [
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1037211?format=api",
            "purl": "pkg:deb/debian/nova@2012.1.1-18",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1fb2-ccby-7yfq"
                },
                {
                    "vulnerability": "VCID-1p1c-fevy-bydg"
                },
                {
                    "vulnerability": "VCID-1qbm-qguj-gkem"
                },
                {
                    "vulnerability": "VCID-2dpk-ncrc-1fcw"
                },
                {
                    "vulnerability": "VCID-5nfz-1bk3-93fe"
                },
                {
                    "vulnerability": "VCID-5w9q-vw2n-zfdu"
                },
                {
                    "vulnerability": "VCID-6n3z-x4zj-4bez"
                },
                {
                    "vulnerability": "VCID-7wvt-bvww-g7ck"
                },
                {
                    "vulnerability": "VCID-7yp4-ebnm-g3c3"
                },
                {
                    "vulnerability": "VCID-9se5-m6dx-8kcj"
                },
                {
                    "vulnerability": "VCID-az4e-wgmd-gyc3"
                },
                {
                    "vulnerability": "VCID-bauj-n7jg-gkd2"
                },
                {
                    "vulnerability": "VCID-br4q-499g-vqhg"
                },
                {
                    "vulnerability": "VCID-cwub-w9dp-wfgy"
                },
                {
                    "vulnerability": "VCID-cy7p-gzf8-eqcj"
                },
                {
                    "vulnerability": "VCID-ek6e-977t-3bew"
                },
                {
                    "vulnerability": "VCID-ex1j-py3q-93hv"
                },
                {
                    "vulnerability": "VCID-h6rd-5p7q-s3gq"
                },
                {
                    "vulnerability": "VCID-hcsa-vfvp-buax"
                },
                {
                    "vulnerability": "VCID-hgk8-jtvw-9fgb"
                },
                {
                    "vulnerability": "VCID-jdb7-71q5-pfcx"
                },
                {
                    "vulnerability": "VCID-jdn1-d4d3-sud7"
                },
                {
                    "vulnerability": "VCID-k48d-ecqx-m3ed"
                },
                {
                    "vulnerability": "VCID-kncr-vrmh-fygm"
                },
                {
                    "vulnerability": "VCID-kqbu-drg3-fycm"
                },
                {
                    "vulnerability": "VCID-n6d6-1kyd-qufe"
                },
                {
                    "vulnerability": "VCID-nb1y-cbzs-abhc"
                },
                {
                    "vulnerability": "VCID-q246-vzd6-3qfb"
                },
                {
                    "vulnerability": "VCID-qb9p-rpza-5fa5"
                },
                {
                    "vulnerability": "VCID-qe1w-wnfu-mudr"
                },
                {
                    "vulnerability": "VCID-qfdm-g857-3yb5"
                },
                {
                    "vulnerability": "VCID-qnhs-qv3p-myg2"
                },
                {
                    "vulnerability": "VCID-r558-z5xb-v3a8"
                },
                {
                    "vulnerability": "VCID-rvp9-etcr-wycj"
                },
                {
                    "vulnerability": "VCID-s69v-tc7x-37fe"
                },
                {
                    "vulnerability": "VCID-sj2k-uq1g-suby"
                },
                {
                    "vulnerability": "VCID-t2sh-b3m5-vyax"
                },
                {
                    "vulnerability": "VCID-v47b-k4qx-h7a2"
                },
                {
                    "vulnerability": "VCID-vena-h39k-v3fe"
                },
                {
                    "vulnerability": "VCID-x5k4-dm9d-xkf7"
                },
                {
                    "vulnerability": "VCID-y8va-eyt2-3kfv"
                },
                {
                    "vulnerability": "VCID-ykzj-fz7y-eug8"
                },
                {
                    "vulnerability": "VCID-zy9m-d25c-5uga"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2012.1.1-18"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/1037212?format=api",
            "purl": "pkg:deb/debian/nova@2014.1.3-11",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-1fb2-ccby-7yfq"
                },
                {
                    "vulnerability": "VCID-1qbm-qguj-gkem"
                },
                {
                    "vulnerability": "VCID-2dpk-ncrc-1fcw"
                },
                {
                    "vulnerability": "VCID-5nfz-1bk3-93fe"
                },
                {
                    "vulnerability": "VCID-6n3z-x4zj-4bez"
                },
                {
                    "vulnerability": "VCID-7yp4-ebnm-g3c3"
                },
                {
                    "vulnerability": "VCID-9se5-m6dx-8kcj"
                },
                {
                    "vulnerability": "VCID-br4q-499g-vqhg"
                },
                {
                    "vulnerability": "VCID-cwub-w9dp-wfgy"
                },
                {
                    "vulnerability": "VCID-cy7p-gzf8-eqcj"
                },
                {
                    "vulnerability": "VCID-ek6e-977t-3bew"
                },
                {
                    "vulnerability": "VCID-h6rd-5p7q-s3gq"
                },
                {
                    "vulnerability": "VCID-jdb7-71q5-pfcx"
                },
                {
                    "vulnerability": "VCID-k48d-ecqx-m3ed"
                },
                {
                    "vulnerability": "VCID-nb1y-cbzs-abhc"
                },
                {
                    "vulnerability": "VCID-qfdm-g857-3yb5"
                },
                {
                    "vulnerability": "VCID-s69v-tc7x-37fe"
                },
                {
                    "vulnerability": "VCID-zy9m-d25c-5uga"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:deb/debian/nova@2014.1.3-11"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/116375?format=api",
            "purl": "pkg:rpm/redhat/openstack-nova@2014.1.5-15?arch=el7ost",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-nb1y-cbzs-abhc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-nova@2014.1.5-15%3Farch=el7ost"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/116376?format=api",
            "purl": "pkg:rpm/redhat/openstack-nova@2014.1.5-16?arch=el6ost",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-6n3z-x4zj-4bez"
                },
                {
                    "vulnerability": "VCID-nb1y-cbzs-abhc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-nova@2014.1.5-16%3Farch=el6ost"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/116378?format=api",
            "purl": "pkg:rpm/redhat/openstack-nova@2014.2.3-48?arch=el7ost",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-nb1y-cbzs-abhc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-nova@2014.2.3-48%3Farch=el7ost"
        },
        {
            "url": "http://public2.vulnerablecode.io/api/packages/116377?format=api",
            "purl": "pkg:rpm/redhat/openstack-nova@2015.1.2-13?arch=el7ost",
            "is_vulnerable": true,
            "affected_by_vulnerabilities": [
                {
                    "vulnerability": "VCID-nb1y-cbzs-abhc"
                }
            ],
            "resource_url": "http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/openstack-nova@2015.1.2-13%3Farch=el7ost"
        }
    ],
    "references": [
        {
            "reference_url": "http://rhn.redhat.com/errata/RHSA-2016-0018.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://rhn.redhat.com/errata/RHSA-2016-0018.html"
        },
        {
            "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7548.json",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2015-7548.json"
        },
        {
            "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2015-7548",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38026",
                    "published_at": "2026-05-14T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.37974",
                    "published_at": "2026-05-11T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.37951",
                    "published_at": "2026-05-12T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38363",
                    "published_at": "2026-04-21T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.385",
                    "published_at": "2026-04-02T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38525",
                    "published_at": "2026-04-04T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38387",
                    "published_at": "2026-04-07T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38438",
                    "published_at": "2026-04-08T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38446",
                    "published_at": "2026-04-16T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38461",
                    "published_at": "2026-04-11T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38424",
                    "published_at": "2026-04-12T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38399",
                    "published_at": "2026-04-13T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38426",
                    "published_at": "2026-04-18T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38206",
                    "published_at": "2026-04-24T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38182",
                    "published_at": "2026-04-26T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38087",
                    "published_at": "2026-04-29T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.37976",
                    "published_at": "2026-05-05T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38046",
                    "published_at": "2026-05-07T12:55:00Z"
                },
                {
                    "value": "0.00172",
                    "scoring_system": "epss",
                    "scoring_elements": "0.38059",
                    "published_at": "2026-05-09T12:55:00Z"
                }
            ],
            "url": "https://api.first.org/data/v1/epss?cve=CVE-2015-7548"
        },
        {
            "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7548",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-7548"
        },
        {
            "reference_url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml",
            "reference_id": "",
            "reference_type": "",
            "scores": [
                {
                    "value": "6.3",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:N/AC:M/Au:S/C:C/I:N/A:N"
                }
            ],
            "url": "https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"
        },
        {
            "reference_url": "https://security.openstack.org/ossa/OSSA-2016-001.html",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "https://security.openstack.org/ossa/OSSA-2016-001.html"
        },
        {
            "reference_url": "http://www.securityfocus.com/bid/80176",
            "reference_id": "",
            "reference_type": "",
            "scores": [],
            "url": "http://www.securityfocus.com/bid/80176"
        },
        {
            "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=1290511",
            "reference_id": "1290511",
            "reference_type": "",
            "scores": [],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1290511"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
            "reference_id": "cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*",
            "reference_type": "",
            "scores": [],
            "url": "https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:openstack:nova:*:*:*:*:*:*:*:*"
        },
        {
            "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7548",
            "reference_id": "CVE-2015-7548",
            "reference_type": "",
            "scores": [
                {
                    "value": "2.1",
                    "scoring_system": "cvssv2",
                    "scoring_elements": "AV:N/AC:H/Au:S/C:P/I:N/A:N"
                },
                {
                    "value": "3.5",
                    "scoring_system": "cvssv3",
                    "scoring_elements": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N"
                }
            ],
            "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-7548"
        },
        {
            "reference_url": "https://access.redhat.com/errata/RHSA-2016:0018",
            "reference_id": "RHSA-2016:0018",
            "reference_type": "",
            "scores": [],
            "url": "https://access.redhat.com/errata/RHSA-2016:0018"
        },
        {
            "reference_url": "https://usn.ubuntu.com/3449-1/",
            "reference_id": "USN-3449-1",
            "reference_type": "",
            "scores": [],
            "url": "https://usn.ubuntu.com/3449-1/"
        }
    ],
    "weaknesses": [
        {
            "cwe_id": 200,
            "name": "Exposure of Sensitive Information to an Unauthorized Actor",
            "description": "The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information."
        }
    ],
    "exploits": [],
    "severity_range_score": "2.1 - 6.3",
    "exploitability": "0.5",
    "weighted_severity": "3.1",
    "risk_score": 1.6,
    "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nb1y-cbzs-abhc"
}