{"metadata": {"count": 286561, "page": 1, "per_page": 100}, "data": [{"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:10:34+00:00", "cve": "CVE-2024-1102", "id": "CVE-2024-1102", "initial_release_date": "2024-01-29T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "jberet: jberet-core logging database credentials", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-1102.json", "version": "3", "product_status": {"fixed": 24, "known_affected": 11, "known_not_affected": 2767}, "imported": 1785881434.0, "vulnerability_id": "CVE-2024-1102", "vulnerability_url": "/vuln/CVE-2024-1102"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:10:31+00:00", "cve": "CVE-2026-41989", "id": "CVE-2026-41989", "initial_release_date": "2026-04-23T04:30:26.124000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Libgcrypt: Libgcrypt: Denial of Service and buffer overflow via crafted ECDH ciphertext", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-41989.json", "version": "3", "product_status": {"fixed": 77, "known_affected": 10, "known_not_affected": 6}, "imported": 1785881431.0, "vulnerability_id": "CVE-2026-41989", "vulnerability_url": "/vuln/CVE-2026-41989"}, {"meta_source": "redhat_vex", "current_release_date": "2026-08-04T22:09:13+00:00", "cve": "CVE-2026-45538", "id": "CVE-2026-45538", "initial_release_date": "2026-08-04T20:47:10.262000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "OpenSIPS: OpenSIPS: Remote code execution via stack buffer overflow in SIP message processing", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45538.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1785881353.0, "vulnerability_id": "CVE-2026-45538", "vulnerability_url": "/vuln/CVE-2026-45538"}, {"meta_source": "redhat_vex", "current_release_date": "2026-08-04T22:09:09+00:00", "cve": "CVE-2026-67857", "id": "CVE-2026-67857", "initial_release_date": "2026-08-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "open62541: open62541: Denial of Service via out-of-bounds read in client-side function", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-67857.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1785881349.0, "vulnerability_id": "CVE-2026-67857", "vulnerability_url": "/vuln/CVE-2026-67857"}, {"meta_source": "redhat_vex", "current_release_date": "2026-08-04T22:09:09+00:00", "cve": "CVE-2026-67855", "id": "CVE-2026-67855", "initial_release_date": "2026-08-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "open62541: open62541: Denial of Service via heap use-after-free", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-67855.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1785881349.0, "vulnerability_id": "CVE-2026-67855", "vulnerability_url": "/vuln/CVE-2026-67855"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:07:02+00:00", "cve": "CVE-2011-4580", "id": "CVE-2011-4580", "initial_release_date": "2011-12-14T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Platform: Multiple XSS flaws", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-4580.json", "version": "3", "product_status": {"fixed": 1, "known_not_affected": 1}, "imported": 1785881222.0, "vulnerability_id": "CVE-2011-4580", "vulnerability_url": "/vuln/CVE-2011-4580"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:07:01+00:00", "cve": "CVE-2011-4575", "id": "CVE-2011-4575", "initial_release_date": "2011-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Console: XSS in invoke operation", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-4575.json", "version": "3", "product_status": {"fixed": 883, "known_affected": 2}, "imported": 1785881221.0, "vulnerability_id": "CVE-2011-4575", "vulnerability_url": "/vuln/CVE-2011-4575"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:57+00:00", "cve": "CVE-2011-4317", "id": "CVE-2011-4317", "initial_release_date": "2011-11-23T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "httpd: uri scheme bypass of the reverse proxy vulnerability CVE-2011-3368 fix", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-4317.json", "version": "3", "product_status": {"fixed": 64, "known_not_affected": 4}, "imported": 1785881217.0, "vulnerability_id": "CVE-2011-4317", "vulnerability_url": "/vuln/CVE-2011-4317"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:57+00:00", "cve": "CVE-2010-5298", "id": "CVE-2010-5298", "initial_release_date": "2010-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: freelist misuse causing a possible use-after-free", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2010/cve-2010-5298.json", "version": "3", "product_status": {"fixed": 154, "known_not_affected": 14}, "imported": 1785881217.0, "vulnerability_id": "CVE-2010-5298", "vulnerability_url": "/vuln/CVE-2010-5298"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:54+00:00", "cve": "CVE-2011-3559", "id": "CVE-2011-3559", "initial_release_date": "2011-10-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "JBEWS: Unspecified vulnerability in GlassFish Enterprise Server 2.1.1", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-3559.json", "version": "3", "product_status": {"under_investigation": 1}, "imported": 1785881214.0, "vulnerability_id": "CVE-2011-3559", "vulnerability_url": "/vuln/CVE-2011-3559"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:53+00:00", "cve": "CVE-2011-2260", "id": "CVE-2011-2260", "initial_release_date": "2011-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glassfish: Unspecified vulnerability affecting confidentiality and integrity via unspecified vectors", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-2260.json", "version": "3", "product_status": {"under_investigation": 1}, "imported": 1785881213.0, "vulnerability_id": "CVE-2011-2260", "vulnerability_url": "/vuln/CVE-2011-2260"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:47+00:00", "cve": "CVE-2006-7248", "id": "CVE-2006-7248", "initial_release_date": "2006-08-29T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: mime_hdr_cmp NULL dereference crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2006/cve-2006-7248.json", "version": "3", "product_status": {"known_affected": 4, "known_not_affected": 8}, "imported": 1785881207.0, "vulnerability_id": "CVE-2006-7248", "vulnerability_url": "/vuln/CVE-2006-7248"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:46+00:00", "cve": "CVE-1999-0428", "id": "CVE-1999-0428", "initial_release_date": "1999-03-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: allow remote attackers to reuse SSL sessions and bypass access controls", "url": "https://security.access.redhat.com/data/csaf/v2/vex/1999/cve-1999-0428.json", "version": "3", "product_status": {"known_not_affected": 36}, "imported": 1785881206.0, "vulnerability_id": "CVE-1999-0428", "vulnerability_url": "/vuln/CVE-1999-0428"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:38+00:00", "cve": "CVE-2000-1254", "id": "CVE-2000-1254", "initial_release_date": "2000-06-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: Mishandling C bitwise-shift operations making easier to bypass protection mechanisms", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2000/cve-2000-1254.json", "version": "3", "product_status": {"known_not_affected": 21}, "imported": 1785881198.0, "vulnerability_id": "CVE-2000-1254", "vulnerability_url": "/vuln/CVE-2000-1254"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:37+00:00", "cve": "CVE-2011-4858", "id": "CVE-2011-4858", "initial_release_date": "2011-12-28T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: hash table collisions CPU usage DoS (oCERT-2011-003)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-4858.json", "version": "3", "product_status": {"fixed": 230, "known_not_affected": 12}, "imported": 1785881197.0, "vulnerability_id": "CVE-2011-4858", "vulnerability_url": "/vuln/CVE-2011-4858"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:35+00:00", "cve": "CVE-2011-2908", "id": "CVE-2011-2908", "initial_release_date": "2011-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "CSRF on jmx-console allows invocation of operations on mbeans", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-2908.json", "version": "3", "product_status": {"fixed": 884, "known_affected": 3}, "imported": 1785881195.0, "vulnerability_id": "CVE-2011-2908", "vulnerability_url": "/vuln/CVE-2011-2908"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:30+00:00", "cve": "CVE-2011-5035", "id": "CVE-2011-5035", "initial_release_date": "2011-12-28T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "GlassFish: hash table collisions CPU usage DoS (oCERT-2011-003)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-5035.json", "version": "3", "product_status": {"fixed": 327, "known_not_affected": 1}, "imported": 1785881190.0, "vulnerability_id": "CVE-2011-5035", "vulnerability_url": "/vuln/CVE-2011-5035"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:26+00:00", "cve": "CVE-2006-7250", "id": "CVE-2006-7250", "initial_release_date": "2006-08-29T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: mime_hdr_cmp NULL dereference crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2006/cve-2006-7250.json", "version": "3", "product_status": {"fixed": 43, "known_affected": 3, "known_not_affected": 8}, "imported": 1785881186.0, "vulnerability_id": "CVE-2006-7250", "vulnerability_url": "/vuln/CVE-2006-7250"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:23+00:00", "cve": "CVE-2002-0059", "id": "CVE-2002-0059", "initial_release_date": "2002-03-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "zlib: Double free in inflateEnd", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2002/cve-2002-0059.json", "version": "3", "product_status": {"fixed": 7, "known_not_affected": 32}, "imported": 1785881183.0, "vulnerability_id": "CVE-2002-0059", "vulnerability_url": "/vuln/CVE-2002-0059"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:21+00:00", "cve": "CVE-2011-1184", "id": "CVE-2011-1184", "initial_release_date": "2011-09-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: Multiple weaknesses in HTTP DIGEST authentication", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-1184.json", "version": "3", "product_status": {"fixed": 197, "known_not_affected": 12}, "imported": 1785881181.0, "vulnerability_id": "CVE-2011-1184", "vulnerability_url": "/vuln/CVE-2011-1184"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:19+00:00", "cve": "CVE-2026-68743", "id": "CVE-2026-68743", "initial_release_date": "2026-08-03T07:34:52.474000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "sssd: sssd: PAM responder out-of-bounds read via unchecked auth_token_length in protocol v1", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-68743.json", "version": "3", "product_status": {"known_affected": 165}, "imported": 1785881179.0, "vulnerability_id": "CVE-2026-68743", "vulnerability_url": "/vuln/CVE-2026-68743"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:17+00:00", "cve": "CVE-2011-1511", "id": "CVE-2011-1511", "initial_release_date": "2011-07-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "glassfish: Unspecified vulnerability affecting confidentiality and integrity via unspecified vectors", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-1511.json", "version": "3", "product_status": {"under_investigation": 1}, "imported": 1785881177.0, "vulnerability_id": "CVE-2011-1511", "vulnerability_url": "/vuln/CVE-2011-1511"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:15+00:00", "cve": "CVE-2011-3190", "id": "CVE-2011-3190", "initial_release_date": "2011-08-20T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: authentication bypass and information disclosure", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-3190.json", "version": "3", "product_status": {"fixed": 62, "known_not_affected": 1}, "imported": 1785881175.0, "vulnerability_id": "CVE-2011-3190", "vulnerability_url": "/vuln/CVE-2011-3190"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:13+00:00", "cve": "CVE-2011-3375", "id": "CVE-2011-3375", "initial_release_date": "2011-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: information disclosure due to improper response and request object recycling", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-3375.json", "version": "3", "product_status": {"fixed": 23, "known_not_affected": 11}, "imported": 1785881173.0, "vulnerability_id": "CVE-2011-3375", "vulnerability_url": "/vuln/CVE-2011-3375"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:11+00:00", "cve": "CVE-2011-4084", "id": "CVE-2011-4084", "initial_release_date": "2011-12-28T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: hash table collisions CPU usage DoS (oCERT-2011-003)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-4084.json", "version": "3", "product_status": {"known_affected": 14}, "imported": 1785881171.0, "vulnerability_id": "CVE-2011-4084", "vulnerability_url": "/vuln/CVE-2011-4084"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:09+00:00", "cve": "CVE-2011-3639", "id": "CVE-2011-3639", "initial_release_date": "2011-10-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "httpd: http 0.9 request bypass of the reverse proxy vulnerability CVE-2011-3368 fix", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-3639.json", "version": "3", "product_status": {"fixed": 108, "known_affected": 1, "known_not_affected": 2}, "imported": 1785881169.0, "vulnerability_id": "CVE-2011-3639", "vulnerability_url": "/vuln/CVE-2011-3639"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:05+00:00", "cve": "CVE-2012-3451", "id": "CVE-2012-3451", "initial_release_date": "2012-09-19T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "apache-cxf: SOAPAction spoofing on document literal web services", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-3451.json", "version": "3", "product_status": {"fixed": 1026, "known_affected": 2, "known_not_affected": 4}, "imported": 1785881165.0, "vulnerability_id": "CVE-2012-3451", "vulnerability_url": "/vuln/CVE-2012-3451"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:03+00:00", "cve": "CVE-2013-1753", "id": "CVE-2013-1753", "initial_release_date": "2013-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "python: XMLRPC library unrestricted decompression of HTTP responses using gzip enconding", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-1753.json", "version": "3", "product_status": {"fixed": 220, "known_affected": 16, "known_not_affected": 24}, "imported": 1785881163.0, "vulnerability_id": "CVE-2013-1753", "vulnerability_url": "/vuln/CVE-2013-1753"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:02+00:00", "cve": "CVE-2011-5062", "id": "CVE-2011-5062", "initial_release_date": "2011-09-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: Multiple weaknesses in HTTP DIGEST authentication", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-5062.json", "version": "3", "product_status": {"fixed": 197, "known_not_affected": 12}, "imported": 1785881162.0, "vulnerability_id": "CVE-2011-5062", "vulnerability_url": "/vuln/CVE-2011-5062"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:06:01+00:00", "cve": "CVE-2012-0104", "id": "CVE-2012-0104", "initial_release_date": "2012-01-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "GlassFish: Unspecified vulnerability allows remote attackers to affect availability via unknown vectors related to Web Container", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-0104.json", "version": "3", "product_status": {"under_investigation": 1}, "imported": 1785881161.0, "vulnerability_id": "CVE-2012-0104", "vulnerability_url": "/vuln/CVE-2012-0104"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:56+00:00", "cve": "CVE-2012-4929", "id": "CVE-2012-4929", "initial_release_date": "2012-09-13T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "SSL/TLS CRIME attack against HTTPS", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-4929.json", "version": "3", "product_status": {"fixed": 107, "known_affected": 9, "known_not_affected": 13}, "imported": 1785881156.0, "vulnerability_id": "CVE-2012-4929", "vulnerability_url": "/vuln/CVE-2012-4929"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:53+00:00", "cve": "CVE-2013-0315", "id": "CVE-2013-0315", "initial_release_date": "2013-03-07T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Portal: XML eXternal Entity (XXE) flaw in site import", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-0315.json", "version": "3", "product_status": {"fixed": 1, "known_affected": 1}, "imported": 1785881153.0, "vulnerability_id": "CVE-2013-0315", "vulnerability_url": "/vuln/CVE-2013-0315"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:51+00:00", "cve": "CVE-2012-1007", "id": "CVE-2012-1007", "initial_release_date": "2012-02-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "struts: multiple XSS flaws", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-1007.json", "version": "3", "product_status": {"under_investigation": 1}, "imported": 1785881151.0, "vulnerability_id": "CVE-2012-1007", "vulnerability_url": "/vuln/CVE-2012-1007"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:48+00:00", "cve": "CVE-2012-1094", "id": "CVE-2012-1094", "initial_release_date": "2012-02-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "mod_cluster registers and exposes the root context of a JBoss AS 7 server by default, despite ROOT being in the excluded-contexts list", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-1094.json", "version": "3", "product_status": {"known_not_affected": 1}, "imported": 1785881148.0, "vulnerability_id": "CVE-2012-1094", "vulnerability_url": "/vuln/CVE-2012-1094"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:42+00:00", "cve": "CVE-2013-4517", "id": "CVE-2013-4517", "initial_release_date": "2013-11-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Java: Java XML Signature DoS Attack", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-4517.json", "version": "3", "product_status": {"fixed": 294, "known_affected": 7, "known_not_affected": 5}, "imported": 1785881142.0, "vulnerability_id": "CVE-2013-4517", "vulnerability_url": "/vuln/CVE-2013-4517"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:39+00:00", "cve": "CVE-2012-6708", "id": "CVE-2012-6708", "initial_release_date": "2012-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "js-jquery: XSS via improper selector detection", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-6708.json", "version": "3", "product_status": {"known_affected": 198, "known_not_affected": 62}, "imported": 1785881139.0, "vulnerability_id": "CVE-2012-6708", "vulnerability_url": "/vuln/CVE-2012-6708"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:38+00:00", "cve": "CVE-2012-0213", "id": "CVE-2012-0213", "initial_release_date": "2012-05-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "jakarta: JVM destabilization due to memory exhaustion when processing CDF/CFBF files", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-0213.json", "version": "3", "product_status": {"fixed": 1, "known_affected": 1, "known_not_affected": 1}, "imported": 1785881138.0, "vulnerability_id": "CVE-2012-0213", "vulnerability_url": "/vuln/CVE-2012-0213"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:37+00:00", "cve": "CVE-2012-5887", "id": "CVE-2012-5887", "initial_release_date": "2012-11-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: three DIGEST authentication implementation issues", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-5887.json", "version": "3", "product_status": {"fixed": 176, "known_affected": 4, "known_not_affected": 14}, "imported": 1785881137.0, "vulnerability_id": "CVE-2012-5887", "vulnerability_url": "/vuln/CVE-2012-5887"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:33+00:00", "cve": "CVE-2012-5784", "id": "CVE-2012-5784", "initial_release_date": "2012-10-16T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "axis: missing connection hostname check against X.509 certificate name", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-5784.json", "version": "3", "product_status": {"fixed": 46, "known_affected": 1}, "imported": 1785881133.0, "vulnerability_id": "CVE-2012-5784", "vulnerability_url": "/vuln/CVE-2012-5784"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:32+00:00", "cve": "CVE-2012-3370", "id": "CVE-2012-3370", "initial_release_date": "2012-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "JBoss: SecurityAssociation.getCredential() will return the previous credential if no security context is provided", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-3370.json", "version": "3", "product_status": {"fixed": 883, "known_affected": 3}, "imported": 1785881132.0, "vulnerability_id": "CVE-2012-3370", "vulnerability_url": "/vuln/CVE-2012-3370"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:29+00:00", "cve": "CVE-2012-1006", "id": "CVE-2012-1006", "initial_release_date": "2012-02-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "struts2: multiple XSS flaws", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-1006.json", "version": "3", "product_status": {"under_investigation": 1}, "imported": 1785881129.0, "vulnerability_id": "CVE-2012-1006", "vulnerability_url": "/vuln/CVE-2012-1006"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:27+00:00", "cve": "CVE-2012-3532", "id": "CVE-2012-3532", "initial_release_date": "2012-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Portal: Cross Site Request Forgery", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-3532.json", "version": "3", "product_status": {"fixed": 1, "known_affected": 1}, "imported": 1785881127.0, "vulnerability_id": "CVE-2012-3532", "vulnerability_url": "/vuln/CVE-2012-3532"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:24+00:00", "cve": "CVE-2013-4424", "id": "CVE-2013-4424", "initial_release_date": "2013-12-16T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "GateIn: XSS due to improper url escaping", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-4424.json", "version": "3", "product_status": {"fixed": 1, "known_affected": 1}, "imported": 1785881124.0, "vulnerability_id": "CVE-2013-4424", "vulnerability_url": "/vuln/CVE-2013-4424"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:20+00:00", "cve": "CVE-2011-5064", "id": "CVE-2011-5064", "initial_release_date": "2011-09-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: Multiple weaknesses in HTTP DIGEST authentication", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-5064.json", "version": "3", "product_status": {"fixed": 197, "known_not_affected": 12}, "imported": 1785881120.0, "vulnerability_id": "CVE-2011-5064", "vulnerability_url": "/vuln/CVE-2011-5064"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:16+00:00", "cve": "CVE-2012-1167", "id": "CVE-2012-1167", "initial_release_date": "2012-06-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-1167.json", "version": "3", "product_status": {"fixed": 45, "known_affected": 3, "known_not_affected": 12}, "imported": 1785881116.0, "vulnerability_id": "CVE-2012-1167", "vulnerability_url": "/vuln/CVE-2012-1167"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:14+00:00", "cve": "CVE-2013-4452", "id": "CVE-2013-4452", "initial_release_date": "2013-11-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "ON: World readable configuration files expose sensitive data", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-4452.json", "version": "3", "product_status": {"fixed": 1, "known_affected": 1}, "imported": 1785881114.0, "vulnerability_id": "CVE-2013-4452", "vulnerability_url": "/vuln/CVE-2013-4452"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:13+00:00", "cve": "CVE-2013-2067", "id": "CVE-2013-2067", "initial_release_date": "2013-05-10T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: Session fixation in form authenticator", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-2067.json", "version": "3", "product_status": {"fixed": 922, "known_affected": 3, "known_not_affected": 3}, "imported": 1785881113.0, "vulnerability_id": "CVE-2013-2067", "vulnerability_url": "/vuln/CVE-2013-2067"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:10+00:00", "cve": "CVE-2012-0081", "id": "CVE-2012-0081", "initial_release_date": "2012-01-18T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "GlassFish: Unspecified vulnerability allows local users to affect confidentiality, integrity and availability via unknown vectors", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-0081.json", "version": "3", "product_status": {"under_investigation": 1}, "imported": 1785881110.0, "vulnerability_id": "CVE-2012-0081", "vulnerability_url": "/vuln/CVE-2012-0081"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:10+00:00", "cve": "CVE-2012-0881", "id": "CVE-2012-0881", "initial_release_date": "2012-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "xml: xerces-j2 hash table collisions CPU usage DoS (oCERT-2011-003)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-0881.json", "version": "3", "product_status": {"known_affected": 10}, "imported": 1785881110.0, "vulnerability_id": "CVE-2012-0881", "vulnerability_url": "/vuln/CVE-2012-0881"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:07+00:00", "cve": "CVE-2013-4322", "id": "CVE-2013-4322", "initial_release_date": "2013-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: incomplete fix for CVE-2012-3544", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-4322.json", "version": "3", "product_status": {"fixed": 137, "known_affected": 3, "known_not_affected": 9}, "imported": 1785881107.0, "vulnerability_id": "CVE-2013-4322", "vulnerability_url": "/vuln/CVE-2013-4322"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:05:00+00:00", "cve": "CVE-2013-2160", "id": "CVE-2013-2160", "initial_release_date": "2013-06-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "apache-cxf: Multiple denial of service flaws in the StAX parser", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-2160.json", "version": "3", "product_status": {"fixed": 3, "known_not_affected": 1}, "imported": 1785881100.0, "vulnerability_id": "CVE-2013-2160", "vulnerability_url": "/vuln/CVE-2013-2160"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:04:57+00:00", "cve": "CVE-2012-4431", "id": "CVE-2012-4431", "initial_release_date": "2012-12-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Tomcat/JBoss Web - Bypass of CSRF prevention filter", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-4431.json", "version": "3", "product_status": {"fixed": 55, "known_affected": 2, "known_not_affected": 15}, "imported": 1785881097.0, "vulnerability_id": "CVE-2012-4431", "vulnerability_url": "/vuln/CVE-2012-4431"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:04:53+00:00", "cve": "CVE-2012-3544", "id": "CVE-2012-3544", "initial_release_date": "2012-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: Limited DoS in chunked transfer encoding input filter", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-3544.json", "version": "3", "product_status": {"fixed": 133, "known_affected": 1, "known_not_affected": 14}, "imported": 1785881093.0, "vulnerability_id": "CVE-2012-3544", "vulnerability_url": "/vuln/CVE-2012-3544"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:04:51+00:00", "cve": "CVE-2013-4122", "id": "CVE-2013-4122", "initial_release_date": "2013-07-12T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "cyrus-sasl: NULL pointer dereference (DoS) when glibc v.2.17 or FIPS-140 enabled Linux system used", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-4122.json", "version": "3", "product_status": {"known_not_affected": 26}, "imported": 1785881091.0, "vulnerability_id": "CVE-2013-4122", "vulnerability_url": "/vuln/CVE-2013-4122"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:04:49+00:00", "cve": "CVE-2012-5531", "id": "CVE-2012-5531", "initial_release_date": "2012-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Portal: Reflected Cross-Site Scripting (XSS)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-5531.json", "version": "3", "product_status": {"fixed": 1, "known_affected": 1}, "imported": 1785881089.0, "vulnerability_id": "CVE-2012-5531", "vulnerability_url": "/vuln/CVE-2012-5531"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:04:49+00:00", "cve": "CVE-2011-5245", "id": "CVE-2011-5245", "initial_release_date": "2011-12-30T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "RESTEasy: XML eXternal Entity (XXE) flaw", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-5245.json", "version": "3", "product_status": {"fixed": 53, "known_affected": 4, "known_not_affected": 10}, "imported": 1785881089.0, "vulnerability_id": "CVE-2011-5245", "vulnerability_url": "/vuln/CVE-2011-5245"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:04:42+00:00", "cve": "CVE-2013-4352", "id": "CVE-2013-4352", "initial_release_date": "2013-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "httpd: mod_cache NULL pointer dereference crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-4352.json", "version": "3", "product_status": {"fixed": 110, "known_affected": 1, "known_not_affected": 20}, "imported": 1785881082.0, "vulnerability_id": "CVE-2013-4352", "vulnerability_url": "/vuln/CVE-2013-4352"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:04:38+00:00", "cve": "CVE-2011-5063", "id": "CVE-2011-5063", "initial_release_date": "2011-09-26T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: Multiple weaknesses in HTTP DIGEST authentication", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2011/cve-2011-5063.json", "version": "3", "product_status": {"fixed": 197, "known_not_affected": 12}, "imported": 1785881078.0, "vulnerability_id": "CVE-2011-5063", "vulnerability_url": "/vuln/CVE-2011-5063"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:04:30+00:00", "cve": "CVE-2012-5886", "id": "CVE-2012-5886", "initial_release_date": "2012-11-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: three DIGEST authentication implementation issues", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-5886.json", "version": "3", "product_status": {"fixed": 176, "known_affected": 4, "known_not_affected": 14}, "imported": 1785881070.0, "vulnerability_id": "CVE-2012-5886", "vulnerability_url": "/vuln/CVE-2012-5886"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:04:29+00:00", "cve": "CVE-2026-45623", "id": "CVE-2026-45623", "initial_release_date": "2026-07-27T17:23:13.326000+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "postcss: PostCSS: Information disclosure and denial of service via crafted CSS input", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45623.json", "version": "3", "product_status": {"known_affected": 111, "known_not_affected": 17, "under_investigation": 20}, "imported": 1785881069.0, "vulnerability_id": "CVE-2026-45623", "vulnerability_url": "/vuln/CVE-2026-45623"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:03:44+00:00", "cve": "CVE-2013-4152", "id": "CVE-2013-4152", "initial_release_date": "2013-08-22T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Framework: XML External Entity (XXE) injection flaw", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-4152.json", "version": "3", "product_status": {"fixed": 13}, "imported": 1785881024.0, "vulnerability_id": "CVE-2013-4152", "vulnerability_url": "/vuln/CVE-2013-4152"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:03:39+00:00", "cve": "CVE-2012-5885", "id": "CVE-2012-5885", "initial_release_date": "2012-11-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: three DIGEST authentication implementation issues", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-5885.json", "version": "3", "product_status": {"fixed": 176, "known_affected": 4, "known_not_affected": 14}, "imported": 1785881019.0, "vulnerability_id": "CVE-2012-5885", "vulnerability_url": "/vuln/CVE-2012-5885"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:03:38+00:00", "cve": "CVE-2013-4286", "id": "CVE-2013-4286", "initial_release_date": "2013-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: multiple content-length header poisoning flaws", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-4286.json", "version": "3", "product_status": {"fixed": 461, "known_affected": 5}, "imported": 1785881018.0, "vulnerability_id": "CVE-2013-4286", "vulnerability_url": "/vuln/CVE-2013-4286"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:03:34+00:00", "cve": "CVE-2013-4210", "id": "CVE-2013-4210", "initial_release_date": "2013-09-30T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Remoting: DoS by file descriptor exhaustion", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-4210.json", "version": "3", "product_status": {"fixed": 17, "known_affected": 5, "known_not_affected": 5}, "imported": 1785881014.0, "vulnerability_id": "CVE-2013-4210", "vulnerability_url": "/vuln/CVE-2013-4210"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:03:20+00:00", "cve": "CVE-2012-2733", "id": "CVE-2012-2733", "initial_release_date": "2012-11-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: HTTP NIO connector OOM DoS via a request with large headers", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-2733.json", "version": "3", "product_status": {"fixed": 23, "known_not_affected": 17}, "imported": 1785881000.0, "vulnerability_id": "CVE-2012-2733", "vulnerability_url": "/vuln/CVE-2012-2733"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:03:15+00:00", "cve": "CVE-2012-5783", "id": "CVE-2012-5783", "initial_release_date": "2012-10-16T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-5783.json", "version": "3", "product_status": {"fixed": 111, "known_affected": 8, "known_not_affected": 5}, "imported": 1785880995.0, "vulnerability_id": "CVE-2012-5783", "vulnerability_url": "/vuln/CVE-2012-5783"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:03:08+00:00", "cve": "CVE-2012-4534", "id": "CVE-2012-4534", "initial_release_date": "2012-12-04T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Tomcat - Denial Of Service when using NIO+SSL+sendfile", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-4534.json", "version": "3", "product_status": {"fixed": 65, "known_not_affected": 6}, "imported": 1785880988.0, "vulnerability_id": "CVE-2012-4534", "vulnerability_url": "/vuln/CVE-2012-4534"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:03:07+00:00", "cve": "CVE-2012-0818", "id": "CVE-2012-0818", "initial_release_date": "2012-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "RESTEasy: XML eXternal Entity (XXE) flaw", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-0818.json", "version": "3", "product_status": {"fixed": 86, "known_affected": 3, "known_not_affected": 10}, "imported": 1785880987.0, "vulnerability_id": "CVE-2012-0818", "vulnerability_url": "/vuln/CVE-2012-0818"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:03:03+00:00", "cve": "CVE-2013-1508", "id": "CVE-2013-1508", "initial_release_date": "2013-04-16T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "GlassFish: Unspecified vulnerability allows remote attackers to affect integrity via vectors related to the REST interface", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-1508.json", "version": "3", "product_status": {"under_investigation": 1}, "imported": 1785880983.0, "vulnerability_id": "CVE-2013-1508", "vulnerability_url": "/vuln/CVE-2013-1508"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:03:00+00:00", "cve": "CVE-2013-1752", "id": "CVE-2013-1752", "initial_release_date": "2013-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "python: multiple unbound readline() DoS flaws in python stdlib", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-1752.json", "version": "3", "product_status": {"fixed": 305, "known_affected": 27, "known_not_affected": 9}, "imported": 1785880980.0, "vulnerability_id": "CVE-2013-1752", "vulnerability_url": "/vuln/CVE-2013-1752"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:52+00:00", "cve": "CVE-2012-0022", "id": "CVE-2012-0022", "initial_release_date": "2012-01-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: large number of parameters DoS", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2012/cve-2012-0022.json", "version": "3", "product_status": {"fixed": 228, "known_not_affected": 12}, "imported": 1785880972.0, "vulnerability_id": "CVE-2012-0022", "vulnerability_url": "/vuln/CVE-2012-0022"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:48+00:00", "cve": "CVE-2014-0118", "id": "CVE-2014-0118", "initial_release_date": "2014-07-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "httpd: mod_deflate denial of service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-0118.json", "version": "3", "product_status": {"fixed": 1170, "known_affected": 1, "known_not_affected": 1, "under_investigation": 1}, "imported": 1785880968.0, "vulnerability_id": "CVE-2014-0118", "vulnerability_url": "/vuln/CVE-2014-0118"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:47+00:00", "cve": "CVE-2014-7853", "id": "CVE-2014-7853", "initial_release_date": "2014-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Subsystem: Information disclosure via incorrect sensitivity classification of attribute", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-7853.json", "version": "3", "product_status": {"fixed": 548, "known_affected": 2, "known_not_affected": 1}, "imported": 1785880967.0, "vulnerability_id": "CVE-2014-7853", "vulnerability_url": "/vuln/CVE-2014-7853"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:43+00:00", "cve": "CVE-2014-5352", "id": "CVE-2014-5352", "initial_release_date": "2014-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "krb5: gss_process_context_token() incorrectly frees context (MITKRB5-SA-2015-001)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-5352.json", "version": "3", "product_status": {"fixed": 151, "known_affected": 1, "known_not_affected": 2}, "imported": 1785880963.0, "vulnerability_id": "CVE-2014-5352", "vulnerability_url": "/vuln/CVE-2014-5352"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:41+00:00", "cve": "CVE-2014-3569", "id": "CVE-2014-3569", "initial_release_date": "2014-10-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: denial of service in ssl23_get_client_hello function", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-3569.json", "version": "3", "product_status": {"known_not_affected": 16}, "imported": 1785880961.0, "vulnerability_id": "CVE-2014-3569", "vulnerability_url": "/vuln/CVE-2014-3569"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:39+00:00", "cve": "CVE-2014-0033", "id": "CVE-2014-0033", "initial_release_date": "2014-02-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "tomcat: session fixation still possible with disableURLRewriting enabled", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-0033.json", "version": "3", "product_status": {"fixed": 23, "known_affected": 1, "known_not_affected": 34}, "imported": 1785880959.0, "vulnerability_id": "CVE-2014-0033", "vulnerability_url": "/vuln/CVE-2014-0033"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:36+00:00", "cve": "CVE-2014-3512", "id": "CVE-2014-3512", "initial_release_date": "2014-08-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: SRP buffer overrun", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-3512.json", "version": "3", "product_status": {"known_not_affected": 26}, "imported": 1785880956.0, "vulnerability_id": "CVE-2014-3512", "vulnerability_url": "/vuln/CVE-2014-3512"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:31+00:00", "cve": "CVE-2014-3567", "id": "CVE-2014-3567", "initial_release_date": "2014-10-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: Invalid TLS/SSL session tickets could cause memory leak leading to server crash", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-3567.json", "version": "3", "product_status": {"fixed": 151, "known_not_affected": 8}, "imported": 1785880951.0, "vulnerability_id": "CVE-2014-3567", "vulnerability_url": "/vuln/CVE-2014-3567"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:28+00:00", "cve": "CVE-2014-9365", "id": "CVE-2014-9365", "initial_release_date": "2014-12-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "python: failure to validate certificates in the HTTP client with TLS (PEP 476)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-9365.json", "version": "3", "product_status": {"fixed": 214, "known_affected": 24, "known_not_affected": 8}, "imported": 1785880948.0, "vulnerability_id": "CVE-2014-9365", "vulnerability_url": "/vuln/CVE-2014-9365"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:26+00:00", "cve": "CVE-2014-3578", "id": "CVE-2014-3578", "initial_release_date": "2014-09-05T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Framework: Directory traversal", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-3578.json", "version": "3", "product_status": {"fixed": 4, "known_affected": 3, "known_not_affected": 1}, "imported": 1785880946.0, "vulnerability_id": "CVE-2014-3578", "vulnerability_url": "/vuln/CVE-2014-3578"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:24+00:00", "cve": "CVE-2014-3625", "id": "CVE-2014-3625", "initial_release_date": "2014-11-11T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Framework: directory traversal flaw", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-3625.json", "version": "3", "product_status": {"fixed": 5, "known_affected": 3}, "imported": 1785880944.0, "vulnerability_id": "CVE-2014-3625", "vulnerability_url": "/vuln/CVE-2014-3625"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:22+00:00", "cve": "CVE-2014-0198", "id": "CVE-2014-0198", "initial_release_date": "2014-04-21T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: SSL_MODE_RELEASE_BUFFERS NULL pointer dereference in do_ssl3_write()", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-0198.json", "version": "3", "product_status": {"fixed": 154, "known_not_affected": 14}, "imported": 1785880942.0, "vulnerability_id": "CVE-2014-0198", "vulnerability_url": "/vuln/CVE-2014-0198"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:18+00:00", "cve": "CVE-2014-5355", "id": "CVE-2014-5355", "initial_release_date": "2014-12-09T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "krb5: unauthenticated denial of service in recvauth_common() and others", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-5355.json", "version": "3", "product_status": {"fixed": 165, "known_affected": 1, "known_not_affected": 2}, "imported": 1785880938.0, "vulnerability_id": "CVE-2014-5355", "vulnerability_url": "/vuln/CVE-2014-5355"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:17+00:00", "cve": "CVE-2014-0231", "id": "CVE-2014-0231", "initial_release_date": "2014-07-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "httpd: mod_cgid denial of service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-0231.json", "version": "3", "product_status": {"fixed": 1170, "known_affected": 1, "known_not_affected": 1, "under_investigation": 1}, "imported": 1785880937.0, "vulnerability_id": "CVE-2014-0231", "vulnerability_url": "/vuln/CVE-2014-0231"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:15+00:00", "cve": "CVE-2014-0075", "id": "CVE-2014-0075", "initial_release_date": "2014-05-27T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Tomcat/JBossWeb: Limited DoS in chunked transfer encoding input filter", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-0075.json", "version": "3", "product_status": {"fixed": 150, "known_affected": 5}, "imported": 1785880935.0, "vulnerability_id": "CVE-2014-0075", "vulnerability_url": "/vuln/CVE-2014-0075"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:14+00:00", "cve": "CVE-2014-3584", "id": "CVE-2014-3584", "initial_release_date": "2014-10-25T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "CXF: Denial of Service (DoS) via invalid JAX-RS SAML tokens", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-3584.json", "version": "3", "product_status": {"fixed": 1, "known_affected": 5, "known_not_affected": 8}, "imported": 1785880934.0, "vulnerability_id": "CVE-2014-3584", "vulnerability_url": "/vuln/CVE-2014-3584"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:10+00:00", "cve": "CVE-2014-3511", "id": "CVE-2014-3511", "initial_release_date": "2014-08-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: TLS protocol downgrade attack", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-3511.json", "version": "3", "product_status": {"fixed": 160, "known_not_affected": 10}, "imported": 1785880930.0, "vulnerability_id": "CVE-2014-3511", "vulnerability_url": "/vuln/CVE-2014-3511"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:05+00:00", "cve": "CVE-2014-0050", "id": "CVE-2014-0050", "initial_release_date": "2014-02-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "apache-commons-fileupload: denial of service due to too-small buffer size used by MultipartStream", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-0050.json", "version": "3", "product_status": {"fixed": 102, "known_affected": 18, "known_not_affected": 13, "under_investigation": 1}, "imported": 1785880925.0, "vulnerability_id": "CVE-2014-0050", "vulnerability_url": "/vuln/CVE-2014-0050"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:02:03+00:00", "cve": "CVE-2014-0227", "id": "CVE-2014-0227", "initial_release_date": "2014-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Tomcat/JBossWeb: request smuggling and limited DoS in ChunkedInputFilter", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-0227.json", "version": "3", "product_status": {"fixed": 1177, "known_affected": 11}, "imported": 1785880923.0, "vulnerability_id": "CVE-2014-0227", "vulnerability_url": "/vuln/CVE-2014-0227"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:01:52+00:00", "cve": "CVE-2013-6430", "id": "CVE-2013-6430", "initial_release_date": "2013-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Framework: org.spring.web.util.JavaScriptUtils.javaScriptEscape insufficient escaping of characters", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2013/cve-2013-6430.json", "version": "3", "product_status": {"fixed": 2, "known_affected": 4}, "imported": 1785880912.0, "vulnerability_id": "CVE-2013-6430", "vulnerability_url": "/vuln/CVE-2013-6430"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:01:51+00:00", "cve": "CVE-2014-3507", "id": "CVE-2014-3507", "initial_release_date": "2014-08-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: DTLS memory leak from zero-length fragments", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-3507.json", "version": "3", "product_status": {"fixed": 154, "known_affected": 3, "known_not_affected": 10}, "imported": 1785880911.0, "vulnerability_id": "CVE-2014-3507", "vulnerability_url": "/vuln/CVE-2014-3507"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:01:48+00:00", "cve": "CVE-2014-0117", "id": "CVE-2014-0117", "initial_release_date": "2014-07-17T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "httpd: mod_proxy denial of service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-0117.json", "version": "3", "product_status": {"fixed": 110, "known_not_affected": 20}, "imported": 1785880908.0, "vulnerability_id": "CVE-2014-0117", "vulnerability_url": "/vuln/CVE-2014-0117"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:01:48+00:00", "cve": "CVE-2014-5139", "id": "CVE-2014-5139", "initial_release_date": "2014-08-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: crash with SRP ciphersuite in Server Hello message", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-5139.json", "version": "3", "product_status": {"known_not_affected": 26}, "imported": 1785880908.0, "vulnerability_id": "CVE-2014-5139", "vulnerability_url": "/vuln/CVE-2014-5139"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:01:45+00:00", "cve": "CVE-2014-3509", "id": "CVE-2014-3509", "initial_release_date": "2014-08-06T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "openssl: race condition in ssl_parse_serverhello_tlsext", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-3509.json", "version": "3", "product_status": {"fixed": 159, "known_not_affected": 10}, "imported": 1785880905.0, "vulnerability_id": "CVE-2014-3509", "vulnerability_url": "/vuln/CVE-2014-3509"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:01:40+00:00", "cve": "CVE-2014-9421", "id": "CVE-2014-9421", "initial_release_date": "2014-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "krb5: kadmind doubly frees partial deserialization results (MITKRB5-SA-2015-001)", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-9421.json", "version": "3", "product_status": {"fixed": 151, "known_affected": 1, "known_not_affected": 2}, "imported": 1785880900.0, "vulnerability_id": "CVE-2014-9421", "vulnerability_url": "/vuln/CVE-2014-9421"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:01:36+00:00", "cve": "CVE-2014-0002", "id": "CVE-2014-0002", "initial_release_date": "2014-02-28T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Camel: XML eXternal Entity (XXE) flaw in XSLT component", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-0002.json", "version": "3", "product_status": {"fixed": 8, "known_affected": 2}, "imported": 1785880896.0, "vulnerability_id": "CVE-2014-0002", "vulnerability_url": "/vuln/CVE-2014-0002"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:01:35+00:00", "cve": "CVE-2014-7810", "id": "CVE-2014-7810", "initial_release_date": "2014-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Tomcat/JbossWeb: security manager bypass via EL expressions", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-7810.json", "version": "3", "product_status": {"fixed": 223, "known_affected": 5, "known_not_affected": 4, "under_investigation": 3}, "imported": 1785880895.0, "vulnerability_id": "CVE-2014-7810", "vulnerability_url": "/vuln/CVE-2014-7810"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:01:32+00:00", "cve": "CVE-2014-0225", "id": "CVE-2014-0225", "initial_release_date": "2014-05-28T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "Framework: Information disclosure via SSRF", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-0225.json", "version": "3", "product_status": {"fixed": 2, "known_affected": 6, "known_not_affected": 3}, "imported": 1785880892.0, "vulnerability_id": "CVE-2014-0225", "vulnerability_url": "/vuln/CVE-2014-0225"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:01:27+00:00", "cve": "CVE-2014-8176", "id": "CVE-2014-8176", "initial_release_date": "2014-01-01T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "OpenSSL: Invalid free in DTLS", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-8176.json", "version": "3", "product_status": {"fixed": 153, "known_affected": 7, "known_not_affected": 5}, "imported": 1785880887.0, "vulnerability_id": "CVE-2014-8176", "vulnerability_url": "/vuln/CVE-2014-8176"}, {"meta_source": "redhat_vex", "aggregate_severity": "Moderate", "current_release_date": "2026-08-04T22:01:25+00:00", "cve": "CVE-2014-3523", "id": "CVE-2014-3523", "initial_release_date": "2014-07-15T00:00:00+00:00", "source": "Red Hat CSAF VEX", "status": "final", "title": "httpd: WinNT MPM denial of service", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2014/cve-2014-3523.json", "version": "3", "product_status": {"fixed": 1, "known_not_affected": 39}, "imported": 1785880885.0, "vulnerability_id": "CVE-2014-3523", "vulnerability_url": "/vuln/CVE-2014-3523"}]}