VEX records
Browse vendor VEX statements available in this Vulnerability-Lookup instance and pivot to the related vulnerability.
290392 VEX records
API response| Vulnerability | Source | Title | Product status | Imported | Links |
|---|---|---|---|---|---|
| CVE-2012-3451 | redhat_vex | apache-cxf: SOAPAction spoofing on document literal web services | fixed: 1026 known affected: 2 known not affected: 4 | 2026-08-04T22:06:05+00:00 | Vulnerability · Source |
| CVE-2013-1753 | redhat_vex | python: XMLRPC library unrestricted decompression of HTTP responses using gzip enconding | fixed: 220 known affected: 16 known not affected: 24 | 2026-08-04T22:06:03+00:00 | Vulnerability · Source |
| CVE-2011-5062 | redhat_vex | tomcat: Multiple weaknesses in HTTP DIGEST authentication | fixed: 197 known not affected: 12 | 2026-08-04T22:06:02+00:00 | Vulnerability · Source |
| CVE-2012-0104 | redhat_vex | GlassFish: Unspecified vulnerability allows remote attackers to affect availability via unknown vectors related to Web Container | under investigation: 1 | 2026-08-04T22:06:01+00:00 | Vulnerability · Source |
| CVE-2012-4929 | redhat_vex | SSL/TLS CRIME attack against HTTPS | fixed: 107 known affected: 9 known not affected: 13 | 2026-08-04T22:05:56+00:00 | Vulnerability · Source |
| CVE-2013-0315 | redhat_vex | Portal: XML eXternal Entity (XXE) flaw in site import | fixed: 1 known affected: 1 | 2026-08-04T22:05:53+00:00 | Vulnerability · Source |
| CVE-2012-1007 | redhat_vex | struts: multiple XSS flaws | under investigation: 1 | 2026-08-04T22:05:51+00:00 | Vulnerability · Source |
| CVE-2012-1094 | redhat_vex | mod_cluster registers and exposes the root context of a JBoss AS 7 server by default, despite ROOT being in the excluded-contexts list | known not affected: 1 | 2026-08-04T22:05:48+00:00 | Vulnerability · Source |
| CVE-2013-4517 | redhat_vex | Java: Java XML Signature DoS Attack | fixed: 294 known affected: 7 known not affected: 5 | 2026-08-04T22:05:42+00:00 | Vulnerability · Source |
| CVE-2012-6708 | redhat_vex | js-jquery: XSS via improper selector detection | known affected: 198 known not affected: 62 | 2026-08-04T22:05:39+00:00 | Vulnerability · Source |
| CVE-2012-0213 | redhat_vex | jakarta: JVM destabilization due to memory exhaustion when processing CDF/CFBF files | fixed: 1 known affected: 1 known not affected: 1 | 2026-08-04T22:05:38+00:00 | Vulnerability · Source |
| CVE-2012-5887 | redhat_vex | tomcat: three DIGEST authentication implementation issues | fixed: 176 known affected: 4 known not affected: 14 | 2026-08-04T22:05:37+00:00 | Vulnerability · Source |
| CVE-2012-5784 | redhat_vex | axis: missing connection hostname check against X.509 certificate name | fixed: 46 known affected: 1 | 2026-08-04T22:05:33+00:00 | Vulnerability · Source |
| CVE-2012-3370 | redhat_vex | JBoss: SecurityAssociation.getCredential() will return the previous credential if no security context is provided | fixed: 883 known affected: 3 | 2026-08-04T22:05:32+00:00 | Vulnerability · Source |
| CVE-2012-1006 | redhat_vex | struts2: multiple XSS flaws | under investigation: 1 | 2026-08-04T22:05:29+00:00 | Vulnerability · Source |
| CVE-2012-3532 | redhat_vex | Portal: Cross Site Request Forgery | fixed: 1 known affected: 1 | 2026-08-04T22:05:27+00:00 | Vulnerability · Source |
| CVE-2013-4424 | redhat_vex | GateIn: XSS due to improper url escaping | fixed: 1 known affected: 1 | 2026-08-04T22:05:24+00:00 | Vulnerability · Source |
| CVE-2011-5064 | redhat_vex | tomcat: Multiple weaknesses in HTTP DIGEST authentication | fixed: 197 known not affected: 12 | 2026-08-04T22:05:20+00:00 | Vulnerability · Source |
| CVE-2012-1167 | redhat_vex | JBoss: authentication bypass when running under JACC with ignoreBaseDecision on JBossWebRealm | fixed: 45 known affected: 3 known not affected: 12 | 2026-08-04T22:05:16+00:00 | Vulnerability · Source |
| CVE-2013-4452 | redhat_vex | ON: World readable configuration files expose sensitive data | fixed: 1 known affected: 1 | 2026-08-04T22:05:14+00:00 | Vulnerability · Source |
| CVE-2013-2067 | redhat_vex | tomcat: Session fixation in form authenticator | fixed: 922 known affected: 3 known not affected: 3 | 2026-08-04T22:05:13+00:00 | Vulnerability · Source |
| CVE-2012-0081 | redhat_vex | GlassFish: Unspecified vulnerability allows local users to affect confidentiality, integrity and availability via unknown vectors | under investigation: 1 | 2026-08-04T22:05:10+00:00 | Vulnerability · Source |
| CVE-2012-0881 | redhat_vex | xml: xerces-j2 hash table collisions CPU usage DoS (oCERT-2011-003) | known affected: 10 | 2026-08-04T22:05:10+00:00 | Vulnerability · Source |
| CVE-2013-4322 | redhat_vex | tomcat: incomplete fix for CVE-2012-3544 | fixed: 137 known affected: 3 known not affected: 9 | 2026-08-04T22:05:07+00:00 | Vulnerability · Source |
| CVE-2013-2160 | redhat_vex | apache-cxf: Multiple denial of service flaws in the StAX parser | fixed: 3 known not affected: 1 | 2026-08-04T22:05:00+00:00 | Vulnerability · Source |
| CVE-2012-4431 | redhat_vex | Tomcat/JBoss Web - Bypass of CSRF prevention filter | fixed: 55 known affected: 2 known not affected: 15 | 2026-08-04T22:04:57+00:00 | Vulnerability · Source |
| CVE-2012-3544 | redhat_vex | tomcat: Limited DoS in chunked transfer encoding input filter | fixed: 133 known affected: 1 known not affected: 14 | 2026-08-04T22:04:53+00:00 | Vulnerability · Source |
| CVE-2013-4122 | redhat_vex | cyrus-sasl: NULL pointer dereference (DoS) when glibc v.2.17 or FIPS-140 enabled Linux system used | known not affected: 26 | 2026-08-04T22:04:51+00:00 | Vulnerability · Source |
| CVE-2012-5531 | redhat_vex | Portal: Reflected Cross-Site Scripting (XSS) | fixed: 1 known affected: 1 | 2026-08-04T22:04:49+00:00 | Vulnerability · Source |
| CVE-2011-5245 | redhat_vex | RESTEasy: XML eXternal Entity (XXE) flaw | fixed: 53 known affected: 4 known not affected: 10 | 2026-08-04T22:04:49+00:00 | Vulnerability · Source |
| CVE-2013-4352 | redhat_vex | httpd: mod_cache NULL pointer dereference crash | fixed: 110 known affected: 1 known not affected: 20 | 2026-08-04T22:04:42+00:00 | Vulnerability · Source |
| CVE-2011-5063 | redhat_vex | tomcat: Multiple weaknesses in HTTP DIGEST authentication | fixed: 197 known not affected: 12 | 2026-08-04T22:04:38+00:00 | Vulnerability · Source |
| CVE-2012-5886 | redhat_vex | tomcat: three DIGEST authentication implementation issues | fixed: 176 known affected: 4 known not affected: 14 | 2026-08-04T22:04:30+00:00 | Vulnerability · Source |
| CVE-2013-4152 | redhat_vex | Framework: XML External Entity (XXE) injection flaw | fixed: 13 | 2026-08-04T22:03:44+00:00 | Vulnerability · Source |
| CVE-2012-5885 | redhat_vex | tomcat: three DIGEST authentication implementation issues | fixed: 176 known affected: 4 known not affected: 14 | 2026-08-04T22:03:39+00:00 | Vulnerability · Source |
| CVE-2013-4286 | redhat_vex | tomcat: multiple content-length header poisoning flaws | fixed: 461 known affected: 5 | 2026-08-04T22:03:38+00:00 | Vulnerability · Source |
| CVE-2013-4210 | redhat_vex | Remoting: DoS by file descriptor exhaustion | fixed: 17 known affected: 5 known not affected: 5 | 2026-08-04T22:03:34+00:00 | Vulnerability · Source |
| CVE-2012-2733 | redhat_vex | tomcat: HTTP NIO connector OOM DoS via a request with large headers | fixed: 23 known not affected: 17 | 2026-08-04T22:03:20+00:00 | Vulnerability · Source |
| CVE-2012-5783 | redhat_vex | jakarta-commons-httpclient: missing connection hostname check against X.509 certificate name | fixed: 111 known affected: 8 known not affected: 5 | 2026-08-04T22:03:15+00:00 | Vulnerability · Source |
| CVE-2012-4534 | redhat_vex | Tomcat - Denial Of Service when using NIO+SSL+sendfile | fixed: 65 known not affected: 6 | 2026-08-04T22:03:08+00:00 | Vulnerability · Source |
| CVE-2012-0818 | redhat_vex | RESTEasy: XML eXternal Entity (XXE) flaw | fixed: 86 known affected: 3 known not affected: 10 | 2026-08-04T22:03:07+00:00 | Vulnerability · Source |
| CVE-2013-1508 | redhat_vex | GlassFish: Unspecified vulnerability allows remote attackers to affect integrity via vectors related to the REST interface | under investigation: 1 | 2026-08-04T22:03:03+00:00 | Vulnerability · Source |
| CVE-2013-1752 | redhat_vex | python: multiple unbound readline() DoS flaws in python stdlib | fixed: 305 known affected: 27 known not affected: 9 | 2026-08-04T22:03:00+00:00 | Vulnerability · Source |
| CVE-2012-0022 | redhat_vex | tomcat: large number of parameters DoS | fixed: 228 known not affected: 12 | 2026-08-04T22:02:52+00:00 | Vulnerability · Source |
| CVE-2014-0118 | redhat_vex | httpd: mod_deflate denial of service | fixed: 1170 known affected: 1 known not affected: 1 under investigation: 1 | 2026-08-04T22:02:48+00:00 | Vulnerability · Source |
| CVE-2014-7853 | redhat_vex | Subsystem: Information disclosure via incorrect sensitivity classification of attribute | fixed: 548 known affected: 2 known not affected: 1 | 2026-08-04T22:02:47+00:00 | Vulnerability · Source |
| CVE-2014-5352 | redhat_vex | krb5: gss_process_context_token() incorrectly frees context (MITKRB5-SA-2015-001) | fixed: 151 known affected: 1 known not affected: 2 | 2026-08-04T22:02:43+00:00 | Vulnerability · Source |
| CVE-2014-3569 | redhat_vex | openssl: denial of service in ssl23_get_client_hello function | known not affected: 16 | 2026-08-04T22:02:41+00:00 | Vulnerability · Source |
| CVE-2014-0033 | redhat_vex | tomcat: session fixation still possible with disableURLRewriting enabled | fixed: 23 known affected: 1 known not affected: 34 | 2026-08-04T22:02:39+00:00 | Vulnerability · Source |
| CVE-2014-3512 | redhat_vex | openssl: SRP buffer overrun | known not affected: 26 | 2026-08-04T22:02:36+00:00 | Vulnerability · Source |