Flashpoint VulnDB CDF

The web format of this guide reflects the most current release.  Guides for older iterations are available in PDF format.  

Flashpoint VulnDB

The Flashpoint VulnDB feed pulls vulnerabilities & CVEs from Flashpoint's VulnDB. This feed is designed to provide the latest information on vulnerabilities, including details on affected software, severity, and remediation steps.

GET https://vulndb.flashpoint.io/api/v1/vulnerabilities/find_by_date

Sample Response:

{
  "total_entries": 1,
  "current_page": 1,
  "results": [
    {
      "vulndb_id": 3726,
      "title": "BEA WebLogic HTTP TRACE Response XSS",
      "keywords": " ",
      "description": "WebLogic Server and Express contain a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate HTTP TRACE requests upon submission to the server. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.",
      "solution": "Currently, there are no known workarounds or upgrades to correct this issue. \nHowever, Bea has released a patch to address this vulnerability.",
      "vulndb_published_date": "",
      "vulndb_last_modified": "2024-04-01T15:30:33Z",
      "manual_notes": "",
      "t_description": "",
      "solution_date": "",
      "disclosure_date": "2004-01-27T09:17:35Z",
      "discovery_date": "",
      "exploit_publish_date": "",
      "vendor_informed_date": "",
      "vendor_ack_date": "",
      "third_party_solution_date": "",
      "ext_references": [
        {
          "value": "http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_48.00.jsp",
          "type": "Vendor Specific Advisory URL"
        },
        {
          "value": "14959",
          "type": "ISS X-Force ID"
        },
        {
          "value": "9506",
          "type": "Bugtraq ID"
        },
        {
          "value": "2004-2320",
          "type": "CVE ID"
        },
        {
          "value": "http://dev2dev.bea.com/pub/advisory/68",
          "type": "Other Advisory URL"
        },
        {
          "value": "493",
          "type": "SCIP VulDB ID"
        },
        {
          "value": "https://support.f5.com/kb/en-us/solutions/public/15000/900/sol15904.html",
          "type": "Vendor Specific Advisory URL"
        },
        {
          "value": "http://www.collax.com/fileadmin/collax_upload/downloads/downloads_c_server/CBS/Release_Notes_EN/relnotes-cbs-7.0.20.en.html",
          "type": "Vendor Specific Advisory URL"
        }
      ],
      "cvss_metrics": [
        {
          "id": 81524,
          "access_vector": "NETWORK",
          "access_complexity": "MEDIUM",
          "authentication": "NONE",
          "confidentiality_impact": "PARTIAL",
          "integrity_impact": "PARTIAL",
          "availability_impact": "NONE",
          "source": "http://nvd.nist.gov",
          "generated_on": "2005-08-18T08:38:00Z",
          "cve_id": "2004-2320",
          "score": 5.8,
          "calculated_cvss_base_score": 5.8
        }
      ],
      "vendors": [
        {
          "vendor": {
            "id": 1204,
            "name": "BEA Systems, Inc."
          }
        },
        {
          "vendor": {
            "id": 1222,
            "name": "Oracle Corporation"
          }
        }
      ],
      "products": [
        {
          "id": 1936,
          "name": "BEA WebLogic Express",
          "versions": [
            {
              "id": 4338,
              "name": "5.1 Service Pack 13",
              "affected": "true"
            },
            {
              "id": 4339,
              "name": "6.1 SP6",
              "affected": "true"
            },
            {
              "id": 4340,
              "name": "7.0 SP4",
              "affected": "true"
            },
            {
              "id": 4341,
              "name": "8.1 SP2",
              "affected": "true"
            }
          ]
        }
      ],
      "classifications": [
        {
          "id": 2,
          "name": "location_remote",
          "longname": "Remote / Network Access",
          "description": "This vulnerability can be exploited over a wired network (e.g., LAN, WAN, Internet)."
        },
        {
          "id": 12,
          "name": "attack_type_input_manip",
          "longname": "Input Manipulation",
          "description": "A vulnerability that is exploited by sending manipulated and unexpected data to a service or process. This includes all types of overflows, memory corruption, XSS, SQLi, RFI, traversals and more."
        },
        {
          "id": 18,
          "name": "impact_integrity",
          "longname": "Loss of Integrity",
          "description": "Assurance that data is unaltered by unauthorized persons and authorization has not been exceeded.\r\nExamples: XSS, arbitrary command execution, most overflows, most format strings, SQL injection, unauthorized file modification/deletion/creation, remote file inclusion, etc."
        },
        {
          "id": 24,
          "name": "exploit_unknown",
          "longname": "Exploit Unknown",
          "description": "The status of a working exploit is unknown."
        },
        {
          "id": 29,
          "name": "vuln_web_check",
          "longname": "Web Related",
          "description": "A vulnerability in an HTTP(S) related product."
        }
      ],
      "authors": []
    }
  ]
}

ThreatQuotient provides the following default mapping for this feed:

PDF Guides