{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.1.3"}],"component":"org.apache.xmlrpc:xmlrpc","cve_ids":["CVE-2016-5002"],"ecosystem":"Maven","epss":0.08275,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-wp35-6jqv-r33m","id":"tcs_01M5N9GVPXC0QTA86WZY0VG6G2","modified_at":"2024-02-16T08:03:03.693238Z","published_at":"2022-05-14T01:53:10Z","references":["https://osv.dev/vulnerability/GHSA-wp35-6jqv-r33m","https://nvd.nist.gov/vuln/detail/CVE-2016-5002","https://access.redhat.com/errata/RHSA-2018:3768","https://exchange.xforce.ibmcloud.com/vulnerabilities/115042","https://security.gentoo.org/glsa/202401-26","https://web.archive.org/web/20210123151805/http://www.securityfocus.com/bid/91736","https://web.archive.org/web/20211021044107/http://www.securitytracker.com/id/1036294","https://web.archive.org/web/20230520164025/https://0ang3el.blogspot.com/2016/07/beware-of-ws-xmlrpc-library-in-your.html","http://www.openwall.com/lists/oss-security/2016/07/12/5","http://www.securityfocus.com/bid/91736","http://www.securitytracker.com/id/1036294"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"GHSA-wp35-6jqv-r33m","url":"https://osv.dev/vulnerability/GHSA-wp35-6jqv-r33m"}],"summary":"Apache XML-RPC XXE Vulnerability"}