[{"CVE":"CVE-2019-10782","severity":"moderate","public_date":"2020-01-27T00:00:00Z","advisories":[],"bugzilla":"1796858","bugzilla_description":"CVE-2019-10782 checkstyle: XML External Entity Injection due to an incomplete fix for CVE-2019-9658","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-10782.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cvss3_score":"5.3"},{"CVE":"CVE-2017-14955","severity":"moderate","public_date":"2017-09-25T00:00:00Z","advisories":[],"bugzilla":"1497971","bugzilla_description":"CVE-2017-14955 check-mk: Mishandles certain errors within the failed-login save feature because of a race condition","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-14955.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2017-11507","severity":"moderate","public_date":"2017-07-06T00:00:00Z","advisories":[],"bugzilla":"1524949","bugzilla_description":"CVE-2017-11507 check-mk: Stored XSS vulnerability using the internal server error handler","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-11507.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2014-5338","severity":"important","public_date":"2014-05-05T00:00:00Z","advisories":["RHSA-2015:1495"],"bugzilla":"1132337","bugzilla_description":"CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["check-mk-0:1.2.6p1-3.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5338.json"},{"CVE":"CVE-2014-5339","severity":"important","public_date":"2014-05-05T00:00:00Z","advisories":["RHSA-2015:1495"],"bugzilla":"1132337","bugzilla_description":"CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["check-mk-0:1.2.6p1-3.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5339.json"},{"CVE":"CVE-2014-5340","severity":"important","public_date":"2014-05-05T00:00:00Z","advisories":["RHSA-2015:1495"],"bugzilla":"1132337","bugzilla_description":"CVE-2014-5338 CVE-2014-5339 CVE-2014-5340 check-mk: multiple flaws fixed in versions 1.2.4p4 and 1.2.5i4","cvss_score":7.5,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["check-mk-0:1.2.6p1-3.el6rhs"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-5340.json"}]