[{"CVE":"CVE-2017-1000061","severity":"moderate","public_date":"2017-03-30T00:00:00Z","advisories":["RHSA-2017:2492"],"bugzilla":"1437311","bugzilla_description":"CVE-2017-1000061 xmlsec1: xmlsec vulnerable to external entity expansion","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-611","affected_packages":["xmlsec1-0:1.2.20-7.el7_4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-1000061.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L","cvss3_score":"6.5"},{"CVE":"CVE-2011-1425","severity":"moderate","public_date":"2011-03-31T00:00:00Z","advisories":["RHSA-2011:0486"],"bugzilla":"692133","bugzilla_description":"CVE-2011-1425 xmlsec1: arbitrary file creation when verifying signatures","cvss_score":5.1,"cvss_scoring_vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","CWE":null,"affected_packages":["xmlsec1-0:1.2.9-8.1.2","xmlsec1-0:1.2.6-3.2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2011-1425.json"},{"CVE":"CVE-2009-0217","severity":"moderate","public_date":"2009-07-14T00:00:00Z","advisories":["RHSA-2009:1636","RHSA-2009:1649","RHSA-2009:1637","RHSA-2009:1428","RHSA-2009:1694","RHSA-2009:1650","RHSA-2010:0043","RHSA-2009:1201","RHSA-2009:1200"],"bugzilla":"511915","bugzilla_description":"CVE-2009-0217 xmlsec1, mono, xml-security-c, xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass","cvss_score":5.0,"cvss_scoring_vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["xmlsec1-0:1.2.9-8.1.1","java-1.6.0-openjdk-1:1.6.0.0-1.2.b09.el5","java-1.6.0-sun-1:1.6.0.15-1jpp.1.el4","xmlsec1-0:1.2.6-3.1","java-1.6.0-ibm-1:1.6.0.7-1jpp.3.el4"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2009-0217.json"}]