CVE-2007-6388
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2...
4.3 MediumFix available
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploit likelihood
75.9%Up 42.1 points since Feb 4, 2022
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
CVE-2007-6388- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
CVE-2007-6388- Updated
- 2026-11-02
EUVDEUVD-2007-6354 No score
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
EUVD-2007-6354- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-www7-pq67-9w24 No score
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2...
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
GHSA-www7-pq67-9w24- Weakness
- CWE-79
- Updated
- 2026-11-02
OSVBELL-CVE-2007-6388
CVE-2007-6388 does not affect BellSoft software
- Record
BELL-CVE-2007-6388- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
OSV No score
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
CVE-2007-6388- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6388 No score
Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
- Record
DEBIAN-CVE-2007-6388- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10623-1 No score
apache2-2.4.49-1.1 on GA media
These are all security issues fixed in the apache2-2.4.49-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10623-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
apache2Debian:12 |
before 2.2.8-1 | 2.2.8-1 |
apache2Debian:13 |
before 2.2.8-1 | 2.2.8-1 |
apache2Debian:14 |
before 2.2.8-1 | 2.2.8-1 |
apacheRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-develRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-manualRed Hat:enterprise_linux:2.1::as From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apacheRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-manualRed Hat:enterprise_linux:2.1::aw From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apacheRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
Show 152 moreShow less
| Package | Affected | Fixed |
|---|---|---|
apache-develRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-manualRed Hat:enterprise_linux:2.1::es From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apacheRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
apache-manualRed Hat:enterprise_linux:2.1::ws From an advisory covering 4 CVEs |
before 0:1.3.27-14.ent | 0:1.3.27-14.ent |
httpdRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-develRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
mod_sslRed Hat:enterprise_linux:3::as From an advisory covering 5 CVEs |
before 1:2.0.46-70.ent | 1:2.0.46-70.ent |
httpdRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-develRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
mod_sslRed Hat:enterprise_linux:3::desktop From an advisory covering 5 CVEs |
before 1:2.0.46-70.ent | 1:2.0.46-70.ent |
httpdRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-develRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
mod_sslRed Hat:enterprise_linux:3::es From an advisory covering 5 CVEs |
before 1:2.0.46-70.ent | 1:2.0.46-70.ent |
httpdRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
httpd-develRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 0:2.0.46-70.ent | 0:2.0.46-70.ent |
mod_sslRed Hat:enterprise_linux:3::ws From an advisory covering 5 CVEs |
before 1:2.0.46-70.ent | 1:2.0.46-70.ent |
httpdRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
mod_sslRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 1:2.0.52-38.ent.2 | 1:2.0.52-38.ent.2 |
httpdRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
mod_sslRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 1:2.0.52-38.ent.2 | 1:2.0.52-38.ent.2 |
httpdRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
mod_sslRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 1:2.0.52-38.ent.2 | 1:2.0.52-38.ent.2 |
httpdRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-manualRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
httpd-suexecRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.0.52-38.ent.2 | 0:2.0.52-38.ent.2 |
mod_sslRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 1:2.0.52-38.ent.2 | 1:2.0.52-38.ent.2 |
httpdRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:2.0.59-1.el4s1.10 | 0:2.0.59-1.el4s1.10 |
httpd-debuginfoRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:2.0.59-1.el4s1.10 | 0:2.0.59-1.el4s1.10 |
httpd-develRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:2.0.59-1.el4s1.10 | 0:2.0.59-1.el4s1.10 |
httpd-manualRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 0:2.0.59-1.el4s1.10 | 0:2.0.59-1.el4s1.10 |
mod_sslRed Hat:rhel_application_stack:1 From an advisory covering 3 CVEs |
before 1:2.0.59-1.el4s1.10 | 1:2.0.59-1.el4s1.10 |
httpdRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-manualRed Hat:enterprise_linux:5::client_workstation From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpdRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
mod_sslRed Hat:enterprise_linux:5::client From an advisory covering 6 CVEs |
before 1:2.2.3-11.el5_1.3 | 1:2.2.3-11.el5_1.3 |
httpdRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-develRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
httpd-manualRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 0:2.2.3-11.el5_1.3 | 0:2.2.3-11.el5_1.3 |
mod_sslRed Hat:enterprise_linux:5::server From an advisory covering 6 CVEs |
before 1:2.2.3-11.el5_1.3 | 1:2.2.3-11.el5_1.3 |
httpdRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs |
before 0:2.2.4-9.el5s2 | 0:2.2.4-9.el5s2 |
httpd-debuginfoRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs |
before 0:2.2.4-9.el5s2 | 0:2.2.4-9.el5s2 |
httpd-develRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs |
before 0:2.2.4-9.el5s2 | 0:2.2.4-9.el5s2 |
httpd-manualRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs |
before 0:2.2.4-9.el5s2 | 0:2.2.4-9.el5s2 |
mod_sslRed Hat:rhel_application_stack:2 From an advisory covering 5 CVEs |
before 1:2.2.4-9.el5s2 | 1:2.2.4-9.el5s2 |
jabberdRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:5.0:el4 From an advisory covering 35 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_proxy:5.0::el4 From an advisory covering 6 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
rhn-apacheRed Hat:network_proxy:5.0::el4 From an advisory covering 6 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modperlRed Hat:network_proxy:5.0::el4 From an advisory covering 6 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
jabberdRed Hat:network_proxy:4.2::el3 From an advisory covering 12 CVEs |
before 0:2.0s10-3.37.rhn | 0:2.0s10-3.37.rhn |
rhn-apacheRed Hat:network_proxy:4.2::el3 From an advisory covering 12 CVEs |
before 0:1.3.27-36.rhn.rhel3 | 0:1.3.27-36.rhn.rhel3 |
rhn-modperlRed Hat:network_proxy:4.2::el3 From an advisory covering 12 CVEs |
before 0:1.29-16.rhel3 | 0:1.29-16.rhel3 |
jabberdRed Hat:network_proxy:4.2::el4 From an advisory covering 12 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
rhn-apacheRed Hat:network_proxy:4.2::el4 From an advisory covering 12 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modperlRed Hat:network_proxy:4.2::el4 From an advisory covering 12 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
jabberdRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.0s10-3.37.rhn | 0:2.0s10-3.37.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el3 | 0:1.4.2.10-1jpp.2.el3 |
jfreechartRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.1.30-9.RHEL3.8 | 0:2.1.30-9.RHEL3.8 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.24-1.el3 | 0:2.24-1.el3 |
rhn-apacheRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel3 | 0:1.3.27-36.rhn.rhel3 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel3 | 0:1.2.23-2rhn.rhel3 |
rhn-modperlRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel3 | 0:1.29-16.rhel3 |
rhn-modsslRed Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel3 | 0:2.8.12-8.rhn.10.rhel3 |
tomcat5Red Hat:network_satellite:4.2::el3 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
jabberdRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.0s10-3.38.rhn | 0:2.0s10-3.38.rhn |
java-1.4.2-ibmRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
java-1.4.2-ibm-develRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.4.2.10-1jpp.2.el4 | 0:1.4.2.10-1jpp.2.el4 |
jfreechartRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:0.9.20-3.rhn | 0:0.9.20-3.rhn |
openmotif21Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
openmotif21-debuginfoRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.1.30-11.RHEL4.6 | 0:2.1.30-11.RHEL4.6 |
perl-Crypt-CBCRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.24-1.el4 | 0:2.24-1.el4 |
rhn-apacheRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.3.27-36.rhn.rhel4 | 0:1.3.27-36.rhn.rhel4 |
rhn-modjk-ap13Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.2.23-2rhn.rhel4 | 0:1.2.23-2rhn.rhel4 |
rhn-modperlRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:1.29-16.rhel4 | 0:1.29-16.rhel4 |
rhn-modsslRed Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:2.8.12-8.rhn.10.rhel4 | 0:2.8.12-8.rhn.10.rhel4 |
tomcat5Red Hat:network_satellite:4.2::el4 From an advisory covering 37 CVEs |
before 0:5.0.30-0jpp_10rh | 0:5.0.30-0jpp_10rh |
antRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.6.5-1jpp_1rh | 0:1.6.5-1jpp_1rh |
avalon-logkitRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2-2jpp_4rh | 0:1.2-2jpp_4rh |
axisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.1-1jpp_3rh | 0:1.2.1-1jpp_3rh |
classpathx-jafRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-2jpp_6rh | 0:1.0-2jpp_6rh |
classpathx-mailRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.1.1-2jpp_8rh | 0:1.1.1-2jpp_8rh |
geronimo-ejb-2.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-1.4-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-connector-1.5-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-deployment-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-j2ee-management-1.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jms-1.1-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-jta-1.0.1B-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
geronimo-specs-javadocRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.0-0.M4.1jpp_10rh | 0:1.0-0.M4.1jpp_10rh |
jakarta-commons-modelerRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.0-3jpp_2rh | 0:2.0-3jpp_2rh |
log4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.2.12-1jpp_1rh | 0:1.2.12-1jpp_1rh |
mx4jRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 1:3.0.1-1jpp_4rh | 1:3.0.1-1jpp_4rh |
pcsc-liteRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-debuginfoRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-docRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
pcsc-lite-libsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.3-3.el4 | 0:1.3.3-3.el4 |
rhpki-caRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-20.el4 | 0:7.3.0-20.el4 |
rhpki-java-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-10.el4 | 0:7.3.0-10.el4 |
rhpki-kraRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-14.el4 | 0:7.3.0-14.el4 |
rhpki-manageRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-19.el4 | 0:7.3.0-19.el4 |
rhpki-native-toolsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-6.el4 | 0:7.3.0-6.el4 |
rhpki-ocspRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
rhpki-tksRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:7.3.0-13.el4 | 0:7.3.0-13.el4 |
tomcat5Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-common-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jasperRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-jsp-2.0-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-server-libRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
tomcat5-servlet-2.4-apiRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:5.5.23-0jpp_4rh.16 | 0:5.5.23-0jpp_4rh.16 |
xerces-j2Red Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:2.7.1-1jpp_1rh | 0:2.7.1-1jpp_1rh |
xml-commonsRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
xml-commons-apisRed Hat:certificate_system:7.3 From an advisory covering 39 CVEs |
before 0:1.3.02-2jpp_1rh | 0:1.3.02-2jpp_1rh |
apache2openSUSE:Tumbleweed From an advisory covering 27 CVEs |
before 2.4.49-1.1 | 2.4.49-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6388 is a medium vulnerability (CVSS 4.3) in Apache Http Server, published January 8, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 75.9%, the 99th percentile. Fixed in apache2 2.2.8-1.
References
redhat.com/support/errata/RHSA-2008-0005.html
vupen.com/english/advisories/2008/0554
secunia.com/advisories/28922
securityreason.com/securityalert/3541
Show 194 moreShow less
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.595748
marc.info?l=bugtraq&m=130497311408250&w=2
securityfocus.com/archive/1/494428/100/0/threaded
securitytracker.com/id?1019154
oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10272
fujitsu.com/global/support/software/security/products-f/interstage-200808e.html
sunsolve.sun.com/search/document.do?assetkey=1-26-233623-1
httpd.apache.org/security/vulnerabilities_20.html
us-cert.gov/cas/techalerts/TA08-150A.html
mandriva.com/security/advisories?name=MDVSA-2008:014
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
support.avaya.com/elmodocs2/security/ASA-2008-032.htm
exchange.xforce.ibmcloud.com/vulnerabilities/39472
support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=689039
www-1.ibm.com/support/docview.wss?uid=swg24019245
lists.vmware.com/pipermail/security-announce/2009/000062.html
lists.opensuse.org/opensuse-security-announce/2008-04/msg00004.html
docs.info.apple.com/article.html?artnum=307562
www116.nortel.com/pub/repository/CLARIFY/DOCUMENT/2008/05/023342-01.pdf
ubuntu.com/usn/usn-575-1
lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac%40%3Ccvs.httpd.apache.org%3E
nvd.nist.gov/vuln/detail/CVE-2007-6388
github.com/advisories/GHSA-www7-pq67-9w24
docs.bell-sw.com/security/cves/CVE-2007-6388
security-tracker.debian.org/tracker/CVE-2007-6388
access.redhat.com/errata/RHSA-2008:0004
bugzilla.redhat.com/show_bug.cgi?id=289511
security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0004.json
cve.org/CVERecord?id=CVE-2007-4465
suse.com/security/cve/CVE-2005-3352
This page doesn't list everything
Left out here: 242 references. The JSON record has them.