Skip to contentApache Software Foundation Http Server vulnerabilities
- apache http serverApache HTTP Server: HTTP/2 DoS by Memory IncreaseCVE-2025-53020Public exploitFix available7.5 High
- apache http serverApache HTTP Server: mod_ssl TLS upgrade attackCVE-2025-49812Public exploitFix available7.4 High
- apache http serverApache HTTP Server: mod_proxy_http2 denial of serviceCVE-2025-49630Fix available7.5 High
- apache http serverApache HTTP Server: mod_ssl access control bypass with session resumptionCVE-2025-23048Public exploitFix available9.1 Critical
- apache http serverApache HTTP Server: SSRF on Windows due to UNC pathsCVE-2024-43394Fix available7.5 High
- apache http serverApache HTTP Server: mod_ssl error log variable escapingCVE-2024-47252Fix available7.5 High
- apache http serverApache HTTP Server: SSRF with mod_headers setting Content-Type headerCVE-2024-43204Fix available7.5 High
- apache http serverApache HTTP Server: HTTP response splittingCVE-2024-42516Fix available7.5 High
- apache http serverApache HTTP Server: SSRF with mod_rewrite in server/vhost context on WindowsCVE-2024-40898Public exploitFix available7.5 High
- apache http serverApache HTTP Server: source code disclosure with handlers configured via AddTypeCVE-2024-40725Public exploitFix available5.3 Medium
- apache http server, netapp ontap tools +1 moreApache HTTP Server: source code disclosure with handlers configured via AddTypeCVE-2024-39884Fix available6.2 Medium
- apache http server, netapp ontap +1 moreApache HTTP Server: mod_rewrite proxy handler substitutionCVE-2024-39573Fix availableEPSS 35.4%7.5 High
- apache http server, netapp clustered data ontap +1 moreApache HTTP Server: Crash resulting in Denial of Service in mod_proxy via a malicious requestCVE-2024-38477Fix available7.5 High
- apache http server, netapp clustered data ontap +1 moreApache HTTP Server may use exploitable/malicious backend application output to run local handlers via internal redirectCVE-2024-38476Public exploitFix availableEPSS 41.6%9.8 Critical
- apache http server, netapp ontap 9, sonicwall sma 200 firmware +4 more +6 moreApache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.CVE-2024-38475In KEVPublic exploitFix availableEPSS 100.0%9.1 Critical
- apache http server, netapp clustered data ontap +1 moreApache HTTP Server weakness with encoded question marks in backreferencesCVE-2024-38474Fix available9.8 Critical
- apache http server, netapp ontap +1 moreApache HTTP Server proxy encoding problemCVE-2024-38473Public exploitFix availableEPSS 25.9%8.1 High
- apache http server, netapp ontap +1 moreApache HTTP Server on WIndows UNC SSRFCVE-2024-38472Public exploitFix availableEPSS 69.5%7.5 High
- apache http server, netapp ontap +1 moreApache HTTP Server: DoS by Null pointer in websocket over HTTP/2CVE-2024-36387Fix available5.4 Medium
- apache http server, apple macos, broadcom fabric operating system +4 more +6 moreApache HTTP Server: HTTP Response Splitting in multiple modulesCVE-2024-24795Fix available6.3 Medium
- apache http server, apple macos, broadcom fabric operating system +4 more +6 moreApache HTTP Server: HTTP response splittingCVE-2023-38709Public exploitFix available7.3 High
- apache http server, fedoraproject fedora, netapp ontap +2 moreApache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation framesCVE-2024-27316Public exploitFix availableEPSS 88.8%7.5 High
- apache http serverApache HTTP Server: DoS in HTTP/2 with initial windows size 0CVE-2023-43622Public exploitFix availableEPSS 68.8%7.5 High
- apache http server, debian linux, fedoraproject fedora +2 moreApache HTTP Server: mod_macro buffer over-readCVE-2023-31122Fix available7.5 High
- apache http server, debian linux, fedoraproject fedora +2 moreApache HTTP Server: HTTP/2 stream memory not reclaimed right away on RSTCVE-2023-45802Public exploitFix available5.9 Medium
- apache http server, unbit uwsgi, debian linux +2 moreApache HTTP Server: mod_proxy_uwsgi HTTP response splittingCVE-2023-27522Fix available7.5 High
- apache http serverApache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxyCVE-2023-25690Public exploitFix availableEPSS 84.0%9.8 Critical
- apache http serverApache HTTP Server: mod_proxy prior to 2.4.55 allows a backend to trigger HTTP response splittingCVE-2022-37436Fix availableEPSS 52.7%5.3 Medium
- apache http serverApache HTTP Server: mod_proxy_ajp Possible request smugglingCVE-2022-36760Fix available9.0 Critical
- apache http serverApache HTTP Server: mod_dav out of bounds read, or write of zero byteCVE-2006-20001Public exploitFix available7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy X-Forwarded-For dropped by hop-by-hop mechanismCVE-2022-31813Public exploitFix available9.8 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreInformation Disclosure in mod_lua with websocketsCVE-2022-30556Fix available7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_sed denial of serviceCVE-2022-30522Fix availableEPSS 89.9%7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreDenial of service in mod_lua r:parsebodyCVE-2022-29404Fix available7.5 High
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreRead beyond bounds in ap_strcmp_match()CVE-2022-28615Fix available9.1 Critical
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moreread beyond bounds via ap_rwrite()CVE-2022-28614Fix available5.3 Medium
- apache http serverread beyond bounds in mod_isapiCVE-2022-28330Fix available5.3 Medium
- apache http server, fedoraproject fedora, netapp clustered data ontap +2 moremod_proxy_ajp: Possible request smugglingCVE-2022-26377Public exploitFix availableEPSS 21.1%7.5 High
- apache http server, debian linux, fedoraproject fedora +1 more +3 moremod_sed: Read/write beyond boundsCVE-2022-23943Public exploitFix availableEPSS 50.4%9.8 Critical
- apache http server, apple mac os x, macos +4 more +6 morecore: Possible buffer overflow with very large or unlimited LimitXMLRequestBodyCVE-2022-22721Fix availableEPSS 41.9%9.1 Critical
- apache http server, apple mac os x, macos +4 more +6 moreHTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlierCVE-2022-22720Public exploitFix availableEPSS 28.2%9.8 Critical
- apache http server, apple mac os x, macos +3 more +5 moremod_lua Use of uninitialized value of in r:parsebodyCVE-2022-22719Fix availableEPSS 69.8%7.5 High
- apache http server, apple mac os x, macos +8 more +10 morePossible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlierCVE-2021-44224Fix availableEPSS 82.3%8.2 High
- apache http server, apple mac os x, macos +10 more +12 morePossible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlierCVE-2021-44790Public exploitFix availableEPSS 96.8%9.8 Critical
- apache http server, fedoraproject fedora, netapp cloud backup +3 more +5 morePath Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)CVE-2021-42013In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- apache http server, fedoraproject fedora, netapp cloud backup +1 more +3 morePath traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49CVE-2021-41773In KEVPublic exploitFix availableEPSS 100.0%9.8 Critical
- apache http server, fedoraproject fedora, netapp cloud backup +1 more +3 morenull pointer dereference in h2 fuzzingCVE-2021-41524Fix availableEPSS 25.8%7.5 High
- apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 moremod_proxy SSRFCVE-2021-40438In KEVPublic exploitFix availableEPSS 100.0%9.0 Critical
- apache http server, debian linux, fedoraproject fedora +7 more +9 moreap_escape_quotes buffer overflowCVE-2021-39275Fix availableEPSS 39.4%9.8 Critical
- apache http server, broadcom brocade fabric operating system firmware, debian linux +9 more +11 moremod_proxy_uwsgi out of bound readCVE-2021-36160Fix availableEPSS 63.7%7.5 High
- Show moreLoading…