Apache Apache HTTP Server vulnerabilities
5 published CVEs name Apache Apache HTTP Server among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 5
- Last 12 months
- 0
- Critical
- 0
- Known exploited
- 1
Critical 0High 3Medium 2Low 0Not scored 0
CVEs per yearBy the year they were published
- 20193
- 20202
Known exploitedNewest addition to KEV first
- CVE-2019-0211
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including…
Apache · Apache HTTP Server
ExploitedHigh7.8
Newest CVEs
- CVE-2020-1927
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and…
Apache · Apache HTTP Server
Medium6.1 - CVE-2020-1934
In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.
Apache · Apache HTTP Server
Medium5.3 - CVE-2019-0211
In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including…
Apache · Apache HTTP Server
ExploitedHigh7.8 - CVE-2019-0217
In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user with valid…
Apache · Apache HTTP Server
High7.5 - CVE-2019-0215
In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 allowed a client to…
Apache · Apache HTTP Server
High7.5