Apache Apache HTTP Server
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1927 | 2.4.0 to 2.4.41 | In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by en | MEDIUM 6.1 | 57 % | ||
| CVE-2020-1934 | 2.4.0 to 2.4.41 | In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server. | MEDIUM 5.3 | 52 % | ||
| CVE-2019-0211 | 2.4.17 to 2.4.38 | In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or | HIGH 7.8 | 65 % | KEV | |
| CVE-2019-0217 | 2.4.0 to 2.4.38 | In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user | HIGH 7.5 | 17 % | ||
| CVE-2019-0215 | 2.4.37 ; 2.4.38 | In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 | HIGH 7.5 | 11 % |