Apache Apache HTTP Server
5 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2020-1927 | 2.4.0 to 2.4.41 | In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by en | MEDIUM 6.1 | 57 % | ||
| CVE-2020-1934 | 2.4.0 to 2.4.41 | In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server. | MEDIUM 5.3 | 52 % | ||
| CVE-2019-0211 | 2.4.17 to 2.4.38 | In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or | HIGH 7.8 | 65 % | KEV | |
| CVE-2019-0217 | 2.4.0 to 2.4.38 | In Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when running in a threaded server could allow a user | HIGH 7.5 | 17 % | ||
| CVE-2019-0215 | 2.4.37 ; 2.4.38 | In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38, a bug in mod_ssl when using per-location client certificate verification with TLSv1.3 | HIGH 7.5 | 11 % |