Known vulnerabilities in Apache HTTP Server 2.4.0.0 - page 3

Version: 2.4.0.0
Software CPE: cpe:2.3:a:apache_foundation:apache_http_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 106
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Apache HTTP Server version 2.4.0.0 Apache HTTP Server 2.4.0.0 is affected by 106 vulnerabilities: 2 critical, 12 high, 68 medium, 24 low Critical High Medium Low

Vulnerabilities (106)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112734 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-42516
CWE-113 Low
No
No
2.4.64 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 37 more
#VU112733 - Server-Side Request Forgery (SSRF)
CVE-2024-43204
CWE-918 Low
No
No
2.4.64 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 29 more
#VU112732 - Server-Side Request Forgery (SSRF)
CVE-2024-43394
CWE-918 Medium
No
No
2.4.64 10.07.2025 SB2025071040
SB2025071710
SB2025072111
and 8 more
#VU112731 - Improper Encoding or Escaping of Output
CVE-2024-47252
CWE-116 High
No
No
2.4.64 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 35 more
#VU112728 - Cryptographic Issues
CVE-2025-49812
CWE-310 Medium
No
No
2.4.64 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 35 more
#VU112727 - Resource Management Errors
CVE-2025-53020
CWE-399 Medium
No
No
2.4.64 10.07.2025 SB2025071040
SB2025071201
SB2025071202
and 20 more
#VU94503 - Server-Side Request Forgery (SSRF)
CVE-2024-40898
CWE-918 High
Public exploit available
No
2.4.62 17.07.2024 SB20240717136
SB2024071896
SB2024081362
and 13 more
#VU93545 - Server-Side Request Forgery (SSRF)
CVE-2024-39573
CWE-918 Medium
No
No
2.4.60 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 46 more
#VU93544 - Improper input validation
CVE-2024-38477
CWE-20 Medium
No
No
2.4.60 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 58 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476
CWE-918 High
No
No
2.4.60 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93542 - Improper input validation
CVE-2024-38475
CWE-20 Critical
Public exploit available
No
2.4.60 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93541 - Improper input validation
CVE-2024-38474
CWE-20 Medium
No
No
2.4.60 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 57 more
#VU93540 - Improper input validation
CVE-2024-38473
CWE-20 Medium
Public exploit available
No
2.4.60 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 47 more
#VU93539 - Server-Side Request Forgery (SSRF)
CVE-2024-38472
CWE-918 Medium
Public exploit available
No
2.4.60 01.07.2024 SB2024070155
SB20240702144
SB2024081362
and 11 more
#VU88153 - Resource exhaustion
CVE-2024-27316
CWE-400 Medium
Public exploit available
No
2.4.59 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795
CWE-113 Medium
No
No
2.4.59 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 38 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709
CWE-113 Medium
No
No
2.4.59 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 65 more
#VU82248 - Out-of-bounds read
CVE-2023-31122
CWE-125 Medium
No
No
2.4.58 19.10.2023 SB2023101942
SB2023101960
SB2023102101
and 43 more
#VU82245 - Resource Management Errors
CVE-2023-45802
CWE-399 Medium
No
No
2.4.58 19.10.2023 SB2023101942
SB2023101960
SB2023102104
and 37 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690
CWE-113 Medium
Public exploit available
No
2.4.56 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more


Showing elements 41 - 60 out of 106