Known vulnerabilities in Apache HTTP Server 2.4.0.0 - page 4

Version: 2.4.0.0
Software CPE: cpe:2.3:a:apache_foundation:apache_http_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 106
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Apache HTTP Server version 2.4.0.0 Apache HTTP Server 2.4.0.0 is affected by 106 vulnerabilities: 2 critical, 12 high, 68 medium, 24 low Critical High Medium Low

Vulnerabilities (106)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436
CWE-113 Medium
No
No
2.4.55 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760
CWE-444 Medium
No
No
2.4.55 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71241 - Memory corruption
CVE-2006-20001
CWE-119 Medium
No
No
2.4.55 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more
#VU64089 - Improper Authentication
CVE-2022-31813
CWE-287 Medium
No
No
2.4.54 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64088 - Out-of-bounds read
CVE-2022-30556
CWE-125 Medium
No
No
2.4.54 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 31 more
#VU64085 - Improper input validation
CVE-2022-29404
CWE-20 Medium
No
No
2.4.54 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 30 more
#VU64083 - Out-of-bounds read
CVE-2022-28615
CWE-125 Low
No
No
2.4.54 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more
#VU64081 - Out-of-bounds read
CVE-2022-28614
CWE-125 Low
No
No
2.4.54 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 36 more
#VU64080 - Out-of-bounds read
CVE-2022-28330
CWE-125 Medium
No
No
2.4.54 08.06.2022 SB2022060817
SB2022060901
SB2022070730
and 11 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377
CWE-444 Medium
Public exploit available
No
2.4.54 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU61287 - Improper input validation
CVE-2022-22719
CWE-20 Medium
No
No
2.4.53 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 32 more
#VU61286 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-22720
CWE-444 Medium
No
No
2.4.53 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 56 more
#VU61285 - Integer overflow
CVE-2022-22721
CWE-190 High
No
No
2.4.53 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 39 more
#VU61284 - Out-of-bounds write
CVE-2022-23943
CWE-787 High
No
No
2.4.53 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 34 more
#VU59056 - Memory corruption
CVE-2021-44790
CWE-119 Critical
Public exploit available
No
2.4.52 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU56681 - NULL Pointer Dereference
CVE-2021-34798
CWE-476 Medium
No
No
2.4.49 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56679 - Memory corruption
CVE-2021-39275
CWE-119 Medium
No
No
2.4.49 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 44 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438
CWE-918 High
Public exploit available
Exploited
2.4.49 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU53774 - Improper input validation
CVE-2021-30641
CWE-20 Medium
No
No
2.4.47 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 20 more
#VU53773 - NULL Pointer Dereference
CVE-2021-31618
CWE-476 Medium
No
No
2.4.48 03.06.2021 SB2021060320
SB2021060321
SB2021060713
and 12 more


Showing elements 61 - 80 out of 106