Known vulnerabilities in EasyApache 4 25-3 - page 2

Vendor: cPanel, Inc
Software: EasyApache
Version: 4 25-3
Software CPE: cpe:2.3:a:cpanel:easyapache:*:*:*:*:*:*:*:*
Website: https://www.cpanel.com
Total vulnerabilities: 69
Public exploits: 10
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting EasyApache version 4 25-3 EasyApache 4 25-3 is affected by 69 vulnerabilities: 8 high, 44 medium, 17 low Critical High Medium Low

Vulnerabilities (69)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112734 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-42516		 CWE-113 Low
No
No
 4 25-24 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 34 more
#VU112733 - Server-Side Request Forgery (SSRF)
CVE-2024-43204		 CWE-918 Low
No
No
 4 25-24 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 28 more
#VU112732 - Server-Side Request Forgery (SSRF)
CVE-2024-43394		 CWE-918 Medium
No
No
 4 25-24 10.07.2025 SB2025071040
SB2025071710
SB2025072111
and 8 more
#VU112731 - Improper Encoding or Escaping of Output
CVE-2024-47252		 CWE-116 High
No
No
 4 25-24 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 35 more
#VU112730 - Security Features
CVE-2025-23048		 CWE-254 Medium
Public exploit available
No
 4 25-24 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 30 more
#VU112729 - Resource Management Errors
CVE-2025-49630		 CWE-399 Medium
No
No
 4 25-24 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 27 more
#VU112728 - Cryptographic Issues
CVE-2025-49812		 CWE-310 Medium
No
No
 4 25-24 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 35 more
#VU112727 - Resource Management Errors
CVE-2025-53020		 CWE-399 Medium
No
No
 4 25-24 10.07.2025 SB2025071040
SB2025071201
SB2025071202
and 18 more
#VU112337 - Resource Management Errors
CVE-2025-48367		 CWE-399 Medium
No
No
 4 25-23 07.07.2025 SB2025070725
SB20250716110
SB20250716111
and 31 more
#VU112336 - Out-of-bounds write
CVE-2025-32023		 CWE-787 Medium
Public exploit available
No
 4 25-23 07.07.2025 SB2025070725
SB20250716110
SB20250716111
and 32 more
#VU112190 - Server-Side Request Forgery (SSRF)
CVE-2025-1220		 CWE-918 Medium
No
No
 4 25-22 04.07.2025 SB2025070427
SB2025070433
SB2025070434
and 16 more
#VU112189 - NULL Pointer Dereference
CVE-2025-6491		 CWE-476 Medium
No
No
 4 25-22 04.07.2025 SB2025070427
SB2025070433
SB2025070434
and 18 more
#VU112187 - Error Handling
CVE-2025-1735		 CWE-388 Medium
No
No
 4 25-22 04.07.2025 SB2025070427
SB2025070433
SB2025070434
and 17 more
#VU112103 - Memory corruption
CVE-2025-52891		 CWE-119 Medium
No
No
 4 25-22 02.07.2025 SB2025070255
SB2025071041
SB20250711184
and 5 more
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Public exploit available
No
 4 25-20 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 156 more
#VU111161 - Resource exhaustion
CVE-2025-48988		 CWE-400 Medium
Public exploit available
No
 4 25-20 16.06.2025 SB2025061634
SB2025061927
SB20250620145
and 40 more
#VU111160 - Untrusted Search Path
CVE-2025-49124		 CWE-426 Low
No
No
 4 25-20 16.06.2025 SB2025061634
SB2025061927
SB2025112459
and 4 more
#VU111159 - Improper Protection of Alternate Path
CVE-2025-49125		 CWE-424 Medium
No
No
 4 25-20 16.06.2025 SB2025061634
SB2025061927
SB20250620145
and 35 more
#VU110191 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-5399		 CWE-835 Low
No
No
 4 25-19 04.06.2025 SB2025060430
SB2025060503
SB2025061212
and 10 more
#VU109884 - Improper Certificate Validation
CVE-2025-4947		 CWE-295 Low
No
No
 4 25-18 28.05.2025 SB2025052805
SB2025060505
SB2025072409
and 4 more


Showing elements 21 - 40 out of 69