Known vulnerabilities in modsecurity-apache (Debian package)

Vendor: Debian
Software CPE: cpe:2.3:o:debian:modsecurity-apache_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting modsecurity-apache (Debian package) modsecurity-apache (Debian package) is affected by 3 known vulnerabilities: 3 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU110075 - Resource exhaustion
CVE-2025-48866
CWE-400 Medium
No
No
2.9.7-1+deb12u1 02.06.2025 SB2025060248
SB2025060505
SB2025060901
and 9 more
#VU109658 - Resource exhaustion
CVE-2025-47947
CWE-400 Medium
No
No
2.9.7-1+deb12u1 22.05.2025 SB2025052240
SB2025052973
SB2025052974
and 20 more
#VU59052 - Uncontrolled Recursion
CVE-2021-42717
CWE-674 Medium
No
No
2.9.3-1+deb10u1, 2.9.3-3, 2.9.3-3+deb11u1 19.12.2021 SB2021121901
SB2021121902
SB2023011845
and 5 more