Apache · product
Apache HTTP Server
156 CVEs · 5 exploited
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
- exploited in the wild
- 5
- check available
- 8
- likely to be exploited
- 61
Every one of the 156 is a mark on the map. Named now: 1 to 26, most at risk first.
- Apache <= 2.4.48 Mod_Proxy - Server-Side Request Forgery
- Apache 2.4.49 - Path Traversal and Remote Code Execution
- Apache 2.4.49/2.4.50 - Path Traversal and Remote Code Execution
- Sonicwall - Pre-Authentication Arbitrary File Read
- In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by…
- Apache HTTP Server - Remote Code Execution
- Apache httpd <=2.4.29 - Arbitrary File Upload
- Apache HTTP Server <=2.4.39 - HTML Injection/Partial Cross-Site Scripting
- Apache HTTP server v2.4.0 to v2.4.39 - Open Redirect
- Apache HTTPd Windows UNC - Server-Side Request Forgery
- Apache HTTP Server - NULL Pointer Dereference
- Apache HTTP Server - ACL Bypass
- Apache mod_userdir CRLF injection
- Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier
- Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's .htaccess file, or if httpd.conf has certain misconfigur…
- mod_sed denial of service
- Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to…
- Apache HTTP Server: HTTP/2 DoS by memory exhaustion on endless continuation frames
- Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy
- Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier
- The mod_http2 module in the Apache HTTP Server 2.4.17 through 2.4.23, when the Protocols configuration includes h2 or h2c, does not restrict request-header length, which allows re…
- mod_lua Use of uninitialized value of in r:parsebody
- A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2.4.30 due to an out of bound read while preparing data to be cached in shared m…
- Apache HTTP Server: DoS in HTTP/2 with initial windows size 0
- Apache HTTP Server mod_session response handling heap overflow
- mod_session NULL pointer dereference
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.