CWE-644 · Injection and Smuggling
Improper Neutralization of HTTP Headers for Scripting Syntax
61CVEs
SortMost likely exploited
61 CVEs with CWE-644 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2017-6031A Header Injection issue was discovered in Certec EDV GmbH atvise scada prior to Version 3.0. An "improper neutralization of HTTP headers for scripting syntax" issue has been iden…Certec Edv Gmbh · Certec EDV GmbH atvise scada · 2017-05-06 | – | 2.8% | 2017-05-06 |
| CVE-2021-21265October CMS vulnerable to Potential Host Header Poisoning on misconfigured serversoctobercms · october · CVSS 6.8 · 2021-03-10 | 6.8 | 1.7% | 2021-03-10 |
| CVE-2021-41114HTTP Host Header Injection in Request Handling in Typo3TYPO3 · typo3 · CVSS 4.8 · 2021-10-05 | 4.8 | 1.2% | 2021-10-05 |
| CVE-2021-20784HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote attacker to inject an arbitrary script or alter the website…voidtools · Everything · CVSS 6.1 · 2021-07-14 | 6.1 | 1.1% | 2021-07-14 |
| CVE-2020-6982In Honeywell WIN-PAK 4.7.2, Web and prior versions, the header injection vulnerability has been identified, which may allow remote code execution.Honeywell · Honeywell WIN-PAK 4.7.2, Web and prior versions · 2020-03-24 | – | 1.1% | 2020-03-24 |
| CVE-2022-34316IBM CICS TX information disclosureIBM · CICS TX · CVSS 3.7 · 2022-11-14 | 3.7 | 0.9% | 2022-11-14 |
| CVE-2024-1064Improper Neutralization of HTTP Headers for Scripting Syntax in Crafty Controller 4Arcadia Technology, LLC · Crafty Controller · CVSS 7.5 · 2024-02-03 | 7.5 | 0.8% | 2024-02-03 |
| CVE-2023-47143IBM Tivoli Application Dependency Discovery Manager HOST header injectionIBM · Tivoli Application Dependency Discovery Manager · CVSS 10 · 2024-02-02 | 10.0 | 0.8% | 2024-02-02 |
| CVE-2023-32465Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unauthorized admin access…Dell · PowerProtect Cyber Recovery · CVSS 8.8 · 2023-06-14 | 8.8 | 0.7% | 2023-06-14 |
| CVE-2023-36921Header Injection in SAP Solution Manager (Diagnostic Agent)SAP_SE · SAP Solution Manager (Diagnostic Agent) · CVSS 7.2 · 2023-07-11 | 7.2 | 0.7% | 2023-07-11 |
| CVE-2025-64484OAuth2-Proxy vulnerable to header smuggling via underscore, leading to potential privilege escalationoauth2-proxy · oauth2-proxy · CVSS 8.5 · 2025-11-10 | 8.5 | 0.7% | 2025-11-10 |
| CVE-2026-26234JUNG Smart Visu Server - Improper Neutralization of HTTP Headers for Scripting SyntaxALBRECHT JUNG GMBH & CO. KG · JUNG Smart Visu Server · CVSS 8.8 · 2026-02-12 | 8.8 | 0.6% | 2026-02-12 |
| CVE-2025-13434jameschz Hush Framework HTTP Host Header Util.php http headers for scripting syntaxjameschz · Hush Framework · CVSS 5.3 · 2025-11-20 | 5.3 | 0.5% | 2025-11-20 |
| CVE-2024-21499All versions of the package github.com/greenpau/caddy-security are vulnerable to HTTP Header Injection via the X-Forwarded-Proto header due to redirecting to the injected protocol…Greenpau · github.com/greenpau/caddy-security · CVSS 4.3 · 2024-02-17 | 4.3 | 0.5% | 2024-02-17 |
| CVE-2022-45102Dell EMC Data Protection Central, versions 19.1 through 19.7, contains a Host Header Injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulner…Dell · Data Protection Central · CVSS 5.4 · 2023-02-01 | 5.4 | 0.5% | 2023-02-01 |
| CVE-2023-34036Forwarded header exploit with Spring HATEOAS on WebFluxSpring · Spring HATEOAS · CVSS 5.3 · 2023-07-17 | 5.3 | 0.5% | 2023-07-17 |
| CVE-2026-125880Stored XSS via MMS3 patch metadata (admin context)N-able · N-central · CVSS 8.3 · 2026-11-10 | 8.3 | 0.5% | 2026-11-10 |
| CVE-2024-10006Consul L7 Intentions Vulnerable To Headers BypassHashiCorp · Consul · CVSS 8.3 · 2024-10-30 | 8.3 | 0.5% | 2024-10-30 |
| CVE-2026-33805@fastify/reply-from vulnerable to connection header abuse enabling stripping of proxy-added headers@fastify/reply-from · @fastify/reply-from · CVSS 7.4 · 2026-04-15 | 7.4 | 0.5% | 2026-04-15 |
| CVE-2026-26747A Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP Host header in app/Providers/AppServiceProvider.php, combined with the default mi…Monicahq · Monica · CVSS 9.1 · 2026-02-20 | 9.1 | 0.4% | 2026-02-20 |
| CVE-2021-38997IBM API Connect HOST header injectionIBM · API Connect · CVSS 5.4 · 2022-12-01 | 5.4 | 0.4% | 2022-12-01 |
| CVE-2025-64425Coolify has host header injection in forgot passwordcoollabsio · coolify · CVSS 8.5 · 2026-01-05 | 8.5 | 0.4% | 2026-01-05 |
| CVE-2026-72574picocms Pico - Host Header Injection Enables Script Source Hijackingpicocms · Pico · CVSS 6.1 · 2026-08-10 | 6.1 | 0.4% | 2026-08-10 |
| CVE-2025-0154IBM TXSeries for Multiplatforms information disclosureIBM · TXSeries for Multiplatforms · CVSS 5.3 · 2025-04-02 | 5.3 | 0.4% | 2025-04-02 |
| CVE-2025-70948A host header injection vulnerability in the mailer component of @perfood/couch-auth v0.26.0 allows attackers to obtain reset tokens and execute an account takeover via spoofing t…No vendor recorded · CVSS 9.3 · 2026-03-05 | 9.3 | 0.4% | 2026-03-05 |
| CVE-2025-13803MediaCrush Header paths.py http headers for scripting syntaxMediaCrush · CVSS 7.3 · 2025-12-01 | 7.3 | 0.4% | 2025-12-01 |
| CVE-2026-48061Litestar: AllowedHostsMiddleware bypasses host validation via client-controlled X-Forwarded-Host headerlitestar-org · litestar · CVSS 5.9 · 2026-08-03 | 5.9 | 0.4% | 2026-08-03 |
| CVE-2022-22399IBM Aspera Faspex HTTP header injectionIBM · Aspera Faspex · CVSS 5.4 · 2024-03-05 | 5.4 | 0.4% | 2024-03-05 |
| CVE-2024-39736IBM Datacap Navigator HTTP HOST header injectionIBM · Datacap Navigator · CVSS 6.5 · 2024-07-15 | 6.5 | 0.4% | 2024-07-15 |
| CVE-2024-47549Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers. Accessing a crafted URL…Sharp Corporation · Sharp Digital Full-color MFPs and Monochrome MFPs · CVSS 7.4 · 2024-10-25 | 7.4 | 0.4% | 2024-10-25 |
| CVE-2026-66778Multiple vulnerabilities in SAP Business AI Platform (Approuter)SAP_SE · SAP Business AI Platform (Approuter) · CVSS 5.3 · 2026-08-11 | 5.3 | 0.4% | 2026-08-11 |
| CVE-2025-52660HCL AION is affected by an Host Header Injection vulnerabilityHCL Software · AION · CVSS 2.7 · 2026-01-19 | 2.7 | 0.3% | 2026-01-19 |
| CVE-2026-54477Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting SyntaxGardyn · Gardyn Home Firmware · CVSS 5.4 · 2026-07-02 | 5.4 | 0.3% | 2026-07-02 |
| CVE-2025-2950IBM i improper HTTP header neutralizationIBM · i · CVSS 5.4 · 2025-04-18 | 5.4 | 0.3% | 2025-04-18 |
| CVE-2026-33149Tandoor Recipes Vulnerable to Host Header InjectionTandoorRecipes · recipes · CVSS 8.1 · 2026-03-26 | 8.1 | 0.3% | 2026-03-26 |
| CVE-2024-30129HCL Nomad server on Domino is affected by a host header injection vulnerabilityHCL Software · Nomad server on Domino · CVSS 5.3 · 2024-12-06 | 5.3 | 0.3% | 2024-12-06 |
| CVE-2026-10836Improper neutralization of HTTP headers in Password ManagerPassword Manager · Password Manager · CVSS 5.1 · 2026-06-17 | 5.1 | 0.3% | 2026-06-17 |
| CVE-2025-23001A Host header injection vulnerability exists in CTFd 3.7.5, due to the application failing to properly validate or sanitize the Host header. An attacker can manipulate the Host he…No vendor recorded · CVSS 6.1 · 2025-01-31 | 6.1 | 0.3% | 2025-01-31 |
| CVE-2026-21762Missing HTTP Security Headers in DevOps LoopHCLSoftware · DevOps Loop · CVSS 3.7 · 2026-07-17 | 3.7 | 0.3% | 2026-07-17 |
| CVE-2025-24339A vulnerability in the web application of ctrlX OS allows a remote unauthenticated attacker to conduct various attacks against users of the vulnerable system, including web cache…Bosch Rexroth AG · ctrlX OS - Device Admin · CVSS 5 · 2025-04-30 | 5.0 | 0.3% | 2025-04-30 |
| CVE-2023-26289IBM Aspera Orchestrator HTTP header injectionIBM · Aspera Orchestrator · CVSS 5.4 · 2024-07-30 | 5.4 | 0.3% | 2024-07-30 |
| CVE-2023-45190IBM Engineering Lifecycle Optimization HTTP header injectionIBM · Engineering Lifecycle Optimization - Publishing · CVSS 5.1 · 2024-02-09 | 5.1 | 0.3% | 2024-02-09 |
| CVE-2024-51454IBM Engineering Lifecycle Management - Engineering Workflow Management is impacted by vulnerabilities Host Header Injection observedIBM · Engineering Workflow Management · CVSS 6.5 · 2026-06-22 | 6.5 | 0.3% | 2026-06-22 |
| CVE-2025-27632A Host Header Injection vulnerability in TRMTracker application may allow an attacker by modifying the host header value in an HTTP request to leverage multiple attack vectors, in…Hitachi Energy · TRMTracker · CVSS 6.1 · 2025-03-25 | 6.1 | 0.3% | 2025-03-25 |
| CVE-2025-23191Cache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERPSAP_SE · SAP Fiori for SAP ERP · CVSS 3.1 · 2025-02-11 | 3.1 | 0.2% | 2025-02-11 |
| CVE-2026-1698HTTP Host header vulnerability in WebClient and WebScheduler web appsarcinfo · PcVue · CVSS 5.3 · 2026-02-26 | 5.3 | 0.2% | 2026-02-26 |
| CVE-2024-51451Multiple Vulnerabilities in IBM Concert SoftwareIBM · Concert · CVSS 6.5 · 2026-02-04 | 6.5 | 0.2% | 2026-02-04 |
| CVE-2025-36227Multiple vulnerabilities in IBM Aspera FaspexIBM · Aspera Faspex 5 · CVSS 5.4 · 2026-03-10 | 5.4 | 0.2% | 2026-03-10 |
| CVE-2022-43847IBM Aspera Console HTTP header injectionIBM · Aspera Console · CVSS 5.4 · 2025-04-14 | 5.4 | 0.2% | 2025-04-14 |
| CVE-2023-35894IBM Control Center HOST header injectionIBM · Control Center · CVSS 5.4 · 2025-03-07 | 5.4 | 0.2% | 2025-03-07 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.