apache http server

Name: apache http server
Brand: apache

productUS

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

24critical91high156medium13low

updated 2026-10-24

vulnerabilities (350)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-40438US	critical9.0OT critical	100.0% (100th)	KEV	no fix	2021-09-16	≤ 2.4.48
CVE-2021-41773US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2021-10-05	= 2.4.49
CVE-2021-42013US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2021-10-07	2 versions
CVE-2024-38475US	critical9.1OT critical	100.0% (100th)	KEV	2.4.60	2024-07-01	2.4.0 → 2.4.60
CVE-2019-0211US	high7.8OT critical	65.0% (99th)	KEV	no fix	2019-04-08	2.4.17 → 2.4.38
CVE-2011-3192US	high7.8	98.9% (100th)	Exploit	2.2.20	2011-08-29	2 versions
CVE-2021-44790US	critical9.8	96.8% (100th)	Exploit	2.4.52	2021-12-20	< 2.4.52
CVE-2006-3747US	high7.6	96.6% (100th)	Exploit	1.3.37	2006-07-28	3 versions
CVE-2002-0392US	high7.5	95.2% (100th)	Exploit	no fix	2002-07-03	2 versions
CVE-2006-3918US	medium4.3	95.1% (100th)	Exploit	1.3.35	2006-07-28	1.3.3 → 1.3.35
CVE-2002-0840US	medium6.8	95.1% (100th)	Exploit	no fix	2002-10-11	29 versions
CVE-2017-9798US	high7.5	95.0% (100th)	Exploit	no fix	2017-09-18	19 versions
CVE-2010-0425US	high10.0	94.2% (100th)	Exploit	2.3.7	2010-03-05	3 versions
CVE-2024-27316US	high7.5	91.3% (100th)	Exploit	2.4.59	2024-04-04	2.4.17 → 2.4.59
CVE-2007-0450US	medium5.0	91.2% (100th)	Exploit	no fix	2007-03-16	—
CVE-2011-3368US	medium5.0	90.7% (100th)	Exploit	no fix	2011-10-05	98 versions
CVE-2020-11984US	critical9.8	90.0% (100th)	Exploit	no fix	2020-08-07	2.4.32 → 2.4.43
CVE-2009-3555US	medium5.8	87.3% (100th)	Exploit	no fix	2009-11-09	≤ 2.2.14
CVE-2003-0132US	medium5.0	87.1% (100th)	Exploit	no fix	2003-04-11	2.0.0 → 2.0.44
CVE-2014-0226US	medium6.8	85.7% (100th)	Exploit	2.2.29	2014-07-20	2 versions
CVE-2017-15715US	high8.1	85.5% (100th)	Exploit	no fix	2018-03-26	2.4.0 → 2.4.29
CVE-1999-1053US	high7.5	85.2% (100th)	Exploit	no fix	1999-09-13	= 1.3.9
CVE-2004-0493US	medium6.4	84.8% (100th)	Exploit	no fix	2004-08-06	3 versions
CVE-2023-25690US	critical9.8	84.5% (100th)	Exploit	no fix	2023-03-07	2.4.0 → 2.4.55
CVE-2012-0053US	medium4.3	82.2% (100th)	Exploit	2.0.65	2012-01-28	2 versions
CVE-2019-10092US	medium6.1	81.5% (100th)	Exploit	no fix	2019-09-26	2.4.0 → 2.4.39
CVE-2007-6203US	medium4.3	80.7% (100th)	Exploit	no fix	2007-12-03	25 versions
CVE-2016-8740US	high7.5	79.1% (100th)	Exploit	no fix	2016-12-05	7 versions
CVE-2001-0925US	medium5.0	75.2% (100th)	Exploit	no fix	2001-03-12	4 versions
CVE-2019-10098US	medium6.1	74.0% (99th)	Exploit	no fix	2019-09-25	2.4.0 → 2.4.39
CVE-2004-0751US	medium5.0	72.3% (99th)	Exploit	2.0.51	2004-10-20	2.0.44 → 2.0.51
CVE-2007-6750US	medium5.0	70.5% (99th)	Exploit	no fix	2011-12-27	115 versions
CVE-2002-0661US	high7.5	69.7% (99th)	Exploit	no fix	2002-08-12	9 versions
CVE-2024-38472US	—	69.5% (99th)	Exploit	2.4.60	2024-07-01	2.4.0 → 2.4.60
CVE-2023-43622US	high7.5	68.8% (99th)	Exploit	2.4.58	2023-10-23	2.4.55 → 2.4.58
CVE-2021-26690US	high7.5	65.3% (99th)	Exploit	no fix	2021-06-10	2.4.0 → 2.4.46
CVE-2008-0455US	medium4.3	64.8% (99th)	Exploit	2.2.23	2008-01-25	2 versions
CVE-2003-0245US	medium5.0	63.5% (99th)	Exploit	no fix	2003-06-09	9 versions
CVE-2011-4317US	medium4.3	59.6% (99th)	Exploit	no fix	2011-11-30	98 versions
CVE-2004-0942US	medium5.0	58.7% (99th)	Exploit	no fix	2005-02-09	≤ 2.0.52
CVE-2002-0654US	medium5.0	58.7% (99th)	Exploit	no fix	2002-09-05	9 versions
CVE-2001-0731US	medium5.0	56.8% (99th)	Exploit	no fix	2001-10-01	= 1.3.20
CVE-2008-2168US	medium4.3	54.9% (99th)	Exploit	no fix	2008-05-13	47 versions
CVE-2009-1955US	high7.5	53.0% (99th)	Exploit	2.2.12	2009-06-08	2.2.0 → 2.2.12
CVE-2002-0061US	high7.5	51.5% (99th)	Exploit	1.3.24	2002-03-21	2 versions
CVE-2000-0869US	medium5.0	50.9% (99th)	Exploit	no fix	2000-11-14	= 1.3.12
CVE-2026-23918US	—	49.7% (99th)	Exploit	no fix	2026-05-04	= 2.4.66
CVE-2011-3639US	medium4.3	49.7% (99th)	Exploit	no fix	2011-11-30	67 versions
CVE-2016-0736US	high7.5	49.0% (99th)	Exploit	no fix	2017-07-27	17 versions
CVE-2000-0505US	medium5.0	46.7% (99th)	Exploit	no fix	2000-05-31	4 versions

showing 50 of 350

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation48 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor40 CVEs
CWE-400Uncontrolled Resource Consumption29 CVEs
CWE-476NULL Pointer Dereference28 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer21 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')21 CVEs
CWE-284Improper Access Control20 CVEs
CWE-399CWE-39915 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE350 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan