owasp modsecurity

Name: owasp modsecurity
Brand: owasp

productUS

cpe:2.3:a:owasp:modsecurity:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical10high4medium0low

updated 2026-10-26

vulnerabilities (15)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-42717US	high7.5	3.25% (88th)	Exploit	3.0.6	2021-12-07	3.0.0 → 3.0.6
CVE-2020-15598US	high7.5	2.92% (87th)	—	no fix	2020-10-06	3.0.0 → 3.0.4
CVE-2019-19886US	high7.5	2.50% (85th)	—	no fix	2020-01-21	3.0.0 → 3.0.3
CVE-2018-13065US	medium6.1	1.35% (71st)	—	no fix	2018-07-03	= 3.0.0
CVE-2019-25043US	medium5.3	1.22% (68th)	—	3.0.4	2021-05-06	3.0.0 → 3.0.4
CVE-2022-48279US	high7.5	1.17% (67th)	—	3.0.8	2023-01-20	3.0.0 → 3.0.8
CVE-2023-38285US	high7.5	0.90% (59th)	—	3.0.10	2023-07-26	3.0.0 → 3.0.10
CVE-2025-48866US	—	0.83% (57th)	—	2.9.10	2025-06-02	< 2.9.10
CVE-2023-28882US	high7.5	0.73% (54th)	—	3.0.9	2023-04-28	3.0.5 → 3.0.9
CVE-2024-1019US	high8.6	0.69% (52nd)	—	3.0.12	2024-01-30	3.0.0 → 3.0.12
CVE-2026-30923US	high7.5	0.52% (43rd)	—	3.0.15	2026-05-05	< 3.0.15
CVE-2026-42268US	high7.5	0.49% (41st)	—	3.0.15	2026-05-12	3.0.0 → 3.0.15
CVE-2026-52747US	high8.6	0.48% (40th)	—	3.0.16	2026-07-10	< 3.0.16
CVE-2026-52761US	medium5.3	0.41% (34th)	—	no fix	2026-07-10	3.0.0 → 3.0.15
CVE-2025-54571US	medium6.1	0.31% (22nd)	—	2.9.12	2025-08-06	2.0.0 → 2.9.12

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-1050Excessive Platform Resource Consumption within a Loop1 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-180Incorrect Behavior Order: Validate Before Canonicalize1 CVEs
CWE-191Integer Underflow (Wrap or Wraparound)1 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-248Uncaught Exception1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.