Exposure of Apache HTTP Server

Web servers
633
exposure score
1,465,263
sites use
6
exploited
24
critical

CVEs

204 results
CVE-2023-22019HIGHVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affecEPSS 0.6%CVE-2026-29169HIGHApache HTTP Server: mod_dav_lock indirect lock crashEPSS 0.6%CVE-2026-44186HIGHApache HTTP Server: Loop in `proxy_ftp_handler` in mod_proxy_ftpEPSS 0.6%CVE-2024-20991MEDIUMVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affecEPSS 0.6%CVE-2026-57941CRITICALApache HTTP Server: mod_http2 use-after-free / wild write via shared session->bbtmp re-entrancyEPSS 0.6%CVE-2026-56449HIGHApache HTTP Server: mod_proxy_html: crash in dump_contentEPSS 0.6%CVE-2021-3688—A flaw was found in Red Hat JBoss Core Services HTTP Server in all versions, where it does not properly normalize the path component of a reEPSS 0.6%CVE-2026-48005HIGHApache HTTP Server: mod_auth_digest reauthentication attackEPSS 0.6%CVE-2026-33006MEDIUMApache HTTP Server: mod_auth_digest timing attackEPSS 0.6%CVE-2026-43951MEDIUMApache HTTP Server: OOB Read in `merge_response_headers` can cause crashEPSS 0.5%CVE-2026-42535CRITICALApache HTTP Server: mod_dav_fs protected directory accessEPSS 0.5%CVE-2026-56154CRITICALApache HTTP Server: mod_rewrite use-after-free via %{LA-U:HTTP:...}EPSS 0.5%CVE-2026-79768MEDIUMApache HTTP Server: mod_userdir information disclosureEPSS 0.5%CVE-2025-21498MEDIUMVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 1EPSS 0.5%CVE-2026-33007MEDIUMApache HTTP Server: mod_authn_socache crashEPSS 0.5%CVE-2026-60364CRITICALVulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for EPSS 0.5%CVE-2026-60363CRITICALVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Apache Plugin). Supported versions that are affecteEPSS 0.5%CVE-2026-44631CRITICALApache HTTP Server: Heap Underflow in `ap_regname` via Signed Char OverflowEPSS 0.5%CVE-2026-9170CRITICALIBM HTTP Server is affected by multiple vulnerabilitiesEPSS 0.5%CVE-2026-59797CRITICALApache HTTP Server: mod_ssl SSLRequire allows .htaccess ap_expr file-functionEPSS 0.5%