Exposure of Apache HTTP Server

Web servers
633
exposure score
1,465,263
sites use
6
exploited
24
critical

CVEs

204 results
CVE-2026-34032MEDIUMApache HTTP Server: mod_proxy_ajp: Heap Buffer Over-Read Due to Missing Null-Termination Check (ajp_msg_get_string)EPSS 0.5%CVE-2025-55753HIGHApache HTTP Server: mod_md (ACME), unintended retry intervalsEPSS 0.5%CVE-2026-29170MEDIUMApache HTTP Server: mod_proxy_ftp XSSEPSS 0.5%CVE-2026-48913HIGHApache HTTP Server: mod_http2 memory corruption when file handles exhaustedEPSS 0.5%CVE-2026-73637HIGHApache HTTP Server: mod_auth_digest DoS attackEPSS 0.5%CVE-2026-59685HIGHApache HTTP Server: Out-of-Bounds Write in ap_directory_walk() Canonical-Name Rewrite on CASE_BLIND_FILESYSTEMEPSS 0.5%CVE-2026-56153HIGHApache HTTP Server: mod_charset_lite: Heap overflow in finish_partial_charEPSS 0.5%CVE-2026-58415MEDIUMApache HTTP Server: mod_dav_fs property database read accessEPSS 0.5%CVE-2026-63686HIGHApache HTTP Server: mod_xml2enc crash on charset conversion failureEPSS 0.5%CVE-2026-8855HIGHIBM HTTP Server is affected by multiple vulnerabilitiesEPSS 0.5%CVE-2019-2414—Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: Web Listener). The supported version that is afEPSS 0.5%CVE-2026-46729HIGHApache HTTP Server: mod_heartmonitor denial of serviceEPSS 0.5%CVE-2026-63045HIGHApache HTTP Server: mod_proxy_ftp PASV address handlingEPSS 0.4%CVE-2026-60431HIGHVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_proxy). Supported versions that are affected arEPSS 0.4%CVE-2026-33523MEDIUMApache HTTP Server: multiple modules: HTTP response splitting forwarding malicious status lineEPSS 0.4%CVE-2026-63718HIGHApache HTTP Server: mod_proxy_uwsgi Transfer-Encoding response smugglingEPSS 0.4%CVE-2026-93546HIGHApache HTTP Server: mod_dav_fs namespace overflowEPSS 0.4%CVE-2026-60365CRITICALVulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for EPSS 0.4%CVE-2026-60438CRITICALVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_ssl). Supported versions that are affected are EPSS 0.4%CVE-2026-42356LOWApache HTTP Server: limited RCE for some internal redirects to non-CGI files in CGI directoriesEPSS 0.4%