What are the most common weakness types in Apache Software Foundation Apache HTTP Server CVEs?

Apache Software Foundation Apache HTTP Server's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference), CWE-787 (Out-of-bounds Write), CWE-416 (Use After Free), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')).

What is the average severity of Apache Software Foundation Apache HTTP Server CVEs?

The average CVSS base score across Apache Software Foundation Apache HTTP Server's scored CVEs is 7.5.

Apache Software Foundation Apache HTTP Server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Apache Software Foundation Apache HTTP Server vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Apache Software Foundation Apache HTTP Server Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Apache Software Foundation Apache HTTP Server has 145 published CVE records since 2010, of which 5 are in CISA's Known Exploited Vulnerabilities catalog and 17 have a known public exploit. The average CVSS base score across scored CVEs is 7.5. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of Apache Software Foundation Apache HTTP Server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical29

High78

Medium37

Low1

In CISA’s Known Exploited Vulnerabilities catalog

5 of Apache Software Foundation Apache HTTP Server's CVEs are confirmed exploited in the wild.

Public exploits

17 of Apache Software Foundation Apache HTTP Server's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Apache Software Foundation Apache HTTP Server version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

2.4.417 CVEs
2.4.437 CVEs
2.4.467 CVEs
2.4.376 CVEs
2.4.386 CVEs
2.4.396 CVEs
2.4.105 CVEs
2.4.125 CVEs
2.4.165 CVEs
2.4.175 CVEs
2.4.185 CVEs
2.4.205 CVEs

Common weakness types

The CWE weakness categories most often found in Apache Software Foundation Apache HTTP Server CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Apache Software Foundation Apache HTTP Server CVEs were published each year.

2010

2016

2017

2018

2019

2020

2021

Other Apache Software Foundation products

Browse vulnerabilities for other products by Apache Software Foundation.

http server371 CVEs tomcat278 CVEs airflow222 CVEs Apache Airflow152 CVEs apache-airflow145 CVEs Apache Tomcat138 CVEs httpd125 CVEs traffic server121 CVEs

Frequently asked questions

Common questions about Apache Software Foundation Apache HTTP Server vulnerabilities.

How many CVEs does Apache Software Foundation Apache HTTP Server have?: Apache Software Foundation Apache HTTP Server has 145 published CVE records since 2010.
How many Apache Software Foundation Apache HTTP Server CVEs are in CISA KEV?: Yes — 5 of Apache Software Foundation Apache HTTP Server's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Apache Software Foundation Apache HTTP Server vulnerabilities?: Yes — 17 of Apache Software Foundation Apache HTTP Server's CVEs have a known public exploit.
Which versions of Apache Software Foundation Apache HTTP Server are affected?: 114 distinct Apache Software Foundation Apache HTTP Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Apache Software Foundation Apache HTTP Server CVEs?: Apache Software Foundation Apache HTTP Server's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference), CWE-787 (Out-of-bounds Write), CWE-416 (Use After Free), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')).
How many critical Apache Software Foundation Apache HTTP Server vulnerabilities are there?: Apache Software Foundation Apache HTTP Server has 29 critical and 78 high-severity CVEs.
What is the average severity of Apache Software Foundation Apache HTTP Server CVEs?: The average CVSS base score across Apache Software Foundation Apache HTTP Server's scored CVEs is 7.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Apache Software Foundation Apache HTTP Server vulnerabilities

Get an alert for each new Apache Software Foundation Apache HTTP Server CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Apache Software Foundation Apache HTTP Server Vulnerabilities