How many Apache Software Foundation httpd CVEs are in CISA KEV?

Yes — 5 of Apache Software Foundation httpd's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Apache Software Foundation httpd are affected?

524 distinct Apache Software Foundation httpd versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Apache Software Foundation httpd CVEs?

Apache Software Foundation httpd's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-20 (Improper Input Validation), CWE-918 (Server-Side Request Forgery (SSRF)).

How many critical Apache Software Foundation httpd vulnerabilities are there?

Apache Software Foundation httpd has 25 critical and 62 high-severity CVEs.

What is the average severity of Apache Software Foundation httpd CVEs?

The average CVSS base score across Apache Software Foundation httpd's scored CVEs is 7.3.

Apache Software Foundation httpd Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Apache Software Foundation httpd vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Apache Software Foundation httpd Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Apache Software Foundation httpd has 125 published CVE records since 2014, of which 5 are in CISA's Known Exploited Vulnerabilities catalog and 23 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.

Severity and exploitation

How the CVSS severity of Apache Software Foundation httpd's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical25

High62

Medium38

Low0

In CISA’s Known Exploited Vulnerabilities catalog

5 of Apache Software Foundation httpd's CVEs are confirmed exploited in the wild.

Public exploits

23 of Apache Software Foundation httpd's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Apache Software Foundation httpd version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

HTTPD_LDAP_1_0_012 CVEs
2.4.2311 CVEs
2.4.2010 CVEs
2.4.189 CVEs
2.4.178 CVEs
2.4.17 CVEs
2.4.107 CVEs
2.4.127 CVEs
2.4.167 CVEs
2.4.27 CVEs
2.4.257 CVEs
2.4.266 CVEs

Common weakness types

The CWE weakness categories most often found in Apache Software Foundation httpd CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Apache Software Foundation httpd CVEs were published each year.

2015

2016

2017

2018

2019

2020

2021

Other Apache Software Foundation products

Browse vulnerabilities for other products by Apache Software Foundation.

http server371 CVEs tomcat278 CVEs airflow222 CVEs Apache Airflow152 CVEs apache-airflow145 CVEs Apache HTTP Server145 CVEs Apache Tomcat138 CVEs traffic server121 CVEs

Frequently asked questions

Common questions about Apache Software Foundation httpd vulnerabilities.

How many CVEs does Apache Software Foundation httpd have?: Apache Software Foundation httpd has 125 published CVE records since 2014.
How many Apache Software Foundation httpd CVEs are in CISA KEV?: Yes — 5 of Apache Software Foundation httpd's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Apache Software Foundation httpd vulnerabilities?: Yes — 23 of Apache Software Foundation httpd's CVEs have a known public exploit.
Which versions of Apache Software Foundation httpd are affected?: 524 distinct Apache Software Foundation httpd versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Apache Software Foundation httpd CVEs?: Apache Software Foundation httpd's CVEs most often map to these CWE weakness types: CWE-476 (NULL Pointer Dereference), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-20 (Improper Input Validation), CWE-918 (Server-Side Request Forgery (SSRF)).
How many critical Apache Software Foundation httpd vulnerabilities are there?: Apache Software Foundation httpd has 25 critical and 62 high-severity CVEs.
What is the average severity of Apache Software Foundation httpd CVEs?: The average CVSS base score across Apache Software Foundation httpd's scored CVEs is 7.3.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Apache Software Foundation httpd vulnerabilities

Get an alert for each new Apache Software Foundation httpd CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Version ranges

<= 9.039 CVEs
<= 3526 CVEs
<= 10.024 CVEs
<= 17.123 CVEs
<= 17.223 CVEs
<= 17.323 CVEs
<= 18.0423 CVEs
<= 8.822 CVEs
<= 16.0421 CVEs
<= 3420 CVEs
<= 7.018 CVEs
<= 8.018 CVEs
<= 12.4.0.015 CVEs
<= 12.2.1.3.013 CVEs
<= 14.0413 CVEs
<= 3613 CVEs
<= 12.2.1.4.011 CVEs
<= 7.611 CVEs
<= 12.3.310 CVEs
<= 6.010 CVEs
<= 7.410 CVEs
<= 7.510 CVEs
<= 7.18 CVEs
<= 307 CVEs
<= 8.1.17 CVEs
<= 8.2.07 CVEs
<= 97 CVEs
<= 12.4.06 CVEs
<= 15.16 CVEs
<= 17.106 CVEs
<= 18.106 CVEs
<= 296 CVEs
<= 10.15.7-security_update_2020\-0015 CVEs
<= 10.15.7-security_update_2021\-0015 CVEs
<= 10.15.7-security_update_2021\-0025 CVEs
<= 10.15.7-security_update_2021\-0035 CVEs
<= 10.15.7-security_update_2021\-0045 CVEs
<= 10.15.7-security_update_2021\-0055 CVEs
<= 10.15.7-security_update_2021\-0065 CVEs
<= 10.15.7-security_update_2021\-0075 CVEs
<= 10.15.7-security_update_2021\-0085 CVEs
<= 10.15.7-security_update_2022\-0015 CVEs
<= 10.15.7-security_update_2022\-0025 CVEs
<= 10.15.7-security_update_2022\-0035 CVEs
<= 11.05 CVEs
<= 12.045 CVEs
<= 15.05 CVEs
<= 20.045 CVEs
<= 315 CVEs
<= 325 CVEs
<= 385 CVEs
<= 7.35 CVEs
<= 8.0.05 CVEs
<= 8.1.05 CVEs
11.0 <= v < 11.6.65 CVEs
< 10.15.74 CVEs
<= 284 CVEs
<= 394 CVEs
<= 42.34 CVEs
<= 7.24 CVEs
<= 7.74 CVEs
17.1 <= v <= 17.34 CVEs
< 10.13.13 CVEs
< 18.1.0.1.03 CVEs
<= 103 CVEs
<= 11.1.2.43 CVEs
<= 15.23 CVEs
<= 19.043 CVEs
<= 4.2.03 CVEs
<= 4.2.13 CVEs
<= 403 CVEs
<= 5.33 CVEs
<= 8.23 CVEs
<= 8.2.13 CVEs
8.2.0 <= v <= 8.2.23 CVEs
< 14.62 CVEs
<= 1.10.02 CVEs
<= 10.15.72 CVEs
<= 13.4.0.02 CVEs
<= 13.5.0.02 CVEs
<= 14.0-NA2 CVEs
<= 2.0.02 CVEs
<= 4.32 CVEs
<= 4.42 CVEs
<= 5.02 CVEs
<= 5.19.12 CVEs
<= 5.42 CVEs
<= 6.72 CVEs
<= 8.12 CVEs
<= 8.42 CVEs
<= 8.582 CVEs
<= 8.62 CVEs
12.0 <= v < 12.42 CVEs
12.0.0 <= v < 12.42 CVEs
< 10.2.1.14-75sv1 CVE
< 3.11 CVE
< 5.10.01 CVE
< 9.01 CVE
< 9.2.6.01 CVE
<= 1.15.171 CVE
<= 10.11.6-NA1 CVE
<= 10.11.6-security_update_2016\-0011 CVE
<= 10.11.6-security_update_2016\-0021 CVE
<= 10.11.6-security_update_2016\-0031 CVE
<= 10.11.6-security_update_2017\-0011 CVE
<= 10.11.6-security_update_2017\-0021 CVE
<= 10.11.6-security_update_2017\-0031 CVE
<= 10.12.6-NA1 CVE
<= 11.31 CVE
<= 12.2.21 CVE
<= 12.3.21 CVE
<= 13.21 CVE
<= 15.101 CVE
<= 16.11 CVE
<= 2.1.01 CVE
<= 231 CVE
<= 241 CVE
<= 3.0.01 CVE
<= 3.111 CVE
<= 3.11_ppc64le1 CVE
<= 331 CVE
<= 371 CVE
<= 4.01 CVE
<= 42.11 CVE
<= 5-NA1 CVE
<= 5.10.0-NA1 CVE
<= 5.10.0-update_11 CVE
<= 5.10.0-update_101 CVE
<= 5.10.0-update_111 CVE
<= 5.10.0-update_121 CVE
<= 5.10.0-update_21 CVE
<= 5.10.0-update_31 CVE
<= 5.10.0-update_41 CVE
<= 5.10.0-update_51 CVE
<= 5.10.0-update_61 CVE
<= 5.10.0-update_71 CVE
<= 5.10.0-update_81 CVE
<= 5.10.0-update_91 CVE
<= 5.51 CVE
<= 6-NA1 CVE
<= 6.0.01 CVE
<= 6.4.01 CVE
<= 7-NA1 CVE
<= 7.5.5.01 CVE
<= 8.0_aarch641 CVE
<= 8.0_ppc64le1 CVE
<= 8.0_s390x1 CVE
<= 8.1_aarch641 CVE
<= 8.1_ppc64le1 CVE
<= 8.1_s390x1 CVE
<= 8.2_aarch641 CVE
<= 8.2_ppc64le1 CVE
<= 8.2_s390x1 CVE
<= 8.4_aarch641 CVE
<= 8.4_ppc64le1 CVE
<= 8.4_s390x1 CVE
<= 8.6_aarch641 CVE
<= 8.6_ppc64le1 CVE
<= 8.6_s390x1 CVE
<= 8.8_aarch641 CVE
<= 8.8_ppc64le1 CVE
<= 8.8_s390x1 CVE
<= 8.8.61 CVE
<= 9.51 CVE
<= 9.6-NA1 CVE
<= 9.6-p11 CVE
<= 9.6-p31 CVE
<= 9.6-p41 CVE
<= 9.6-p71 CVE
<= 9.6-p81 CVE
10.0.0 <= v <= 12.41 CVE
10.11.0 <= v < 10.11.61 CVE
10.12.0 <= v < 10.12.61 CVE
10.15 <= v < 10.15.71 CVE
12.0 <= v <= 12.41 CVE
5.14.0 <= v < 5.20.01 CVE
5.16.0 <= v < 202201.11 CVE
5.16.0 <= v < 5.20.01 CVE
7.7.2.0 <= v < 7.7.2.241 CVE
7.8.2.0 <= v < 7.8.2.131 CVE

Apache Software Foundation httpd Vulnerabilities