[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpZ0DHYrW9pcCP-CgOGvkfl14QV-ryi_hbw_ESAoRvgw":3,"g5a-ex:apache\u002Fhttpasyncclient@*":57,"g5a-family:apache\u002Fhttpasyncclient":59},{"success":4,"data":5},true,{"product":6,"versions":22,"topVulnerabilitiesByEpss":26,"kevVulnerabilities":34,"seoMetadata":35,"meta":54},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":21},"apache","httpasyncclient",3,1,0,"2014-08-21",[14,17,19],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"4.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"4.0.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"4.0.2","Httpasyncclient by Apache is a technology product with 3 tracked versions and 1 known security vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[23,24,25],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},[27],{"cveId":28,"description":29,"publishedDate":12,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":16,"epssScore":33},"CVE-2014-3577","org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via a \"CN=\" string in a field in the distinguished name (DN) of a certificate, as demonstrated by the \"foo,CN=www.apache.org\" string in the O field.",5.8,"v2","Medium",0.09189,[],{"title":36,"metaDescription":37,"keywords":38,"structuredData":39},"Httpasyncclient by Apache - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Httpasyncclient by Apache covering 3 versions with 1 tracked vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Httpasyncclient vulnerabilities, Httpasyncclient security, Httpasyncclient CVE, Apache Httpasyncclient, Httpasyncclient threat intelligence, Apache security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":40,"@type":41,"name":42,"description":37,"url":43,"manufacturer":44,"applicationCategory":48,"softwareVersion":49,"mainEntity":50},"https:\u002F\u002Fschema.org","SoftwareApplication","Httpasyncclient","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fapache\u002Fhttpasyncclient",{"@type":45,"name":46,"url":47},"Organization","Apache","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fapache","Security Software","3 versions tracked",{"@type":51,"name":52,"description":53,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Httpasyncclient Security Vulnerabilities","Security vulnerabilities affecting Httpasyncclient by Apache",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":55,"apiVersion":56},"2026-10-18T20:37:01.643Z","3.0",{"rows":58,"total":11,"capped":16,"failed":11},[],[]]