[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyypbQ9Lc1gCiTweY8-6Fvtg-RkWgPzRskKLxki6Zm4A":3,"g5a-family:oracle\u002Fhttp_server":250,"g5a-ex:oracle\u002Fhttp_server@*":251},{"success":4,"data":5},true,{"product":6,"versions":109,"topVulnerabilitiesByEpss":152,"kevVulnerabilities":215,"seoMetadata":228,"meta":247},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":108},"oracle","http_server",42,102,3,"2025-01-21",[14,19,21,23,25,27,30,32,34,36,38,40,42,45,47,50,52,54,56,58,60,62,64,67,69,72,75,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1.0",1,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"10.1.0.5",{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},"10.1.2.0.0",{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},"10.1.2.0.2",{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},"10.1.2.2.0",{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},"10.1.3.5.0",6,{"version":31,"cve_count":16,"kev_count":17,"has_kev":18},"1.0.2.0",{"version":33,"cve_count":16,"kev_count":17,"has_kev":18},"1.0.2.1",{"version":35,"cve_count":16,"kev_count":17,"has_kev":18},"1.0.2.1s_for_apps",{"version":37,"cve_count":16,"kev_count":17,"has_kev":18},"1.0.2.2",{"version":39,"cve_count":16,"kev_count":17,"has_kev":18},"1.0.2.2_roll_up_2",{"version":41,"cve_count":16,"kev_count":17,"has_kev":18},"11.1.1.6.0",{"version":43,"cve_count":44,"kev_count":17,"has_kev":18},"11.1.1.7.0",8,{"version":46,"cve_count":16,"kev_count":17,"has_kev":18},"11.1.1.9",{"version":48,"cve_count":49,"kev_count":17,"has_kev":18},"11.1.1.9.0",10,{"version":51,"cve_count":16,"kev_count":17,"has_kev":18},"11.5.10.2",{"version":53,"cve_count":29,"kev_count":17,"has_kev":18},"12.1.2.0",{"version":55,"cve_count":16,"kev_count":17,"has_kev":18},"12.1.3",{"version":57,"cve_count":44,"kev_count":17,"has_kev":18},"12.1.3.0",{"version":59,"cve_count":29,"kev_count":17,"has_kev":18},"12.1.3.0.0",{"version":61,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.1",{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},"12.2.1.1",{"version":65,"cve_count":66,"kev_count":17,"has_kev":18},"12.2.1.1.0",2,{"version":68,"cve_count":16,"kev_count":17,"has_kev":18},"12.2.1.2",{"version":70,"cve_count":71,"kev_count":17,"has_kev":18},"12.2.1.2.0",4,{"version":73,"cve_count":74,"kev_count":11,"has_kev":4},"12.2.1.3.0",59,{"version":76,"cve_count":77,"kev_count":66,"has_kev":4},"12.2.1.4.0",56,{"version":79,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.1.0.0",{"version":81,"cve_count":17,"kev_count":17,"has_kev":18},"14.1.2.0.0",{"version":83,"cve_count":16,"kev_count":17,"has_kev":18},"2.1",{"version":85,"cve_count":11,"kev_count":17,"has_kev":18},"8.1.7",{"version":87,"cve_count":29,"kev_count":17,"has_kev":18},"9.0.1",{"version":89,"cve_count":11,"kev_count":17,"has_kev":18},"9.0.1.5",{"version":91,"cve_count":16,"kev_count":17,"has_kev":18},"9.0.2",{"version":93,"cve_count":16,"kev_count":17,"has_kev":18},"9.0.2.3",{"version":95,"cve_count":16,"kev_count":17,"has_kev":18},"9.0.3.1",{"version":97,"cve_count":17,"kev_count":17,"has_kev":18},"9.0.4.0.0",{"version":99,"cve_count":17,"kev_count":17,"has_kev":18},"9.0.4.1.0",{"version":101,"cve_count":16,"kev_count":17,"has_kev":18},"9.1",{"version":103,"cve_count":29,"kev_count":17,"has_kev":18},"9.2.0",{"version":105,"cve_count":29,"kev_count":17,"has_kev":18},"9.2.0.7",{"version":107,"cve_count":16,"kev_count":17,"has_kev":18},"9.2.0.8","Http Server by Oracle is a technology product with 42 tracked versions and 102 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},{"version":31,"cve_count":16,"kev_count":17,"has_kev":18},{"version":33,"cve_count":16,"kev_count":17,"has_kev":18},{"version":35,"cve_count":16,"kev_count":17,"has_kev":18},{"version":37,"cve_count":16,"kev_count":17,"has_kev":18},{"version":39,"cve_count":16,"kev_count":17,"has_kev":18},{"version":41,"cve_count":16,"kev_count":17,"has_kev":18},{"version":43,"cve_count":44,"kev_count":17,"has_kev":18},{"version":46,"cve_count":16,"kev_count":17,"has_kev":18},{"version":48,"cve_count":49,"kev_count":17,"has_kev":18},{"version":51,"cve_count":16,"kev_count":17,"has_kev":18},{"version":53,"cve_count":29,"kev_count":17,"has_kev":18},{"version":55,"cve_count":16,"kev_count":17,"has_kev":18},{"version":57,"cve_count":44,"kev_count":17,"has_kev":18},{"version":59,"cve_count":29,"kev_count":17,"has_kev":18},{"version":61,"cve_count":17,"kev_count":17,"has_kev":18},{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},{"version":65,"cve_count":66,"kev_count":17,"has_kev":18},{"version":68,"cve_count":16,"kev_count":17,"has_kev":18},{"version":70,"cve_count":71,"kev_count":17,"has_kev":18},{"version":73,"cve_count":74,"kev_count":11,"has_kev":4},{"version":76,"cve_count":77,"kev_count":66,"has_kev":4},{"version":79,"cve_count":17,"kev_count":17,"has_kev":18},{"version":81,"cve_count":17,"kev_count":17,"has_kev":18},{"version":83,"cve_count":16,"kev_count":17,"has_kev":18},{"version":85,"cve_count":11,"kev_count":17,"has_kev":18},{"version":87,"cve_count":29,"kev_count":17,"has_kev":18},{"version":89,"cve_count":11,"kev_count":17,"has_kev":18},{"version":91,"cve_count":16,"kev_count":17,"has_kev":18},{"version":93,"cve_count":16,"kev_count":17,"has_kev":18},{"version":95,"cve_count":16,"kev_count":17,"has_kev":18},{"version":97,"cve_count":17,"kev_count":17,"has_kev":18},{"version":99,"cve_count":17,"kev_count":17,"has_kev":18},{"version":101,"cve_count":16,"kev_count":17,"has_kev":18},{"version":103,"cve_count":29,"kev_count":17,"has_kev":18},{"version":105,"cve_count":29,"kev_count":17,"has_kev":18},{"version":107,"cve_count":16,"kev_count":17,"has_kev":18},[153,161,167,174,181,188,194,199,205,210],{"cveId":154,"description":155,"publishedDate":156,"cvssScore":157,"cvssVersion":158,"severity":159,"isKev":4,"epssScore":160},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16",9,"v3.1","Critical",0.99999,{"cveId":162,"description":163,"publishedDate":164,"cvssScore":165,"cvssVersion":158,"severity":159,"isKev":18,"epssScore":166},"CVE-2021-44790","A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.","2021-12-20",9.8,0.9684,{"cveId":168,"description":169,"publishedDate":170,"cvssScore":171,"cvssVersion":158,"severity":172,"isKev":4,"epssScore":173},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","2022-01-28",7.8,"High",0.94921,{"cveId":175,"description":176,"publishedDate":177,"cvssScore":178,"cvssVersion":179,"severity":172,"isKev":18,"epssScore":180},"CVE-2002-0656","Buffer overflows in OpenSSL 0.9.6d and earlier, and 0.9.7-beta2 and earlier, allow remote attackers to execute arbitrary code via (1) a large client master key in SSL2 or (2) a large session ID in SSL3.","2002-08-12",7.5,"v2",0.8982,{"cveId":182,"description":183,"publishedDate":184,"cvssScore":185,"cvssVersion":179,"severity":186,"isKev":18,"epssScore":187},"CVE-2014-0226","Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules\u002Fgenerators\u002Fmod_status.c and the lua_ap_scoreboard_worker function in modules\u002Flua\u002Flua_request.c.","2014-07-20",6.8,"Medium",0.85744,{"cveId":189,"description":190,"publishedDate":191,"cvssScore":192,"cvssVersion":158,"severity":186,"isKev":18,"epssScore":193},"CVE-2013-2566","The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.","2013-03-15",5.9,0.84424,{"cveId":195,"description":196,"publishedDate":164,"cvssScore":197,"cvssVersion":158,"severity":172,"isKev":18,"epssScore":198},"CVE-2021-44224","A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).",8.2,0.82295,{"cveId":200,"description":201,"publishedDate":202,"cvssScore":203,"cvssVersion":179,"severity":186,"isKev":18,"epssScore":204},"CVE-2015-2808","The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the \"Bar Mitzvah\" issue.","2015-04-01",5,0.73851,{"cveId":206,"description":207,"publishedDate":208,"cvssScore":178,"cvssVersion":158,"severity":172,"isKev":18,"epssScore":209},"CVE-2022-22719","A carefully crafted request body can cause a read to a random memory area which could cause the process to crash. This issue affects Apache HTTP Server 2.4.52 and earlier.","2022-03-14",0.69097,{"cveId":211,"description":212,"publishedDate":213,"cvssScore":171,"cvssVersion":158,"severity":172,"isKev":4,"epssScore":214},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",0.65005,[216,221,224],{"cveId":168,"description":169,"publishedDate":170,"cvssScore":171,"severity":172,"isKev":4,"epssScore":173,"cisaVulnName":217,"cisaDateAdded":218,"cisaShortDescription":219,"cisaRequiredAction":220},"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.","Apply updates per vendor instructions.",{"cveId":154,"description":155,"publishedDate":156,"cvssScore":157,"severity":159,"isKev":4,"epssScore":160,"cisaVulnName":222,"cisaDateAdded":223,"cisaShortDescription":155,"cisaRequiredAction":220},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01",{"cveId":211,"description":212,"publishedDate":213,"cvssScore":171,"severity":172,"isKev":4,"epssScore":214,"cisaVulnName":225,"cisaDateAdded":226,"cisaShortDescription":227,"cisaRequiredAction":220},"Apache HTTP Server Privilege Escalation Vulnerability","2021-11-03","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"title":229,"metaDescription":230,"keywords":231,"structuredData":232},"Http Server by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Http Server by Oracle covering 42 versions with 102 tracked vulnerabilities including 1 critical and 2 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Http Server vulnerabilities, Http Server security, Http Server CVE, Oracle Http Server, Http Server threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Http Server KEV, Http Server exploited vulnerabilities",{"@context":233,"@type":234,"name":235,"description":230,"url":236,"manufacturer":237,"applicationCategory":241,"softwareVersion":242,"mainEntity":243},"https:\u002F\u002Fschema.org","SoftwareApplication","Http Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fhttp_server",{"@type":238,"name":239,"url":240},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","42 versions tracked",{"@type":244,"name":245,"description":246,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Http Server Security Vulnerabilities","Security vulnerabilities affecting Http Server by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":248,"apiVersion":249},"2026-10-17T13:43:42.568Z","3.0",[],{"rows":252,"total":11,"capped":18,"failed":66},[253,256,260],{"cveId":168,"name":217,"severity":172,"cvss":171,"added":218,"epss":173,"published":170,"ranges":254,"hits":255,"checked":18,"covers":18},[],[],{"cveId":154,"name":222,"severity":159,"cvss":157,"added":223,"epss":160,"published":257,"ranges":258,"checked":4,"hits":259,"covers":18},"2021-09-16T15:15:07.633",[73,76],[],{"cveId":211,"name":225,"severity":172,"cvss":171,"added":226,"epss":214,"published":213,"ranges":261,"hits":262,"checked":18,"covers":18},[],[]]