Product of Apache
HTTP Server
As of , 4 Apache HTTP Server vulnerabilities are on CISA's list of exploited vulnerabilities, 2 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2021-41773.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2021-41773Path Traversal | Apache HTTP Server | Patch this weekRansomware use; Metasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| 2 | CVE-2021-42013Path Traversal | Apache HTTP Server | Patch this weekRansomware use; Metasploit module; EPSS 0.99; verified Exploit-DB entry | 0.99 | ||
| 3 | CVE-2024-38475Improper Escaping of Output | Apache HTTP Server | Patch this weekEPSS 0.99 | 0.99 | ||
| 4 | CVE-2019-0211Privilege Escalation | Apache HTTP Server | Patch this weekEPSS 0.65 | 0.65 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 3 |
| 2022 | none |
| 2023 | none |
| 2024 | none |
| 2025 | 1 |
| 2026 | none |