Login Request a demo
HS
Web Server
HTTP Server
by Apache · last CVE Oct 1, 2026
On CISA KEVExploited in the wildRansomware-linked
351
CVEs
5
On KEV
9.8
Max CVSS
20
New 30D
Vulnerabilities351In the news1Timeline
Severity mix
Critical 33High 93Medium 43Low 1
Severity
All severities351Critical33High93Medium43Low1
Exploitation
On CISA KEV5Exploited in the wild5
Watch

Add HTTP Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-42013
RansomwareIn wildKEV
9.8
100%
Oct 7
Path Traversal and Remote Code Execution in Apache HTTP Server 2.4.49 and 2.4.50 (incomplete fix of CVE-2021-41773)
Affected: Apache HTTP Server 2.4.49; Apache HTTP Server 2.4.50
CVE-2021-41773
RansomwareIn wildKEV
9.8
100%
Oct 5
Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49
Affected: Apache HTTP Server 2.4 2.4.49
CVE-2024-38475
In wildKEV
9.1
100%
Jul 1
Apache HTTP Server weakness in mod_rewrite when first segment of substitution matches filesystem path.
Affected: 2.4.0 through 2.4.59
CVE-2021-40438
RansomwareIn wildKEV
9.0
100%
Sep 16
mod_proxy SSRF
Affected: Apache HTTP Server 2.4 through 2.4.48
Showing 4