Login Request a demo
HT
Product
Httpclient
by Apache · last CVE Aug 11, 2026
10
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 2High 2Medium 2Low 0
Severity
All severities10Critical2High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Httpclient to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2013-4366
9.8
3%
Oct 30
http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have unspecified…
Affected: 4.3; 4.3; 4.3; 4.3
CVE-2026-71290
9.1
0%
Aug 11
Apache HttpComponents Client: TLS hostname verification silently disabled on the async transport (default config, MITM)
Affected: 5.4 before 5.6.4
Showing 2