HS
Product
HTTP Server
22
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 0Low 0
Watch
Add HTTP Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-9170 | 9.8 | May 26 | IBM HTTP Server is affected by multiple vulnerabilities Affected: 8.5; 9.0 |
| CVE-2026-8855 | 9.8 | May 26 | IBM HTTP Server is affected by multiple vulnerabilities Affected: 8.5.0 through Interim Fix 002; 9.0 |
| CVE-2026-8856 | 9.1 | May 26 | IBM HTTP Server is affected by multiple vulnerabilities Affected: 8.5.0 through Interim Fix 002; 9.0 |
| CVE-2026-8834 | 8.0 | May 26 | IBM HTTP Server is affected by multiple vulnerabilities Affected: 8.5.0 through Interim Fix 002; 9.0 |
| CVE-2026-8854 | 7.5 | May 26 | IBM HTTP Server is affected by multiple vulnerabilities Affected: 8.5.0 through Interim Fix 002; 9.0 |
| CVE-2026-8852 | 7.5 | May 26 | IBM HTTP Server is affected by multiple vulnerabilities Affected: 8.5.0 through Interim Fix 002; 9.0 |
| CVE-2026-8850 | 7.5 | May 26 | IBM HTTP Server is affected by multiple vulnerabilities Affected: 8.5.0 through Interim Fix 002; 9.0 |
| CVE-2023-32342 | 7.5 | May 30 | IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation Affected: 8.5.0.0 before 8.5.5.24; 9.0.0.0 before 9.0.5.16 |
| CVE-2023-26281 | 7.5 | Mar 1 | IBM HTTP Server 8.5 used by IBM WebSphere Application Server could allow a remote user to cause a denial of service using a specially crafted URL Affected: 8.5.0.0 |
| CVE-2026-8835 | 7.3 | May 26 | IBM HTTP Server is affected by multiple vulnerabilities Affected: 8.5.0 through Interim Fix 002; 9.0 |
| CVE-2015-4947 | – | Sep 15 | Stack-based buffer overflow in the Administration Server in IBM HTTP Server 6.1.0.x through 6.1.0.47, 7.0.0.x before 7.0.0.39, 8.0.0.x before 8.0.0.12, and 8.5.x before 8.5.5.7,… Affected: 6.1.0.0 through 6.1.0.47; 7.0.0.0 before 7.0.0.39; 8.0.0.0 before 8.0.0.12; 8.5.0.0 before 8.5.5.7 |
| CVE-2012-5955 | – | Dec 20 | Unspecified vulnerability in the IBM HTTP Server component 5.3 in IBM WebSphere Application Server (WAS) for z/OS allows remote attackers to execute arbitrary commands via unknown… Affected: 5.3 |
| CVE-2011-1360 | – | Oct 28 | Multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to… Affected: through 2.0.47; 1.0; 1.3.6.3; 1.3.12; 1.3.12.2; 1.3.12.6; +14 more |
| CVE-2010-0425 | – | Mar 5 | modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure… Affected: 6.0.2; 6.0.2.1; 6.0.2.3; 6.0.2.7; 6.0.2.9; 6.0.2.11; +29 more |
| CVE-2004-0263 | – | Nov 23 | PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different… Affected: 1.3.19 |
| CVE-2004-0493 | – | Aug 6 | The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error… Affected: 2.0.42; 2.0.42.1; 2.0.42.2; 2.0.47; 2.0.47.1 |
| CVE-2004-0492 | – | Aug 6 | Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute… Affected: 1.3.26; 1.3.26.1; 1.3.26.2; 1.3.28 |
| CVE-2004-1082 | – | Feb 3 | mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials Affected: 1.3.19 |
| CVE-2002-1822 | – | Dec 31 | IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a… Affected: 1.0 |
| CVE-2001-0122 | – | Mar 13 | Kernel leak in AfpaCache module of the Fast Response Cache Accelerator (FRCA) component of IBM HTTP Server 1.3.x and Websphere 3.52 allows remote attackers to cause a denial of… Affected: 1.3.12.2 |
| CVE-2000-1168 | – | Jan 9 | IBM HTTP Server 1.3.6 (based on Apache) allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long GET request Affected: 1.3.6.3 |
| CVE-2000-0505 | – | May 31 | The Apache 1.3.x HTTP server for Windows platforms allows remote attackers to list directory contents by requesting a URL containing a large number of / characters Affected: 1.3.3; 1.3.6.2 |
Showing 22