HS
Product
Http Server
by Oracle · last CVE Jul 21, 2026
On CISA KEVExploited in the wildRansomware-linked
111
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 25High 36Medium 20Low 4
Watch

Add Http Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-21962
In wildKEV
10.0
73%
Jan 20
Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0
CVE-2021-40438
RansomwareIn wildKEV
9.0
100%
Sep 16
mod_proxy SSRF
Affected: 12.2.1.3.0; 12.2.1.4.0
Showing 2