Login Request a demo
HS
Product
Http Server
by Oracle · last CVE Jul 21, 2026
On CISA KEVExploited in the wildRansomware-linked
111
CVEs
4
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities111In the news5Timeline
Severity mix
Critical 25High 36Medium 20Low 4
Severity
All severities111Critical25High36Medium20Low4
Exploitation
On CISA KEV4Exploited in the wild4
Watch

Add Http Server to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-25313
6.5
3%
Feb 18
In Expat (aka libexpat) before 2.4.5, an attacker can trigger stack exhaustion in build_model via a large nesting depth in the DTD element
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-24977
6.5
3%
Sep 3
GNOME project libxml2 v2.9.10 has a global buffer over-read vulnerability in xmlEncodeEntitiesInternal at libxml2/entities.c
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2952
6.5
1%
Apr 15
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener)
Affected: 11.1.1.9.0
CVE-2020-2530
6.1
1%
Jan 15
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener)
Affected: 11.1.1.9.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2021-35666
5.9
1%
Oct 20
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module)
Affected: 11.1.1.9.0
CVE-2020-1971
5.9
7%
Dec 8
The X.509 GeneralName type is a generic type for representing different types of names
Affected: 12.2.1.4.0
CVE-2019-2751
5.9
1%
Jul 23
Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: OHS Config MBeans)
Affected: 12.1.3.0.0; 12.2.1.3.0
CVE-2018-2760
5.9
2%
Apr 19
Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: OSSL Module)
Affected: 12.1.3; 12.2.1.2
CVE-2013-2566
5.9
84%
Mar 15
The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via…
Affected: 11.1.1.7.0; 11.1.1.9.0; 12.1.3.0.0; 12.2.1.1.0; 12.2.1.2.0
CVE-2022-21375
5.5
0%
Jan 19
Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-4183
5.5
2%
Dec 30
Crash in the pcapng file parser in Wireshark 3.6.0 allows denial of service via crafted capture file
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-2315
5.4
1%
Apr 22
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener)
Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2025-21498
5.3
1%
Jan 21
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0
CVE-2024-20991
5.3
1%
Apr 16
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener)
Affected: 12.2.1.4.0
CVE-2022-21271
5.3
3%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-25219
5.3
11%
Oct 27
In BIND 9.3.0 -> 9.11.35, 9.12.0 -> 9.16.21, and versions 9.9.3-S1 -> 9.11.35-S1 and 9.16.8-S1 -> 9.16.21-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-2545
5.3
1%
Jan 15
Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module)
Affected: 11.1.1.9.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2018-2561
5.3
2%
Jan 18
Vulnerability in the Oracle HTTP Server component of Oracle Fusion Middleware (subcomponent: Web Listener)
Affected: 11.1.1.7.0; 11.1.1.9.0; 12.1.3.0.0; 12.2.1.2.0; 12.2.1.3.0
CVE-2015-3195
5.3
39%
Dec 6
The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors…
Affected: 11.5.10.2
CVE-2019-0197
4.2
9%
Jun 11
A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38
Affected: 12.2.1.3.0
Showing 20