GCVE - cpe:2.3:a:ibm:http_server:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:http_server:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Ibm (`177c0602-9232-5933-8f2f-9d22f079d22d`)
Product	Http Server (`cb67253f-3603-54af-8948-8327fadbfb63`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-8855`	vulnerable	2026-06-08 08:08:58.683682	IBM HTTP Server is affected by multiple vulnerabilities HIGH (8.1) IBM HTTP Server 8.5, and 9.0 is vulnerable to remote code execution and denial of service in configurations with TLS mutual authentication (client authentication). Published: 2026-05-26T16:58:54.958Z Updated: 2026-05-28T03:55:43.422Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/7274065	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-32342`	vulnerable	2026-06-08 06:04:45.583845	IBM GSKit information disclosure HIGH (7.5) IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a timing-based side channel in the RSA Decryption implementation. By sending an overly large number of trial messages for decryption, an attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 255828. Published: 2023-05-30T21:03:25.816Z Updated: 2025-01-09T21:11:08.128Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/255828	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-26281`	vulnerable	2026-06-08 05:57:39.033751	IBM HTTP Server denial of service MEDIUM (5.9) IBM HTTP Server 8.5 used by IBM WebSphere Application Server could allow a remote user to cause a denial of service using a specially crafted URL. IBM X-Force ID: 248296. Published: 2023-02-28T14:19:15.880Z Updated: 2025-03-06T16:35:55.531Z Open on db.gcve.eu Reference links https://www.ibm.com/support/pages/node/6958522 https://exchange.xforce.ibmcloud.com/vulnerabilities/248296	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-4947`	vulnerable	2026-06-08 05:06:48.215644	Details available Stack-based buffer overflow in the Administration Server in IBM HTTP Server 6.1.0.x through 6.1.0.47, 7.0.0.x before 7.0.0.39, 8.0.0.x before 8.0.0.12, and 8.5.x before 8.5.5.7, as used in WebSphere Application Server and other products, allows remote authenticated users to execute arbitrary code via unspecified vectors. Published: 2015-09-15T15:00:00.000Z Updated: 2024-08-06T06:32:31.917Z Open on db.gcve.eu Reference links http://www-01.ibm.com/support/docview.wss?uid=swg21965419 http://www.securityfocus.com/bid/76658 http://www-01.ibm.com/support/docview.wss?uid=swg1PI45596 http://www-01.ibm.com/support/docview.wss?uid=swg1PI44793 http://www.securitytracker.com/id/1033512	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-1360`	vulnerable	2026-06-08 04:57:58.529002	Details available Multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in (1) manual/ibm/ and (2) htdocs/*/manual/ibm/. Published: 2011-10-28T01:00:00.000Z Updated: 2024-08-06T22:21:34.370Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/50447 http://www-01.ibm.com/support/docview.wss?uid=swg21502580 http://www.ibm.com/support/docview.wss?uid=swg1PM41293 https://exchange.xforce.ibmcloud.com/vulnerabilities/69656	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.