Oracle HTTP Server

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:http_server:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductHttp Server (674ac569-7e26-5533-9e32-c5eabf3879bc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-44224 vulnerable 2026-06-08 05:36:45.171025 Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).
Published: 2021-12-20T11:20:13.000Z
Updated: 2024-08-04T04:17:24.919Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1955 vulnerable 2026-06-08 04:51:25.915318 Details available
The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.
Published: 2009-06-06T18:00:00.000Z
Updated: 2024-08-07T05:36:19.503Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.