Apache Software Foundation Apache HTTP Server 2.2
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:http_server:2.2:*:*:*:*:*:*:*
part: a version: 2.2 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Http Server (294238f2-8bb7-5c9e-8927-fa193467c02f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/httpd |
purl2cpe | 2026-06-01 10:14:24.036946 |
pkg:docker/apache/httpd |
purl2cpe | 2026-06-01 10:14:24.036948 |
pkg:github/apache/httpd |
purl2cpe | 2026-06-01 10:14:24.036950 |
pkg:rpm/fedora/httpd |
purl2cpe | 2026-06-01 10:14:24.036951 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2012-4558 |
vulnerable | 2026-06-08 05:02:51.492819 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the manager interface in mod_proxy_balancer.c in the mod_proxy_balancer module in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via a crafted string.
Published: 2013-02-26T16:00:00.000Z
Updated: 2024-08-06T20:42:54.984Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3499 |
vulnerable | 2026-06-08 05:02:10.211473 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3) mod_ldap, (4) mod_proxy_ftp, and (5) mod_status modules.
Published: 2013-02-26T16:00:00.000Z
Updated: 2024-08-06T20:05:12.707Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-0408 |
vulnerable | 2026-06-08 04:52:02.288391 |
Details available
The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service (backend server outage) via a crafted request, related to use of a 500 error code instead of the appropriate 400 error code.
Published: 2010-03-05T16:00:00.000Z
Updated: 2024-08-07T00:45:12.250Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2384 |
not_vulnerable | 2026-06-08 04:50:23.862002 |
Details available
SQL injection vulnerability in mod_auth_mysql.c in the mod-auth-mysql (aka libapache2-mod-auth-mysql) module for the Apache HTTP Server 2.x, when configured to use a multibyte character set that allows a \ (backslash) as part of the character encoding, allows remote attackers to execute arbitrary SQL commands via unspecified inputs in a login request.
Published: 2009-01-22T18:00:00.000Z
Updated: 2024-08-07T08:58:02.299Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2168 |
vulnerable | 2026-06-08 04:50:23.133406 |
Details available
Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page.
Published: 2008-05-13T21:00:00.000Z
Updated: 2024-08-07T08:49:58.493Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6750 |
vulnerable | 2026-06-08 04:50:09.747893 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6422 |
vulnerable | 2026-06-08 04:50:08.786899 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6421 |
vulnerable | 2026-06-08 04:50:08.785339 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-4154 |
vulnerable | 2026-06-08 04:49:11.107467 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-3352 |
vulnerable | 2026-06-08 04:48:40.419812 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.