Apache Software Foundation Apache HTTP Server 2.2.23
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:http_server:2.2.23:*:*:*:*:*:*:*
part: a version: 2.2.23 update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Http Server (294238f2-8bb7-5c9e-8927-fa193467c02f) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/httpd |
purl2cpe | 2026-06-01 10:14:24.037079 |
pkg:docker/apache/httpd |
purl2cpe | 2026-06-01 10:14:24.037081 |
pkg:github/apache/httpd |
purl2cpe | 2026-06-01 10:14:24.037083 |
pkg:rpm/fedora/httpd |
purl2cpe | 2026-06-01 10:14:24.037085 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-3169 |
vulnerable | 2026-06-08 05:09:26.752260 |
Details available
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_ssl may dereference a NULL pointer when third-party modules call ap_hook_process_connection() during an HTTP request to an HTTPS port.
Published: 2017-06-20T01:00:00.000Z
Updated: 2024-08-05T14:16:28.220Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-4975 |
vulnerable | 2026-06-08 05:07:55.830964 |
mod_userdir CRLF injection
Possible CRLF injection allowing HTTP response splitting attacks for sites which use mod_userdir. This issue was mitigated by changes made in 2.4.25 and 2.2.32 which prohibit CR or LF injection into the "Location" or other outbound header key or value. Fixed in Apache HTTP Server 2.4.25 (Affected 2.4.1-2.4.23). Fixed in Apache HTTP Server 2.2.32 (Affected 2.2.0-2.2.31).
Published: 2018-08-14T13:00:00.000Z
Updated: 2024-09-16T19:47:03.346Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-5704 |
vulnerable | 2026-06-08 05:04:53.217674 |
Details available
The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."
Published: 2014-04-15T10:00:00.000Z
Updated: 2024-08-06T17:22:30.114Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-4558 |
vulnerable | 2026-06-08 05:02:51.503323 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the balancer_handler function in the manager interface in mod_proxy_balancer.c in the mod_proxy_balancer module in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via a crafted string.
Published: 2013-02-26T16:00:00.000Z
Updated: 2024-08-06T20:42:54.984Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-3499 |
vulnerable | 2026-06-08 05:02:10.211918 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in the Apache HTTP Server 2.2.x before 2.2.24-dev and 2.4.x before 2.4.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving hostnames and URIs in the (1) mod_imagemap, (2) mod_info, (3) mod_ldap, (4) mod_proxy_ftp, and (5) mod_status modules.
Published: 2013-02-26T16:00:00.000Z
Updated: 2024-08-06T20:05:12.707Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2687 |
vulnerable | 2026-06-08 05:02:05.462281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.