# Apache HTTP Server.

Every CVE that names Apache HTTP Server among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Insufficient verification of data authenticity in Apache HTTP Server](https://agentprime.io/advisories/CVE-2020-11985.md)
  `CVE-2020-11985` · CVE record: Apache HTTP Server · No CVSS score · Not analysed yet · Published 7 Aug 2020 · Tags: CWE-345
- [Apache HTTP Server: Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2…](https://agentprime.io/advisories/CVE-2020-11993.md)
  `CVE-2020-11993` · CVE record: Apache HTTP Server · No CVSS score · EPSS 0.57 · Not analysed yet · Published 7 Aug 2020
- [Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE](https://agentprime.io/advisories/CVE-2020-11984.md)
  `CVE-2020-11984` · CVE record: Apache HTTP Server · No CVSS score · EPSS 0.90 · Not analysed yet · Published 7 Aug 2020
- [Apache HTTP Server versions 2.4.20 to 2.4.43.](https://agentprime.io/advisories/CVE-2020-9490.md)
  `CVE-2020-9490` · CVE record: Apache HTTP Server · No CVSS score · EPSS 0.89 · Not analysed yet · Published 7 Aug 2020
- [Open redirect in Apache HTTP Server](https://agentprime.io/advisories/CVE-2020-1927.md)
  `CVE-2020-1927` · CVE record: Apache Apache HTTP Server · No CVSS score · EPSS 0.57 · Not analysed yet · Published 1 Apr 2020 · Tags: Open redirect
- [Apache HTTP Server: In Apache HTTP Server 2.4.0 to 2.4.41…](https://agentprime.io/advisories/CVE-2020-1934.md)
  `CVE-2020-1934` · CVE record: Apache Apache HTTP Server · No CVSS score · EPSS 0.52 · Not analysed yet · Published 1 Apr 2020
- [Apache HTTP Server: In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input…](https://agentprime.io/advisories/CVE-2019-10082.md)
  `CVE-2019-10082` · CVE record: Apache HTTP Server · No CVSS score · EPSS 0.17 · Not analysed yet · Published 26 Sept 2019
- [Apache HTTP Server: In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted…](https://agentprime.io/advisories/CVE-2019-10097.md)
  `CVE-2019-10097` · CVE record: Apache HTTP Server · No CVSS score · EPSS 0.53 · Not analysed yet · Published 26 Sept 2019
- [Apache HTTP Server: In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported…](https://agentprime.io/advisories/CVE-2019-10092.md)
  `CVE-2019-10092` · CVE record: Apache HTTP Server · No CVSS score · EPSS 0.81 · Not analysed yet · Published 26 Sept 2019
- [Open redirect in Apache HTTP Server](https://agentprime.io/advisories/CVE-2019-10098.md)
  `CVE-2019-10098` · CVE record: Apache HTTP Server · No CVSS score · EPSS 0.74 · Not analysed yet · Published 25 Sept 2019 · Tags: Open redirect
- [HTTP/2 (2.4.20 through 2.4.39) very early pushes, for example configured with "H2PushResource", could lead to an overwrite of memory in the pushing request's pool, leading to crashes.](https://agentprime.io/advisories/CVE-2019-10081.md)
  `CVE-2019-10081` · CVE record: Apache HTTP Server · No CVSS score · EPSS 0.14 · Not analysed yet · Published 15 Aug 2019
- [Use after free in Apache HTTP Server](https://agentprime.io/advisories/CVE-2019-0211.md)
  `CVE-2019-0211` · CVE record: Apache Apache HTTP Server · CVSS 7.8 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.65 · Not analysed yet · Published 8 Apr 2019 · Tags: Memory corruption
- [Apache HTTP Server: In Apache HTTP Server 2.4 release 2.4.38 and prior…](https://agentprime.io/advisories/CVE-2019-0217.md)
  `CVE-2019-0217` · CVE record: Apache Apache HTTP Server · No CVSS score · EPSS 0.16 · Not analysed yet · Published 8 Apr 2019
- [Apache HTTP Server: In Apache HTTP Server 2.4 releases 2.4.37 and 2.4.38…](https://agentprime.io/advisories/CVE-2019-0215.md)
  `CVE-2019-0215` · CVE record: Apache Apache HTTP Server · No CVSS score · EPSS 0.10 · Not analysed yet · Published 8 Apr 2019

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=apache-http-server>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/apache-http-server/>. Everything for agents: <https://agentprime.io/llms.txt>.