Apache Http Server vulnerabilities
350 published vulnerabilities in Apache Http Server, 5 of them exploited in the wild. The most were published in 2026 (44), and 44 so far in 2026.
Apache Http Server vulnerabilities by year
1999
2000
2001
2002
2003
2004
2005
2006
2007
2008
2009
2010
2011
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Apache Http Server vulnerabilities
- CVE-2021-42013 Apache HTTP Server Path Traversal
- CVE-2024-38475 Apache HTTP Server Improper Escaping of Output
- CVE-2021-40438 Apache HTTP Server-Side Request Forgery (SSRF)
- CVE-2019-0211 Apache HTTP Server Privilege Escalation
- CVE-2021-41773 Apache HTTP Server Path Traversal
- CVE-2010-0425 Use after free in n/a
- CVE-2005-2700 Auth bypass in n/a
- CVE-1999-1199 Denial of service in n/a
- CVE-2004-0492 Memory corruption in n/a
- CVE-2003-0789 Information disclosure in n/a
- CVE-1999-0926 Denial of service in n/a
- CVE-1999-1237 Memory corruption in n/a
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.