# Apache Http Server


- [CVE-2021-42013](https://insights.sbomify.com/CVE-2021-42013/): Apache HTTP Server Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2024-38475](https://insights.sbomify.com/CVE-2024-38475/): Apache HTTP Server Improper Escaping of Output (critical 9.1, exploited in the wild)
- [CVE-2021-40438](https://insights.sbomify.com/CVE-2021-40438/): Apache HTTP Server-Side Request Forgery (SSRF) (critical 9.0, exploited in the wild)
- [CVE-2019-0211](https://insights.sbomify.com/CVE-2019-0211/): Apache HTTP Server Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-41773](https://insights.sbomify.com/CVE-2021-41773/): Apache HTTP Server Path Traversal (high 7.5, exploited in the wild)
- [CVE-2010-0425](https://insights.sbomify.com/CVE-2010-0425/): Use after free in n/a (critical 10.0)
- [CVE-2005-2700](https://insights.sbomify.com/CVE-2005-2700/): Auth bypass in n/a (critical 10.0)
- [CVE-1999-1199](https://insights.sbomify.com/CVE-1999-1199/): Denial of service in n/a (critical 10.0)
- [CVE-2004-0492](https://insights.sbomify.com/CVE-2004-0492/): Memory corruption in n/a (critical 10.0)
- [CVE-2003-0789](https://insights.sbomify.com/CVE-2003-0789/): Information disclosure in n/a (critical 10.0)
- [CVE-1999-0926](https://insights.sbomify.com/CVE-1999-0926/): Denial of service in n/a (critical 10.0)
- [CVE-1999-1237](https://insights.sbomify.com/CVE-1999-1237/): Memory corruption in n/a (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/products/apache/http-server/