Product by Apache Software Foundation

Apache HttpComponents Client

10 known vulnerabilities in Apache HttpComponents Client (Apache Software Foundation), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Apache HttpComponents Client (Apache Software Foundation)

Critical	CVE-2013-4366	Apache HttpComponents Client: security vulnerability	9.8	30.10.2017
Medium	CVE-2020-13956	Apache HttpClient: security vulnerability also in 23 other products	5.3	02.12.2020
Critical	CVE-2026-71290	Apache HttpComponents Client: Improper Certificate Validation also in 3 other products	9.1	11.08.2026
High	CVE-2025-27820	Apache HttpComponents: PSL (Public Suffix List) validation bypass also in 8 other products	7.5	24.04.2025
Not rated	CVE-2015-5262	Apache HttpComponents Client: Denial of Service also in 8 other products	—	27.10.2015
Not rated	CVE-2012-5783	Apache HttpComponents Client: security vulnerability also in 7 other products	—	04.11.2012
Not rated	CVE-2014-3577	Apache Software Foundation HttpAsyncClient: security vulnerability also in 6 other products	—	21.08.2014
Not rated	CVE-2011-1498	Apache HttpComponents Client: Information Disclosure	—	07.07.2011
Medium	CVE-2026-64607	Apache HttpComponents Client: Missing Release of Resource after Effective Lifetime also in 6 other products	5.3	31.07.2026
High	CVE-2026-40542	Apache HttpClient: Missing Critical Step in Authentication also in 2 other products	7.3	22.04.2026