Product by IBM

    IBM HTTP Server

    49 known vulnerabilities in IBM HTTP Server (IBM), 1 of them actively exploited (CISA KEV).

    Key figures

    49

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in IBM HTTP Server (IBM)
    CriticalCVE-2023-44487

    HTTP/2 Rapid Reset Attack Vulnerability

    In CISA KEValso in 159 other products

    		7.5
    HighCVE-2026-49975

    Apache HTTP Server: mod_http2 denial of service

    also in 6 other products

    		7.5
    HighCVE-2022-30522

    mod_sed denial of service

    also in 6 other products

    		7.5
    CriticalCVE-2022-28615

    Read beyond bounds in ap_strcmp_match()

    also in 7 other products

    		9.1
    HighCVE-2022-26377

    mod_proxy_ajp: Possible request smuggling

    also in 6 other products

    		7.5
    CriticalCVE-2022-31813

    mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism

    also in 6 other products

    		9.8
    HighCVE-2025-59375

    libexpat Project libexpat: Allocation of Resources Without Limits or Throttling

    also in 23 other products

    		7.5
    HighCVE-2022-29404

    Denial of service in mod_lua r:parsebody

    also in 6 other products

    		7.5
    HighCVE-2022-30556

    Information Disclosure in mod_lua with websockets

    also in 7 other products

    		7.5
    LowCVE-2015-2808

    IBM Cognos Metrics Manager: security vulnerability

    also in 36 other products

    		3.7
    MediumCVE-2022-28614

    read beyond bounds via ap_rwrite()

    also in 7 other products

    		5.3
    MediumCVE-2022-28330

    read beyond bounds in mod_isapi

    also in 5 other products

    		5.3
    HighCVE-2026-34355

    Apache HTTP Server: mod_proxy_html buffer overflow

    also in 5 other products

    		7.5
    HighCVE-2026-42536

    Apache HTTP Server: mod_xml2enc heap overflow

    also in 5 other products

    		7.5
    HighCVE-2026-29167

    Apache HTTP Server: mod_ldap per-dir use-after-free

    also in 6 other products

    		8.6
    CriticalCVE-2026-9170

    IBM HTTP Server is affected by multiple vulnerabilities

    		9.8
    CriticalCVE-2026-44631

    Apache HTTP Server: Heap Underflow in `ap_regname` via Signed Char Overflow

    also in 5 other products

    		9.4
    Not ratedCVE-2010-0425

    IBM HTTP Server: Code Execution

    also in 4 other products

    		—
    Not ratedCVE-2004-0493

    IBM HTTP Server: Heap-Based Buffer Overflow

    also in 7 other products

    		—
    MediumCVE-2024-39884

    Apache HTTP Server: source code disclosure with handlers configured via AddType

    also in 9 other products

    		6.2
    HighCVE-2026-34356

    Apache HTTP Server: ProxyPassReverseCookieMap buffer overflow

    also in 5 other products

    		7.5
    HighCVE-2026-44185

    Apache HTTP Server: Stack Buffer Over-Read in mod_ssl OCSP `send_request`

    also in 5 other products

    		7.3
    Not ratedCVE-2000-0505

    Apache HTTP Server: security vulnerability

    also in 1 other product

    		—
    Not ratedCVE-2004-0492

    Apache HTTP Server: Heap-Based Buffer Overflow

    also in 5 other products

    		—
    HighCVE-2026-42535

    Apache HTTP Server: mod_dav_fs protected directory access

    also in 5 other products

    		7.5

    All vulnerabilities in search

    News

    All products by IBM