Security
فارسی
All products

Red Hat JBoss Enterprise Application Platform 6/httpd22

Red Hat · Package
26 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache HTTP Server via mod_proxy_uwsgi HTTP response smugglingCVE-2023-27522 · GHSA-VCPH-37MH-FQRHVersion ranges need review. uwsgiRed Hat Enterprise Linux 6/httpd PyPIRed Hat High Fix reported
HTTPD: sets environmental variable based on user supplied Proxy request headerCVE-2016-5387 Red Hat JBoss Enterprise Application Platform 6/httpd22Red Hat JBoss Enterprise Web Server 1/httpd Red Hat High No fix reported
httpd: Apache HTTP Request Parsing Whitespace DefectsCVE-2016-8743 Red Hat Enterprise Linux 5/httpdRed Hat JBoss Enterprise Application Platform 6/httpd22 Red Hat Medium No fix reported
httpd: Unexpected URL matching with 'MergeSlashes OFF'CVE-2021-30641 Red Hat Enterprise Linux 7/httpdRed Hat JBoss Enterprise Application Platform 6/httpd22 Red Hat Medium No fix reported
httpd: mod_proxy_wstunnel tunneling of non Upgraded connectionCVE-2019-17567 Red Hat Enterprise Linux 7/httpdRed Hat Enterprise Linux 8/httpd:2.4/httpd Red Hat Medium No fix reported
httpd: mod_proxy NULL pointer dereferenceCVE-2020-13950 Red Hat JBoss Enterprise Application Platform 6/httpd22Red Hat JBoss Enterprise Web Server 2/httpd22 Red Hat Low No fix reported
httpd: mod_session: Heap overflow via a crafted SessionHeader valueCVE-2021-26691 Red Hat JBoss Enterprise Application Platform 6/httpd22Red Hat JBoss Enterprise Web Server 2/httpd22 Red Hat Medium No fix reported
httpd: mod_session: NULL pointer dereference when parsing Cookie headerCVE-2021-26690 Red Hat Enterprise Linux 7/httpdRed Hat JBoss Enterprise Application Platform 6/httpd22 Red Hat Medium No fix reported
httpd: Single zero byte stack overflow in mod_auth_digestCVE-2020-35452 Red Hat Enterprise Linux 6/httpdRed Hat Enterprise Linux 7/httpd Red Hat Low No fix reported
httpd: Improper Handling of Insufficient PrivilegesCVE-2020-13938 Red Hat JBoss Enterprise Application Platform 6/httpd22Red Hat JBoss Enterprise Web Server 2/httpd22 Red Hat Medium No fix reported
JBCS: URL normalization issue with dot-dot-semicolon(s) leads to information disclosureCVE-2021-3688 Red Hat JBoss Enterprise Application Platform 6/httpd22 Red Hat Medium No fix reported
httpd: mod_proxy: X-Forwarded-For dropped by hop-by-hop mechanismCVE-2022-31813 Red Hat Enterprise Linux 6/httpdRed Hat Enterprise Linux 7/httpd Red Hat Medium No fix reported
httpd: mod_lua: Information disclosure with websocketsCVE-2022-30556 Red Hat JBoss Enterprise Application Platform 6/httpd22Red Hat JBoss Web Server 3/httpd24 Red Hat Low No fix reported
httpd: mod_sed: DoS vulnerabilityCVE-2022-30522 Red Hat Enterprise Linux 7/httpdRed Hat JBoss Enterprise Application Platform 6/httpd22 Red Hat Medium No fix reported
httpd: mod_lua: DoS in r:parsebodyCVE-2022-29404 Red Hat Enterprise Linux 7/httpdRed Hat JBoss Enterprise Application Platform 6/httpd22 Red Hat Medium No fix reported
httpd: Out-of-bounds read in ap_strcmp_match()CVE-2022-28615 Red Hat Enterprise Linux 6/httpdRed Hat Enterprise Linux 7/httpd Red Hat Low No fix reported
httpd: Out-of-bounds read via ap_rwrite()CVE-2022-28614 Red Hat Enterprise Linux 6/httpdRed Hat Enterprise Linux 7/httpd Red Hat Low No fix reported
httpd: mod_proxy_ajp: Possible request smugglingCVE-2022-26377 Red Hat Enterprise Linux 6/httpdRed Hat Enterprise Linux 7/httpd Red Hat Medium No fix reported
httpd: mod_proxy_ajp: Possible request smugglingCVE-2022-36760 Red Hat Enterprise Linux 6/httpdRed Hat Enterprise Linux 7/httpd Red Hat Medium No fix reported
httpd: mod_dav: out-of-bounds read/write of zero byteCVE-2006-20001 Red Hat Enterprise Linux 6/httpdRed Hat Enterprise Linux 7/httpd Red Hat Medium No fix reported