Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
httpdApache Team FoundationHTTPD:FC2D5D7BE57E19705780F8CE841B00C1
HistoryMay 31, 2012 - 12:00 a.m.

Apache Httpd < 2.4.3 : XSS in mod_negotiation when untrusted uploads are supported

2012-05-3100:00:00
Apache Team Foundation
httpd.apache.org
29

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.864

Percentile

98.6%

JSON

Possible XSS for sites which use mod_negotiation and allow untrusted uploads to locations which have MultiViews enabled. Note: This issue is also known as CVE-2008-0455.

Affected configurations

Vulners
Node
apacheapache_httpdMatch2.4.2
OR
apacheapache_httpdMatch2.4.1
VendorProductVersionCPE
apacheapache_httpd2.4.2cpe:2.3:a:apache:apache_httpd:2.4.2:*:*:*:*:*:*:*
apacheapache_httpd2.4.1cpe:2.3:a:apache:apache_httpd:2.4.1:*:*:*:*:*:*:*

Related

openvas 25
httpd 1
fedora 1
nessus 37
veracode 6
centos 2
oraclelinux 2
redhat 5
f5 4
cve 2
cvelist 2
prion 2
debiancve 2
nvd 2
exploitdb 1
ubuntucve 2
checkpoint_advisories 1
securityvulns 4
seebug 1
threatpost 1
ubuntu 1
freebsd 1
altlinux 3
gentoo 1
osv 1
oracle 1
openvas
openvas
Apache HTTP Server XSS Vulnerability (Sep 2012) - Linux
2021-11-01 00:00:00
RedHat Update for httpd RHSA-2013:0130-01
2013-01-11 00:00:00
CentOS Update for httpd CESA-2013:0512 centos6
2013-03-12 00:00:00
httpd
httpd
Apache Httpd < 2.2.23 : XSS in mod_negotiation when untrusted uploads are supported
2012-05-31 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: httpd-2.2.23-1.fc17
2013-02-12 04:59:23
nessus
nessus
RHEL 5 : httpd (RHSA-2013:0130)
2013-01-08 00:00:00
Scientific Linux Security Update : httpd on SL5.x i386/x86_64 (20130108)
2013-01-17 00:00:00
Fedora 17 : httpd-2.2.23-1.fc17 (2013-1661)
2013-02-13 00:00:00
veracode
veracode
Arbitrary File Upload
2019-05-02 04:45:35
Cross-site Scripting (XSS)
2019-01-15 08:51:39
Access Restriction Bypass
2019-05-02 04:43:22
centos
centos
httpd, mod_ssl security update
2013-01-09 20:52:40
httpd, mod_ssl security update
2013-02-27 19:35:19
oraclelinux
oraclelinux
httpd security, bug fix, and enhancement update
2013-01-11 00:00:00
httpd security, bug fix, and enhancement update
2013-02-22 00:00:00
redhat
redhat
(RHSA-2013:0512) Low: httpd security, bug fix, and enhancement update
2013-02-21 00:00:00
(RHSA-2013:0130) Low: httpd security, bug fix, and enhancement update
2013-01-08 00:00:00
(RHSA-2012:1592) Important: JBoss Enterprise Application Platform 6.0.1 update
2012-12-18 00:00:00
f5
f5
SOL15901 - Apache HTTP server vulnerability CVE-2012-2687
2014-12-10 00:00:00
K15901 : Apache HTTP server vulnerability CVE-2012-2687
2015-06-08 00:00:00
K17201 : Apache HTTP server vulnerability CVE-2008-0455
2015-09-01 00:00:00
cve
cve
CVE-2012-2687
2012-08-22 19:55:01
CVE-2008-0455
2008-01-25 01:00:00
cvelist
cvelist
CVE-2012-2687
2012-08-22 19:00:00
CVE-2008-0455
2008-01-25 00:00:00
prion
prion
Cross site scripting
2012-08-22 19:55:00
Cross site scripting
2008-01-25 01:00:00
debiancve
debiancve
CVE-2012-2687
2012-08-22 19:55:01
CVE-2008-0455
2008-01-25 01:00:00
nvd
nvd
CVE-2008-0455
2008-01-25 01:00:00
CVE-2012-2687
2012-08-22 19:55:01
exploitdb
exploitdb
Apache 2.2.6 mod_negotiation - HTML Injection / HTTP Response Splitting
2008-01-22 00:00:00
ubuntucve
ubuntucve
CVE-2012-2687
2012-08-22 00:00:00
CVE-2008-0455
2008-01-25 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache HTTP Server mod_negotiation Filename Handling Cross Site Scripting (CVE-2008-0455)
2010-06-22 00:00:00
securityvulns
securityvulns
Apache security vulnerabilities
2012-10-01 00:00:00
[ MDVSA-2012:154 ] apache
2012-10-01 00:00:00
APPLE-SA-2013-09-12-1 OS X Mountain Lion v10.8.5 and Security Update 2013-004
2013-10-03 00:00:00
seebug
seebug
Apache 2.4.2 HTTP Server HTML注入和信息泄露漏洞
2012-08-23 00:00:00
threatpost
threatpost
Apache Fixes Two Security Flaws in Version 2.4.3
2012-08-21 17:45:56
ubuntu
ubuntu
Apache HTTP Server vulnerabilities
2012-11-08 00:00:00
freebsd
freebsd
apache22 -- several vulnerabilities
2012-09-13 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 2.2.24-alt1
2013-04-14 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.24-alt1
2013-04-14 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.24-alt1
2013-04-14 00:00:00
gentoo
gentoo
Apache: Multiple vulnerabilities
2008-03-11 00:00:00
osv
osv
apache2-2.4.23-4.1 on GA media
2024-06-15 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.864

Percentile

98.6%

JSON
Related for HTTPD:FC2D5D7BE57E19705780F8CE841B00C1
openvas25httpd1fedora1nessus37veracode6centos2oraclelinux2redhat5f54cve2cvelist2prion2debiancve2nvd2exploitdb1ubuntucve2checkpoint_advisories1securityvulns4seebug1threatpost1ubuntu1freebsd1altlinux3gentoo1osv1oracle1