Apache HTTP Server vulnerabilities

Latest Apache HTTP Server CVEs

Newest publication first · page 23 of 23

1. CVE-1999-0236 ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.

   Published 1999-09-29

   High·CVSS 7.5 EPSS 25.8%

   ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.

2. CVE-1999-0045 List of arbitrary files on Web host via nph-test-cgi script.

   Published 1999-09-29

   High·CVSS 7.5 EPSS 26.0%

   List of arbitrary files on Web host via nph-test-cgi script.

3. CVE-1999-0070 test-cgi program allows an attacker to list files on the server.

   Published 1999-09-29

   Medium·CVSS 5.0 EPSS 29.6% Public exploit

   test-cgi program allows an attacker to list files on the server.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.