apache httpasyncclient vulnerabilities

Latest apache httpasyncclient CVEs

Newest publication first

1. CVE-2014-3577 Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient

   Published 2014-08-21

   Medium·CVSS 5.8 EPSS 9.2% Public exploit

   org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.