apache httpclient vulnerabilities

Latest apache httpclient CVEs

Newest publication first

1. CVE-2013-4366 Hostname verification in Apache HttpClient 4.3 was disabled by default

   Published 2017-10-30

   Critical·CVSS 9.8

   http/impl/client/HttpClientBuilder.java in Apache HttpClient 4.3.x before 4.3.1 does not ensure that X509HostnameVerifier is not null, which allows attackers to have unspecified impact via vectors involving hostname verification.

2. CVE-2015-5262 Denial of service vulnerability in org.apache.httpcomponents:httpclient

   Published 2015-10-27

   Medium·CVSS 4.3 EPSS 18.8%

   http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors.

3. CVE-2014-3577 Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient

   Published 2014-08-21

   Medium·CVSS 5.8 Public exploit

   org.apache.http.conn.ssl.AbstractVerifier in Apache HttpComponents HttpClient before 4.3.5 and HttpAsyncClient before 4.0.2 does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate,...

4. CVE-2012-5783 Improper Certificate Validation in Apache Commons HttpClient

   Published 2012-11-04

   Medium·CVSS 5.8

   Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows m...

5. CVE-2011-1498 Exposure of Sensitive Information to an Unauthorized Actor in Apache HttpClient

   Published 2011-07-07

   Medium·CVSS 4.3

   Apache HttpClient 4.x before 4.1.1 in Apache HttpComponents, when used with an authenticating proxy server, sends the Proxy-Authorization header to the origin server, which allows remote web servers to obtain sensitive information by logging this header.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.