Skip to content

Vendor

commons-httpclient vulnerabilities

1 published CVE affecting commons-httpclient, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of commons-httpclient alerts

Products

Latest commons-httpclient CVEs

Newest publication first

  1. CVE-2012-5783 Improper Certificate Validation in Apache Commons HttpClient

    Published
    MediumCVSS 5.8

    Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows m...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.