Vulnslist

Cisco vulnerabilities by product, model, software, and advisory.

CVE-2021-33193

A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.

SeverityHIGH
CVSS7.5
CWENVD-CWE-Other
KEV
Published
Modified

Related Products

Product Advisory Evidence
Firepower Extensible Operating System cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln
Cisco TelePresence Video Communication Server (VCS) Expressway cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln
Cisco TelePresence Video Communication Server (VCS) cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln
Cisco TelePresence cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln
Cisco Firepower Extensible Operating System (FXOS) cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln
Cisco Firepower Extensible Operating System cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln
Cisco Expressway cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln