Vulnslist

Cisco vulnerabilities by product, model, software, and advisory.

CVE-2021-40438

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

SeverityCRITICAL
CVSS9.0
CWECWE-918
KEV KEV (added )
Published
Modified

Related Products

Product Advisory Evidence
Firepower Extensible Operating System cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln
Cisco TelePresence Video Communication Server (VCS) Expressway cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln
Cisco TelePresence Video Communication Server (VCS) cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln
Cisco TelePresence cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln
Cisco Firepower Extensible Operating System (FXOS) cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln
Cisco Firepower Extensible Operating System cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln
Cisco Expressway cisco-sa-apache-httpd-2.4.49-VWL69sWQ Cisco OpenVuln