The vulnerability of the mod_proxy module in the Apache HTTP Server allows a hacker to redirect users to a malicious website through a specially crafted web page.

🗓️ 03 Dec 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Apache mod_proxy flaw enables redirects to malicious sites via crafted pages.

Reporter	Title	Published	Views	Family All 180
0day.today	Apache Httpd mod_proxy - Error Page Cross-Site Scripting Vulnerability	19 Nov 201900:00	–	zdt
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring embedded WebSphere Application and IHS server	20 Dec 201908:47	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in WebSphere Application Server bundled with Cloud Pak System and supporting products	6 May 202011:57	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server	18 Sep 201918:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise Edition is affected by HTTP Server vulnerability (CVE-2018-20843)	24 Oct 201912:14	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in IBM HTTP Server affect IBM Netezza Performance Portal	21 Jul 202005:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities Affect IBM WebSphere Application Server in IBM Cloud	20 Dec 201908:47	–	ibm
IBM Security Bulletins	WebSphere Application Server and IBM HTTP Server Security Bulletin List	13 Jul 202218:04	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2019-10092, CVE-2019-10098)	8 Oct 201919:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in the IBM i HTTP Server affect IBM i.	18 Dec 201914:26	–	ibm

Vulners

Node

oracle enterprise_manager_ops_centerMatch12.3.3

OR

novell suse_linux_enterprise_module_for_open_buildservice_development_toolsMatch15

OR

novell suse_linux_enterprise_module_for_server_applicationsMatch15

OR

oracle enterprise_manager_ops_centerMatch12.4.0

OR

red_hat jboss_web_serverMatch3

OR

oracle enterprise_manager_ops_centerMatch12.4.0.0

OR

red_hat red_hat_enterprise_linuxMatch8

OR

novell opensuse_leapMatch15.0

OR

novell opensuse_leapMatch15.1

Source	Link
oracle	www.oracle.com/technetwork/topics/security/public-vuln-to-advisory-mapping-093627.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-10092
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
lists	www.lists.debian.org/debian-lts-announce/2019/09/msg00034.html
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-10092
wiki	www.wiki.astralinux.ru/astra-linux-se16-bulletin-20200327SE16
wiki	www.wiki.astralinux.ru/astra-linux-se81-bulletin-20200429SE81
oracle	www.oracle.com/security-alerts/cpujul2020.html
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
abf	www.abf.rosa.ru/advisories/ROSA-SA-2025-2900

19 Aug 2025 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 25.8

CVSS 36.1

EPSS0.82379

Apache HTTP Server mod_proxy crafted pages malicious sites