Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2019-0211

🗓️ 08 Apr 2019 21:31:09Reported by apacheType 
cve
 cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 14753 Views🌐 WEB

Apache HTTP Server 2.4 vulnerability allows arbitrary code executio

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in IBM HTTP Server bundled with IBM WebSphere Application Server Patterns (CVE-2019-0211 CVE-2019-0220)
14 May 201917:10
–ibm
IBM Security Bulletins		Security Bulletin: Security vulnerabilities have been identified in IBM HTTP Server used by IBM Rational ClearQuest (CVE-2019-0211, CVE-2019-0220)
7 May 201903:55
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities in IBM HTTP Server bundled with IBM Cloud Pak System (CVE-2019-0211 CVE-2019-0220)
24 Sep 201909:08
–ibm
IBM Security Bulletins		Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2019-0211, CVE-2019-0220)
29 May 201918:35
–ibm
IBM Security Bulletins		Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Security Policy Manager (CVE-2019-0220)
2 May 201922:10
–ibm
IBM Security Bulletins		Security Bulletin: A Security Vulnerability Has Been Identified In IBM WebSphere Application Server shipped with IBM Security Access Manager for Enterprise Single Sign-On (CVE-2019-0220)
17 May 201906:35
–ibm
IBM Security Bulletins		Security Bulletin: IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise Edition is affected by HTTP Server vulnerabilities
21 Oct 201907:20
–ibm
IBM Security Bulletins		Security Bulletin: Rational Build Forge Security Advisory for Apache HTTP Server (CVE-2019-0196;CVE-2019-0197;CVE-2019-0211;CVE-2019-0215;CVE-2019-0217; and CVE-2019-0220)
23 Jul 201917:45
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server (CVE-2019-0211 CVE-2019-0220)
23 Apr 201917:30
–ibm
IBM Security Bulletins		WebSphere Application Server and IBM HTTP Server Security Bulletin List
13 Jul 202218:04
–ibm
Rows per page
NVD
Vulners
Node
apachehttp_serverRange2.4.17–2.4.38
Node
OR
fedoraprojectfedoraMatch28
fedoraprojectfedoraMatch29
fedoraprojectfedoraMatch30
Node
OR
canonicalubuntu_linuxMatch14.04esm
canonicalubuntu_linuxMatch16.04esm
canonicalubuntu_linuxMatch18.04esm
canonicalubuntu_linuxMatch18.10
Node
debiandebian_linuxMatch9.0
Node
OR
opensuseleapMatch15.0
opensuseleapMatch42.3
Node
netapponcommand_unified_managerMatch-7-mode
Node
OR
redhatjboss_core_servicesMatch1.0
redhatopenshift_container_platformMatch3.11
redhatopenshift_container_platform_for_powerMatch3.11_ppc64le
redhatsoftware_collectionsMatch1.0
redhatenterprise_linuxMatch8.0
redhatenterprise_linux_eusMatch8.1
redhatenterprise_linux_eusMatch8.2
redhatenterprise_linux_eusMatch8.4
redhatenterprise_linux_eusMatch8.6
redhatenterprise_linux_eusMatch8.8
redhatenterprise_linux_for_arm_64Match8.0_aarch64
redhatenterprise_linux_for_arm_64_eusMatch8.1_aarch64
redhatenterprise_linux_for_arm_64_eusMatch8.2_aarch64
redhatenterprise_linux_for_arm_64_eusMatch8.4_aarch64
redhatenterprise_linux_for_arm_64_eusMatch8.6_aarch64
redhatenterprise_linux_for_arm_64_eusMatch8.8_aarch64
redhatenterprise_linux_for_ibm_z_systemsMatch8.0_s390x
redhatenterprise_linux_for_ibm_z_systems_eusMatch8.1_s390x
redhatenterprise_linux_for_ibm_z_systems_eusMatch8.2_s390x
redhatenterprise_linux_for_ibm_z_systems_eusMatch8.4_s390x
redhatenterprise_linux_for_ibm_z_systems_eusMatch8.6_s390x
redhatenterprise_linux_for_ibm_z_systems_eusMatch8.8_s390x
redhatenterprise_linux_for_power_little_endianMatch8.0_ppc64le
redhatenterprise_linux_for_power_little_endian_eusMatch8.1_ppc64le
redhatenterprise_linux_for_power_little_endian_eusMatch8.2_ppc64le
redhatenterprise_linux_for_power_little_endian_eusMatch8.4_ppc64le
redhatenterprise_linux_for_power_little_endian_eusMatch8.6_ppc64le
redhatenterprise_linux_for_power_little_endian_eusMatch8.8_ppc64le
redhatenterprise_linux_server_ausMatch8.2
redhatenterprise_linux_server_ausMatch8.4
redhatenterprise_linux_server_ausMatch8.6
redhatenterprise_linux_server_tusMatch8.2
redhatenterprise_linux_server_tusMatch8.4
redhatenterprise_linux_server_tusMatch8.6
redhatenterprise_linux_server_tusMatch8.8
redhatenterprise_linux_update_services_for_sap_solutionsMatch8.0
redhatenterprise_linux_update_services_for_sap_solutionsMatch8.1
redhatenterprise_linux_update_services_for_sap_solutionsMatch8.4
redhatenterprise_linux_update_services_for_sap_solutionsMatch8.6
redhatenterprise_linux_update_services_for_sap_solutionsMatch8.8
Node
OR
oraclecommunications_session_report_managerMatch8.0.0
oraclecommunications_session_report_managerMatch8.1.0
oraclecommunications_session_report_managerMatch8.1.1
oraclecommunications_session_report_managerMatch8.2.0
oraclecommunications_session_route_managerMatch8.0.0
oraclecommunications_session_route_managerMatch8.1.0
oraclecommunications_session_route_managerMatch8.1.1
oraclecommunications_session_route_managerMatch8.2.0
oracleenterprise_manager_ops_centerMatch12.3.3
oracleenterprise_manager_ops_centerMatch12.4.0
oraclehttp_serverMatch12.2.1.3.0
oracleinstantis_enterprisetrackMatch17.1
oracleinstantis_enterprisetrackMatch17.2
oracleinstantis_enterprisetrackMatch17.3
oracleretail_xstore_point_of_serviceMatch7.0
oracleretail_xstore_point_of_serviceMatch7.1
[
  {
    "product": "Apache HTTP Server",
    "vendor": "Apache",
    "versions": [
      {
        "status": "affected",
        "version": "2.4.17 to 2.4.38"
      }
    ]
  }
]
SourceLink
listswww.lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
securityfocuswww.securityfocus.com/bid/107666
packetstormsecuritywww.packetstormsecurity.com/files/152415/Slackware-Security-Advisory-httpd-Updates.html
exploit-dbwww.exploit-db.com/exploits/46676/
accesswww.access.redhat.com/errata/RHSA-2019:1296
openwallwww.openwall.com/lists/oss-security/2019/07/26/7
securitywww.security.netapp.com/advisory/ntap-20190423-0001/
listswww.lists.opensuse.org/opensuse-security-announce/2019-04/msg00084.html
listswww.lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E
listswww.lists.apache.org/thread.html/b2bdb308dc015e771ba79c0586b2de6fb50caa98b109833f5d4daf28%40%3Cdev.community.apache.org%3E
Rows per page
ParameterPositionPathDescriptionCWE
cmdquery paramcarpediem.phpExploit payload delivered via the cmd parameter to trigger a UAF in PHP leading to code execution with the Apache parent process privileges (CVE-2019-0211).CWE-416
cmdquery paramcfreal-carpediem.phpExploit payload delivered via the cmd parameter to trigger a UAF in PHP leading to root-level code execution on Apache (CVE-2019-0211).CWE-416

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 02:07Current
7.2High risk
Vulners AI Score7.2
CVSS 27.2
CVSS 3.17.8
EPSS0.65005
SSVC
CWE-416In Wild
apachehttp server2.4vulnerabilityarbitrary code executionnvdcve-2019-0211
14753