Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2019-10092

🗓️ 26 Sep 2019 14:07:46Reported by apacheType 
cve
 cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 3409 Views

Apache HTTP Server 2.4.0-2.4.39 limited XSS issue in mod_proxy error page

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
0day.today		Apache Httpd mod_proxy - Error Page Cross-Site Scripting Vulnerability
19 Nov 201900:00
–zdt
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities affect IBM Tivoli Monitoring embedded WebSphere Application and IHS server
20 Dec 201908:47
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in WebSphere Application Server bundled with Cloud Pak System and supporting products
6 May 202011:57
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in IBM HTTP Server used by WebSphere Application Server
18 Sep 201918:52
–ibm
IBM Security Bulletins		Security Bulletin: IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise Edition is affected by HTTP Server vulnerability (CVE-2018-20843)
24 Oct 201912:14
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in IBM HTTP Server affect IBM Netezza Performance Portal
21 Jul 202005:24
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Security Vulnerabilities Affect IBM WebSphere Application Server in IBM Cloud
20 Dec 201908:47
–ibm
IBM Security Bulletins		WebSphere Application Server and IBM HTTP Server Security Bulletin List
13 Jul 202218:04
–ibm
IBM Security Bulletins		Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Rational ClearCase (CVE-2019-10092, CVE-2019-10098)
8 Oct 201919:24
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in the IBM i HTTP Server affect IBM i.
18 Dec 201914:26
–ibm
Rows per page
NVD
Vulners
Node
apachehttp_serverRange2.4.0–2.4.39
Node
opensuseleapMatch15.0
OR
opensuseleapMatch15.1
Node
debiandebian_linuxMatch8.0
OR
debiandebian_linuxMatch9.0
OR
debiandebian_linuxMatch10.0
Node
redhatsoftware_collectionMatch1.0
Node
fedoraprojectfedoraMatch30
Node
canonicalubuntu_linuxMatch16.04lts
OR
canonicalubuntu_linuxMatch18.04lts
OR
canonicalubuntu_linuxMatch19.04
Node
netappclustered_data_ontapRange≤9.5
OR
netappclustered_data_ontapMatch9.6-
OR
netappclustered_data_ontapMatch9.6p1
OR
netappclustered_data_ontapMatch9.6p3
OR
netappclustered_data_ontapMatch9.6p4
OR
netappclustered_data_ontapMatch9.6p7
OR
netappclustered_data_ontapMatch9.6p8
Node
oraclecommunications_element_managerMatch8.0.0
OR
oraclecommunications_element_managerMatch8.1.0
OR
oraclecommunications_element_managerMatch8.1.1
OR
oraclecommunications_element_managerMatch8.2.0
OR
oracleenterprise_manager_ops_centerMatch12.3.3
OR
oracleenterprise_manager_ops_centerMatch12.4.0
OR
oraclesecure_global_desktopMatch5.4
OR
oraclesecure_global_desktopMatch5.5
[
  {
    "product": "Apache HTTP Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "2.4.0 to 2.4.39"
      }
    ]
  }
]
SourceLink
listswww.lists.debian.org/debian-lts-announce/2019/08/msg00034.html
listswww.lists.apache.org/thread.html/r76142b8c5119df2178be7c2dba88fde552eedeec37ea993dfce68d1d%40%3Ccvs.httpd.apache.org%3E
githubwww.github.com/DrunkenShells/Disclosures/tree/master/CVE-2019-10092-Limited%20Cross-Site%20Scripting%20in%20mod_proxy%20Error%20Page-Apache%20httpd
oraclewww.oracle.com/security-alerts/cpujul2020.html
seclistswww.seclists.org/bugtraq/2019/Aug/47
listswww.lists.apache.org/thread.html/rd18c3c43602e66f9cdcf09f1de233804975b9572b0456cc582390b6f%40%3Ccvs.httpd.apache.org%3E
listswww.lists.apache.org/thread.html/re3d27b6250aa8548b8845d314bb8a350b3df326cacbbfdfe4d455234%40%3Ccvs.httpd.apache.org%3E
securitywww.security.gentoo.org/glsa/201909-04
listswww.lists.apache.org/thread.html/r06f0d87ebb6d59ed8379633f36f72f5b1f79cadfda72ede0830b42cf%40%3Ccvs.httpd.apache.org%3E
listswww.lists.apache.org/thread.html/r3c5c3104813c1c5508b55564b66546933079250a46ce50eee90b2e36%40%3Ccvs.httpd.apache.org%3E
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
21 Nov 2024 04:18Current
7.3High risk
Vulners AI Score7.3
CVSS 24.3
CVSS 3.16.1
EPSS0.82379
CWE-79
cve-2019-10092apachehttp serverxssmod_proxysecurity issue
3409