CVE-2024-38475

🗓️ 01 Jul 2024 19:15:04Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 102 Views

Improper output escaping in Apache HTTP Server 2.4.5

Reporter	Title	Published	Views	Family All 249
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache HTTP Server (CVE-2024-38475) affects Power HMC.	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM HTTP Server is vulnerable to multiple vulnerabilities due to the included Apache HTTP Server	29 Jul 202414:30	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Aspera Console has addressed multiple vulnerabilities (CVE-2024-38477, CVE-2021-38963, CVE-2024-38475, CVE-2024-38474)	15 Apr 202502:56	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in http-server affect Cloud Pak System	29 Oct 202410:37	–	ibm
IBM Security Bulletins	Security Bulletin: TSSC/IMC addresses multiple security vulnerabilities.	22 May 202521:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been identified in IBM HTTP Server shipped with IBM DevOps Code ClearCase [CVE-2024-38472, CVE-2024-38473, CVE-2024-38474, CVE-2024-38475, CVE-2024-38476, CVE-2024-38477, CVE-2024-39573]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with Apache HTTP, OpendJDK, python3 and spring-web affect IBM Cloud Object Storage Systems (Sept 2024v1)	19 Sep 202403:45	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities have been identified in IBM HTTP Server shipped with IBM WebSphere Remote Server.	26 Jul 202413:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard could allow an attacker to map URLs to filesystem locations that are unreachable by any URL CVE-2024-38475	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities within WebSphere Application and IBM HTTP Server and Java, affect IBM Tivoli Monitoring.	5 Sep 202419:12	–	ibm

NVD

Node

apache http_serverRange2.4.0–2.4.60

Node

netapp ontap_9Match-

Node

sonicwall sma_200_firmwareRange<10.2.1.14-75sv

AND

sonicwall sma_200Match-

Node

sonicwall sma_210_firmwareRange<10.2.1.14-75sv

AND

sonicwall sma_210Match-

Node

sonicwall sma_400_firmwareRange<10.2.1.14-75sv

AND

sonicwall sma_400Match-

Node

sonicwall sma_410_firmwareRange<10.2.1.14-75sv

AND

sonicwall sma_410Match-

Node

sonicwall sma_500v_firmwareRange<10.2.1.14-75sv

AND

sonicwall sma_500vMatch-

Source	Link
openwall	www.openwall.com/lists/oss-security/2024/07/01/8
github	www.github.com/apache/httpd/commit/9a6157d1e2f7ab15963020381054b48782bc18cf
httpd	www.httpd.apache.org/security/vulnerabilities_24.html
blackhat	www.blackhat.com/us-24/briefings/schedule/index.html
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2024-0018
security	www.security.netapp.com/advisory/ntap-20240712-0001/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Nov 2025 21:49Current

CVSS 3.19.1

EPSS0.93858

apache server security issue code execution source code disclosure mod_rewrite unsafe prefix stat