Поиск уязвимостей
Количество 12
Количество 12
CVE-2025-59775
Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue.
CVE-2025-59775
Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue.
CVE-2025-59775
Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue.
CVE-2025-59775
Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF
CVE-2025-59775
Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Serv ...
GHSA-7w72-74p3-5cfq
Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue.
BDU:2025-15293
Уязвимость веб-сервера Apache HTTP Server, связанная с недостаточной проверкой запросов на стороне сервера, позволяющая нарушителю получить доступ к NTLM-хэшам
ROS-20260122-80-0025
Уязвимость httpd
ROS-20260122-73-0026
Уязвимость httpd
ALT-PU-2026-4342
ALT-PU-2026-4342: package `apache2` update to version 2.4.66-alt1
ALT-PU-2025-15434
ALT-PU-2025-15434: package `apache2` update to version 2.4.66-alt1
openSUSE-SU-2026:20810-1
Security update for apache2
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-59775 Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 7.5 | 1% Низкий | 11 месяцев назад |
 | CVE-2025-59775 Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 7.5 | 1% Низкий | 11 месяцев назад |
 | CVE-2025-59775 Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 7.5 | 1% Низкий | 11 месяцев назад |
 | CVE-2025-59775 Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF | 1% Низкий | 11 месяцев назад | |
| CVE-2025-59775 Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Serv ... | CVSS3: 7.5 | 1% Низкий | 11 месяцев назад |
| GHSA-7w72-74p3-5cfq Server-Side Request Forgery (SSRF) vulnerability in Apache HTTP Server on Windows with AllowEncodedSlashes On and MergeSlashes Off allows to potentially leak NTLM hashes to a malicious server via SSRF and malicious requests or content Users are recommended to upgrade to version 2.4.66, which fixes the issue. | CVSS3: 7.5 | 1% Низкий | 11 месяцев назад |
 | BDU:2025-15293 Уязвимость веб-сервера Apache HTTP Server, связанная с недостаточной проверкой запросов на стороне сервера, позволяющая нарушителю получить доступ к NTLM-хэшам | CVSS3: 7.5 | 1% Низкий | около 1 года назад |
 | ROS-20260122-80-0025 Уязвимость httpd | CVSS3: 7.5 | 1% Низкий | 10 месяцев назад |
| ROS-20260122-73-0026 Уязвимость httpd | CVSS3: 7.5 | 1% Низкий | 10 месяцев назад |
| ALT-PU-2026-4342 ALT-PU-2026-4342: package `apache2` update to version 2.4.66-alt1 | CVSS3: 8.3 | 8 месяцев назад | |
| ALT-PU-2025-15434 ALT-PU-2025-15434: package `apache2` update to version 2.4.66-alt1 | CVSS3: 8.3 | 11 месяцев назад | |
 | openSUSE-SU-2026:20810-1 Security update for apache2 | 6 месяцев назад |
Уязвимостей на страницу