Apache HTTP Server 2.2.15
http_serverevery versioncounted 2026-10-09 03:20 UTC
As of 2026-10-09, 12 072 hosts ran Apache HTTP Server 2.2.15 with at least one known CVE on a service open at their latest check; 73 distinct CVEs match this version.
Known CVEs on hosts running it
12 072hosts with known CVEs
73distinct CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 202 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2022-30556 HIGH 7.5 | 21 066 |
| CVE-2025-49812 HIGH 7.4 | 21 064 |
| CVE-2026-33006 MEDIUM 4.8 | 21 064 |
| CVE-2022-31813 CRITICAL 9.8 | 21 063 |
| CVE-2022-29404 HIGH 7.5 | 21 062 |
| CVE-2026-34032 MEDIUM 5.3 | 21 062 |
| CVE-2022-28615 CRITICAL 9.1 | 21 061 |
| CVE-2025-58098 HIGH 8.3 | 21 061 |
| CVE-2023-38709 HIGH 7.3 | 21 060 |
| CVE-2022-37436 MEDIUM 5.3 | 21 060 |
| CVE-2026-24072 HIGH 8.8 | 21 059 |
| CVE-2026-34059 HIGH 7.5 | 21 059 |
| CVE-2026-33857 MEDIUM 5.3 | 21 059 |
| CVE-2023-31122 HIGH 7.5 | 21 058 |
| CVE-2026-29169 HIGH 7.5 | 21 057 |
| CVE-2022-28614 MEDIUM 5.3 | 21 055 |
| CVE-2026-28780 CRITICAL 9.8 | 21 052 |
| CVE-2022-22721 CRITICAL 9.1 | 21 051 |
| CVE-2021-44790 CRITICAL 9.8 | 21 049 |
| CVE-2022-22719 HIGH 7.5 | 21 049 |
| CVE-2022-22720 CRITICAL 9.8 | 21 044 |
| CVE-2021-40438 CRITICAL 9.0 known exploited | 21 042 |
| CVE-2021-39275 CRITICAL 9.8 | 21 041 |
| CVE-2021-34798 HIGH 7.5 | 21 033 |
| CVE-2006-20001 HIGH 7.5 | 21 010 |
| CVE-2026-93546 HIGH 8.8 | 20 682 |
| CVE-2026-29170 MEDIUM 6.1 | 20 678 |
| CVE-2026-42535 CRITICAL 9.1 | 20 671 |
| CVE-2013-5704 MEDIUM 5.0 | 1 864 |
| CVE-2011-3607 MEDIUM 4.4 | 1 864 |
| CVE-2017-3169 CRITICAL 9.8 | 1 863 |
| CVE-2012-4557 MEDIUM 5.0 | 1 863 |
| CVE-2011-3639 MEDIUM 4.3 | 1 863 |
| CVE-2011-4317 MEDIUM 4.3 | 1 863 |
| CVE-2012-4558 MEDIUM 4.3 | 1 863 |
| CVE-2011-4415 LOW 1.2 | 1 863 |
| CVE-2017-9788 CRITICAL 9.1 | 1 862 |
| CVE-2018-1303 HIGH 7.5 | 1 862 |
| CVE-2016-4975 MEDIUM 6.1 | 1 862 |
| CVE-2018-1301 MEDIUM 5.9 | 1 862 |
| CVE-2018-1302 MEDIUM 5.9 | 1 862 |
| CVE-2012-3499 MEDIUM 4.3 | 1 862 |
| CVE-2012-2687 LOW 2.6 | 1 862 |
| CVE-2017-3167 CRITICAL 9.8 | 1 861 |
| CVE-2017-7679 CRITICAL 9.8 | 1 861 |
| CVE-2017-9798 HIGH 7.5 | 1 861 |
| CVE-2012-0883 MEDIUM 6.9 | 1 861 |
| CVE-2014-0231 MEDIUM 5.0 | 1 861 |
| CVE-2012-0031 MEDIUM 4.6 | 1 861 |
| CVE-2012-0053 MEDIUM 4.3 | 1 861 |
| CVE-2014-0226 MEDIUM 6.8 | 1 860 |
| CVE-2011-3368 MEDIUM 5.0 | 1 860 |
| CVE-2013-6438 MEDIUM 5.0 | 1 860 |
| CVE-2015-0228 MEDIUM 5.0 | 1 860 |
| CVE-2011-0419 MEDIUM 4.3 | 1 860 |
| CVE-2011-3348 MEDIUM 4.3 | 1 860 |
| CVE-2013-1896 MEDIUM 4.3 | 1 860 |
| CVE-2014-0118 MEDIUM 4.3 | 1 860 |
| CVE-2016-5387 HIGH 8.1 | 1 859 |
| CVE-2016-8743 HIGH 7.5 | 1 859 |
| CVE-2013-1862 MEDIUM 5.1 | 1 859 |
| CVE-2015-3183 MEDIUM 5.0 | 1 859 |
| CVE-2011-3192 HIGH 7.8 | 1 858 |
| CVE-2009-3720 MEDIUM 5.0 | 1 858 |
| CVE-2014-0098 MEDIUM 5.0 | 1 858 |
| CVE-2008-0455 MEDIUM 4.3 | 1 858 |
| CVE-2016-8612 MEDIUM 4.3 | 1 858 |
| CVE-2009-3560 MEDIUM 5.0 | 1 857 |
| CVE-2010-1452 MEDIUM 5.0 | 1 857 |
| CVE-2010-1623 MEDIUM 5.0 | 1 857 |
| CVE-2024-40898 HIGH 7.5 | 56 |
| CVE-2022-28330 MEDIUM 5.3 | 56 |
| CVE-2010-2068 MEDIUM 5.0 | 55 |
Hosts: matches on services open at each host's latest check.