Apache HTTP Server 2.2.22
http_serverevery versioncounted 2026-10-09 08:20 UTC
As of 2026-10-09, 1 243 hosts ran Apache HTTP Server 2.2.22 with at least one known CVE on a service open at their latest check; 57 distinct CVEs match this version.
Known CVEs on hosts running it
1 243hosts with known CVEs
57distinct CVEs
A match is an indication, not proof: it is based on the software version a service reported, and fixes are often backported without changing the version.
Not counted: 176 hosts with CVEs of it only from an older observation (software reported earlier, no service of that kind open now).
Most common CVEs
| CVE | Hosts |
|---|---|
| CVE-2021-40438 CRITICAL 9.0 known exploited | 1 243 |
| CVE-2017-3167 CRITICAL 9.8 | 1 243 |
| CVE-2017-3169 CRITICAL 9.8 | 1 243 |
| CVE-2017-7679 CRITICAL 9.8 | 1 243 |
| CVE-2021-39275 CRITICAL 9.8 | 1 243 |
| CVE-2021-44790 CRITICAL 9.8 | 1 243 |
| CVE-2022-22720 CRITICAL 9.8 | 1 243 |
| CVE-2022-31813 CRITICAL 9.8 | 1 243 |
| CVE-2026-28780 CRITICAL 9.8 | 1 243 |
| CVE-2017-9788 CRITICAL 9.1 | 1 243 |
| CVE-2022-22721 CRITICAL 9.1 | 1 243 |
| CVE-2022-28615 CRITICAL 9.1 | 1 243 |
| CVE-2026-24072 HIGH 8.8 | 1 243 |
| CVE-2025-58098 HIGH 8.3 | 1 243 |
| CVE-2016-5387 HIGH 8.1 | 1 243 |
| CVE-2006-20001 HIGH 7.5 | 1 243 |
| CVE-2016-8743 HIGH 7.5 | 1 243 |
| CVE-2017-9798 HIGH 7.5 | 1 243 |
| CVE-2018-1303 HIGH 7.5 | 1 243 |
| CVE-2021-34798 HIGH 7.5 | 1 243 |
| CVE-2022-22719 HIGH 7.5 | 1 243 |
| CVE-2022-29404 HIGH 7.5 | 1 243 |
| CVE-2022-30556 HIGH 7.5 | 1 243 |
| CVE-2023-31122 HIGH 7.5 | 1 243 |
| CVE-2026-29169 HIGH 7.5 | 1 243 |
| CVE-2026-34059 HIGH 7.5 | 1 243 |
| CVE-2025-49812 HIGH 7.4 | 1 243 |
| CVE-2023-38709 HIGH 7.3 | 1 243 |
| CVE-2012-0883 MEDIUM 6.9 | 1 243 |
| CVE-2014-0226 MEDIUM 6.8 | 1 243 |
| CVE-2016-4975 MEDIUM 6.1 | 1 243 |
| CVE-2018-1301 MEDIUM 5.9 | 1 243 |
| CVE-2018-1302 MEDIUM 5.9 | 1 243 |
| CVE-2022-28614 MEDIUM 5.3 | 1 243 |
| CVE-2022-37436 MEDIUM 5.3 | 1 243 |
| CVE-2026-33857 MEDIUM 5.3 | 1 243 |
| CVE-2026-34032 MEDIUM 5.3 | 1 243 |
| CVE-2013-1862 MEDIUM 5.1 | 1 243 |
| CVE-2013-5704 MEDIUM 5.0 | 1 243 |
| CVE-2013-6438 MEDIUM 5.0 | 1 243 |
| CVE-2014-0098 MEDIUM 5.0 | 1 243 |
| CVE-2014-0231 MEDIUM 5.0 | 1 243 |
| CVE-2015-0228 MEDIUM 5.0 | 1 243 |
| CVE-2015-3183 MEDIUM 5.0 | 1 243 |
| CVE-2026-33006 MEDIUM 4.8 | 1 243 |
| CVE-2008-0455 MEDIUM 4.3 | 1 243 |
| CVE-2012-3499 MEDIUM 4.3 | 1 243 |
| CVE-2012-4558 MEDIUM 4.3 | 1 243 |
| CVE-2013-1896 MEDIUM 4.3 | 1 243 |
| CVE-2014-0118 MEDIUM 4.3 | 1 243 |
| CVE-2016-8612 MEDIUM 4.3 | 1 243 |
| CVE-2012-2687 LOW 2.6 | 1 243 |
| CVE-2026-42535 CRITICAL 9.1 | 946 |
| CVE-2026-93546 HIGH 8.8 | 946 |
| CVE-2026-29170 MEDIUM 6.1 | 946 |
| CVE-2024-40898 HIGH 7.5 | 223 |
| CVE-2022-28330 MEDIUM 5.3 | 223 |
Hosts: matches on services open at each host's latest check.