VDB
CVE-2024-43394
CVE-2024-43394
PUBLISHED
CVSS 7.5 HIGH
Apache HTTP Server: SSRF on Windows due to UNC paths
EPSS 1.27% · 69.4th percentile
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS Score
1.27%
69.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitnami | apache | 2.4.0 |
| Bitnami | apache | 2.4.0, 2.4.0, 2.4.0 |
Timeline
- Jul 10, 2025 Coalition ESS Score
- Jul 10, 2025 CVE Published
- Jul 11, 2025 EPSS Score
- Jul 15, 2025 Coalition ESS Score
- Jul 16, 2025 Coalition ESS Score
- Jul 21, 2025 EPSS Score
- Jul 29, 2025 Coalition ESS Score
- Jul 31, 2025 EPSS Score
- Aug 10, 2025 EPSS Score
- Aug 21, 2025 EPSS Score
- Aug 31, 2025 EPSS Score
- Sep 10, 2025 EPSS Score
References
- https://httpd.apache.org/security/vulnerabilities_24.html advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-43394 url
- http://www.openwall.com/lists/oss-security/2025/07/10/2 url
- http://www.openwall.com/lists/oss-security/2025/07/10/5 url
- https://lists.debian.org/debian-lts-announce/2025/08/msg00009.html advisory
- Multiples vulnérabilités dans Apache HTTP Server advisory