CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-6203

Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated via an HTTP request containing an invalid Content-length value, a similar issue to CVE-2006-3918.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.747

EPSS Ranking 98.8%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2007-6203

Apache » Http Server » Version: 2.0.46

cpe:2.3:a:apache:http_server:2.0.46
Apache » Http Server » Version: 2.0.47

cpe:2.3:a:apache:http_server:2.0.47
Apache » Http Server » Version: 2.0.48

cpe:2.3:a:apache:http_server:2.0.48
Apache » Http Server » Version: 2.0.49

cpe:2.3:a:apache:http_server:2.0.49
Apache » Http Server » Version: 2.0.50

cpe:2.3:a:apache:http_server:2.0.50
Apache » Http Server » Version: 2.0.51

cpe:2.3:a:apache:http_server:2.0.51
Apache » Http Server » Version: 2.0.52

cpe:2.3:a:apache:http_server:2.0.52
Apache » Http Server » Version: 2.0.53

cpe:2.3:a:apache:http_server:2.0.53
Apache » Http Server » Version: 2.0.54

cpe:2.3:a:apache:http_server:2.0.54
Apache » Http Server » Version: 2.0.55

cpe:2.3:a:apache:http_server:2.0.55
Apache » Http Server » Version: 2.0.57

cpe:2.3:a:apache:http_server:2.0.57
Apache » Http Server » Version: 2.0.58

cpe:2.3:a:apache:http_server:2.0.58
Apache » Http Server » Version: 2.0.59

cpe:2.3:a:apache:http_server:2.0.59
Apache » Http Server » Version: 2.1.1

cpe:2.3:a:apache:http_server:2.1.1
Apache » Http Server » Version: 2.1.2

cpe:2.3:a:apache:http_server:2.1.2
Apache » Http Server » Version: 2.1.3

cpe:2.3:a:apache:http_server:2.1.3
Apache » Http Server » Version: 2.1.4

cpe:2.3:a:apache:http_server:2.1.4
Apache » Http Server » Version: 2.1.5

cpe:2.3:a:apache:http_server:2.1.5
Apache » Http Server » Version: 2.1.6

cpe:2.3:a:apache:http_server:2.1.6
Apache » Http Server » Version: 2.1.7

cpe:2.3:a:apache:http_server:2.1.7
Apache » Http Server » Version: 2.1.8

cpe:2.3:a:apache:http_server:2.1.8
Apache » Http Server » Version: 2.2.0

cpe:2.3:a:apache:http_server:2.2.0
Apache » Http Server » Version: 2.2.2

cpe:2.3:a:apache:http_server:2.2.2
Apache » Http Server » Version: 2.2.3

cpe:2.3:a:apache:http_server:2.2.3
Apache » Http Server » Version: 2.2.4

cpe:2.3:a:apache:http_server:2.2.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-6203

Products

Pricing

Contact Us