CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-2168

Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.63

EPSS Ranking 98.3%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2008-2168

Apache » Http Server » Version: N/A

cpe:2.3:a:apache:http_server:-
Apache » Http Server » Version: 2.0

cpe:2.3:a:apache:http_server:2.0
Apache » Http Server » Version: 2.0.28

cpe:2.3:a:apache:http_server:2.0.28
Apache » Http Server » Version: 2.0.32

cpe:2.3:a:apache:http_server:2.0.32
Apache » Http Server » Version: 2.0.34

cpe:2.3:a:apache:http_server:2.0.34
Apache » Http Server » Version: 2.0.35

cpe:2.3:a:apache:http_server:2.0.35
Apache » Http Server » Version: 2.0.36

cpe:2.3:a:apache:http_server:2.0.36
Apache » Http Server » Version: 2.0.37

cpe:2.3:a:apache:http_server:2.0.37
Apache » Http Server » Version: 2.0.38

cpe:2.3:a:apache:http_server:2.0.38
Apache » Http Server » Version: 2.0.39

cpe:2.3:a:apache:http_server:2.0.39
Apache » Http Server » Version: 2.0.40

cpe:2.3:a:apache:http_server:2.0.40
Apache » Http Server » Version: 2.0.41

cpe:2.3:a:apache:http_server:2.0.41
Apache » Http Server » Version: 2.0.42

cpe:2.3:a:apache:http_server:2.0.42
Apache » Http Server » Version: 2.0.43

cpe:2.3:a:apache:http_server:2.0.43
Apache » Http Server » Version: 2.0.44

cpe:2.3:a:apache:http_server:2.0.44
Apache » Http Server » Version: 2.0.45

cpe:2.3:a:apache:http_server:2.0.45
Apache » Http Server » Version: 2.0.46

cpe:2.3:a:apache:http_server:2.0.46
Apache » Http Server » Version: 2.0.47

cpe:2.3:a:apache:http_server:2.0.47
Apache » Http Server » Version: 2.0.48

cpe:2.3:a:apache:http_server:2.0.48
Apache » Http Server » Version: 2.0.49

cpe:2.3:a:apache:http_server:2.0.49
Apache » Http Server » Version: 2.0.50

cpe:2.3:a:apache:http_server:2.0.50
Apache » Http Server » Version: 2.0.51

cpe:2.3:a:apache:http_server:2.0.51
Apache » Http Server » Version: 2.0.52

cpe:2.3:a:apache:http_server:2.0.52
Apache » Http Server » Version: 2.0.53

cpe:2.3:a:apache:http_server:2.0.53
Apache » Http Server » Version: 2.0.54

cpe:2.3:a:apache:http_server:2.0.54
Apache » Http Server » Version: 2.0.55

cpe:2.3:a:apache:http_server:2.0.55
Apache » Http Server » Version: 2.0.56

cpe:2.3:a:apache:http_server:2.0.56
Apache » Http Server » Version: 2.0.57

cpe:2.3:a:apache:http_server:2.0.57
Apache » Http Server » Version: 2.0.58

cpe:2.3:a:apache:http_server:2.0.58
Apache » Http Server » Version: 2.0.59

cpe:2.3:a:apache:http_server:2.0.59
Apache » Http Server » Version: 2.0.60

cpe:2.3:a:apache:http_server:2.0.60
Apache » Http Server » Version: 2.0.61

cpe:2.3:a:apache:http_server:2.0.61
Apache » Http Server » Version: 2.0.9

cpe:2.3:a:apache:http_server:2.0.9
Apache » Http Server » Version: 2.1

cpe:2.3:a:apache:http_server:2.1
Apache » Http Server » Version: 2.1.1

cpe:2.3:a:apache:http_server:2.1.1
Apache » Http Server » Version: 2.1.2

cpe:2.3:a:apache:http_server:2.1.2
Apache » Http Server » Version: 2.1.3

cpe:2.3:a:apache:http_server:2.1.3
Apache » Http Server » Version: 2.1.4

cpe:2.3:a:apache:http_server:2.1.4
Apache » Http Server » Version: 2.1.5

cpe:2.3:a:apache:http_server:2.1.5
Apache » Http Server » Version: 2.1.6

cpe:2.3:a:apache:http_server:2.1.6
Apache » Http Server » Version: 2.1.7

cpe:2.3:a:apache:http_server:2.1.7
Apache » Http Server » Version: 2.1.8

cpe:2.3:a:apache:http_server:2.1.8
Apache » Http Server » Version: 2.2

cpe:2.3:a:apache:http_server:2.2
Apache » Http Server » Version: 2.2.1

cpe:2.3:a:apache:http_server:2.2.1
Apache » Http Server » Version: 2.2.2

cpe:2.3:a:apache:http_server:2.2.2
Apache » Http Server » Version: 2.2.3

cpe:2.3:a:apache:http_server:2.2.3
Apache » Http Server » Version: 2.2.4

cpe:2.3:a:apache:http_server:2.2.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-2168

Products

Pricing

Contact Us