CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-14063

Async Http Client (aka async-http-client) before 2.0.35 can be tricked into connecting to a host different from the one extracted by java.net.URI if a '?' character occurs in a fragment identifier. Similar bugs were previously identified in cURL (CVE-2016-8624) and Oracle Java 8 java.net.URL.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.011

EPSS Ranking 77.5%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2017-14063

Asynchttpclient Project » Async-Http-Client » Version: 1.0.0

cpe:2.3:a:asynchttpclient_project:async-http-client:1.0.0
Asynchttpclient Project » Async-Http-Client » Version: 1.1.0

cpe:2.3:a:asynchttpclient_project:async-http-client:1.1.0
Asynchttpclient Project » Async-Http-Client » Version: 1.2.0

cpe:2.3:a:asynchttpclient_project:async-http-client:1.2.0
Asynchttpclient Project » Async-Http-Client » Version: 1.3.0

cpe:2.3:a:asynchttpclient_project:async-http-client:1.3.0
Asynchttpclient Project » Async-Http-Client » Version: 1.3.1

cpe:2.3:a:asynchttpclient_project:async-http-client:1.3.1
Asynchttpclient Project » Async-Http-Client » Version: 1.3.2

cpe:2.3:a:asynchttpclient_project:async-http-client:1.3.2
Asynchttpclient Project » Async-Http-Client » Version: 1.3.3

cpe:2.3:a:asynchttpclient_project:async-http-client:1.3.3
Asynchttpclient Project » Async-Http-Client » Version: 1.3.4

cpe:2.3:a:asynchttpclient_project:async-http-client:1.3.4
Asynchttpclient Project » Async-Http-Client » Version: 1.4.0

cpe:2.3:a:asynchttpclient_project:async-http-client:1.4.0
Asynchttpclient Project » Async-Http-Client » Version: 1.4.1

cpe:2.3:a:asynchttpclient_project:async-http-client:1.4.1
Asynchttpclient Project » Async-Http-Client » Version: 1.5.0

cpe:2.3:a:asynchttpclient_project:async-http-client:1.5.0
Asynchttpclient Project » Async-Http-Client » Version: 1.6.0

cpe:2.3:a:asynchttpclient_project:async-http-client:1.6.0
Asynchttpclient Project » Async-Http-Client » Version: 1.6.1

cpe:2.3:a:asynchttpclient_project:async-http-client:1.6.1
Asynchttpclient Project » Async-Http-Client » Version: 1.6.2

cpe:2.3:a:asynchttpclient_project:async-http-client:1.6.2
Asynchttpclient Project » Async-Http-Client » Version: 1.6.3

cpe:2.3:a:asynchttpclient_project:async-http-client:1.6.3
Asynchttpclient Project » Async-Http-Client » Version: 1.6.4

cpe:2.3:a:asynchttpclient_project:async-http-client:1.6.4
Asynchttpclient Project » Async-Http-Client » Version: 1.6.5

cpe:2.3:a:asynchttpclient_project:async-http-client:1.6.5
Asynchttpclient Project » Async-Http-Client » Version: 1.7.0

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.0
Asynchttpclient Project » Async-Http-Client » Version: 1.7.1

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.1
Asynchttpclient Project » Async-Http-Client » Version: 1.7.10

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.10
Asynchttpclient Project » Async-Http-Client » Version: 1.7.11

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.11
Asynchttpclient Project » Async-Http-Client » Version: 1.7.12

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.12
Asynchttpclient Project » Async-Http-Client » Version: 1.7.13

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.13
Asynchttpclient Project » Async-Http-Client » Version: 1.7.14

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.14
Asynchttpclient Project » Async-Http-Client » Version: 1.7.15

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.15
Asynchttpclient Project » Async-Http-Client » Version: 1.7.16

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.16
Asynchttpclient Project » Async-Http-Client » Version: 1.7.17

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.17
Asynchttpclient Project » Async-Http-Client » Version: 1.7.18

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.18
Asynchttpclient Project » Async-Http-Client » Version: 1.7.19

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.19
Asynchttpclient Project » Async-Http-Client » Version: 1.7.2

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.2
Asynchttpclient Project » Async-Http-Client » Version: 1.7.20

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.20
Asynchttpclient Project » Async-Http-Client » Version: 1.7.21

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.21
Asynchttpclient Project » Async-Http-Client » Version: 1.7.22

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.22
Asynchttpclient Project » Async-Http-Client » Version: 1.7.23

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.23
Asynchttpclient Project » Async-Http-Client » Version: 1.7.24

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.24
Asynchttpclient Project » Async-Http-Client » Version: 1.7.3

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.3
Asynchttpclient Project » Async-Http-Client » Version: 1.7.4

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.4
Asynchttpclient Project » Async-Http-Client » Version: 1.7.5

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.5
Asynchttpclient Project » Async-Http-Client » Version: 1.7.6

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.6
Asynchttpclient Project » Async-Http-Client » Version: 1.7.7

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.7
Asynchttpclient Project » Async-Http-Client » Version: 1.7.8

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.8
Asynchttpclient Project » Async-Http-Client » Version: 1.7.9

cpe:2.3:a:asynchttpclient_project:async-http-client:1.7.9
Asynchttpclient Project » Async-Http-Client » Version: 1.8.0

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.0
Asynchttpclient Project » Async-Http-Client » Version: 1.8.1

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.1
Asynchttpclient Project » Async-Http-Client » Version: 1.8.10

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.10
Asynchttpclient Project » Async-Http-Client » Version: 1.8.11

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.11
Asynchttpclient Project » Async-Http-Client » Version: 1.8.12

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.12
Asynchttpclient Project » Async-Http-Client » Version: 1.8.13

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.13
Asynchttpclient Project » Async-Http-Client » Version: 1.8.14

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.14
Asynchttpclient Project » Async-Http-Client » Version: 1.8.15

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.15
Asynchttpclient Project » Async-Http-Client » Version: 1.8.16

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.16
Asynchttpclient Project » Async-Http-Client » Version: 1.8.17

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.17
Asynchttpclient Project » Async-Http-Client » Version: 1.8.2

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.2
Asynchttpclient Project » Async-Http-Client » Version: 1.8.3

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.3
Asynchttpclient Project » Async-Http-Client » Version: 1.8.4

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.4
Asynchttpclient Project » Async-Http-Client » Version: 1.8.5

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.5
Asynchttpclient Project » Async-Http-Client » Version: 1.8.6

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.6
Asynchttpclient Project » Async-Http-Client » Version: 1.8.7

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.7
Asynchttpclient Project » Async-Http-Client » Version: 1.8.8

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.8
Asynchttpclient Project » Async-Http-Client » Version: 1.8.9

cpe:2.3:a:asynchttpclient_project:async-http-client:1.8.9
Asynchttpclient Project » Async-Http-Client » Version: 1.9.0

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.0
Asynchttpclient Project » Async-Http-Client » Version: 1.9.1

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.1
Asynchttpclient Project » Async-Http-Client » Version: 1.9.10

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.10
Asynchttpclient Project » Async-Http-Client » Version: 1.9.11

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.11
Asynchttpclient Project » Async-Http-Client » Version: 1.9.12

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.12
Asynchttpclient Project » Async-Http-Client » Version: 1.9.13

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.13
Asynchttpclient Project » Async-Http-Client » Version: 1.9.14

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.14
Asynchttpclient Project » Async-Http-Client » Version: 1.9.15

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.15
Asynchttpclient Project » Async-Http-Client » Version: 1.9.16

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.16
Asynchttpclient Project » Async-Http-Client » Version: 1.9.17

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.17
Asynchttpclient Project » Async-Http-Client » Version: 1.9.18

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.18
Asynchttpclient Project » Async-Http-Client » Version: 1.9.19

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.19
Asynchttpclient Project » Async-Http-Client » Version: 1.9.2

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.2
Asynchttpclient Project » Async-Http-Client » Version: 1.9.20

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.20
Asynchttpclient Project » Async-Http-Client » Version: 1.9.21

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.21
Asynchttpclient Project » Async-Http-Client » Version: 1.9.22

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.22
Asynchttpclient Project » Async-Http-Client » Version: 1.9.23

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.23
Asynchttpclient Project » Async-Http-Client » Version: 1.9.24

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.24
Asynchttpclient Project » Async-Http-Client » Version: 1.9.25

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.25
Asynchttpclient Project » Async-Http-Client » Version: 1.9.26

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.26
Asynchttpclient Project » Async-Http-Client » Version: 1.9.27

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.27
Asynchttpclient Project » Async-Http-Client » Version: 1.9.28

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.28
Asynchttpclient Project » Async-Http-Client » Version: 1.9.29

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.29
Asynchttpclient Project » Async-Http-Client » Version: 1.9.3

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.3
Asynchttpclient Project » Async-Http-Client » Version: 1.9.30

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.30
Asynchttpclient Project » Async-Http-Client » Version: 1.9.31

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.31
Asynchttpclient Project » Async-Http-Client » Version: 1.9.32

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.32
Asynchttpclient Project » Async-Http-Client » Version: 1.9.33

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.33
Asynchttpclient Project » Async-Http-Client » Version: 1.9.34

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.34
Asynchttpclient Project » Async-Http-Client » Version: 1.9.35

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.35
Asynchttpclient Project » Async-Http-Client » Version: 1.9.36

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.36
Asynchttpclient Project » Async-Http-Client » Version: 1.9.37

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.37
Asynchttpclient Project » Async-Http-Client » Version: 1.9.38

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.38
Asynchttpclient Project » Async-Http-Client » Version: 1.9.39

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.39
Asynchttpclient Project » Async-Http-Client » Version: 1.9.4

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.4
Asynchttpclient Project » Async-Http-Client » Version: 1.9.40

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.40
Asynchttpclient Project » Async-Http-Client » Version: 1.9.5

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.5
Asynchttpclient Project » Async-Http-Client » Version: 1.9.6

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.6
Asynchttpclient Project » Async-Http-Client » Version: 1.9.7

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.7
Asynchttpclient Project » Async-Http-Client » Version: 1.9.8

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.8
Asynchttpclient Project » Async-Http-Client » Version: 1.9.9

cpe:2.3:a:asynchttpclient_project:async-http-client:1.9.9
Asynchttpclient Project » Async-Http-Client » Version: 2.0.0

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.0
Asynchttpclient Project » Async-Http-Client » Version: 2.0.1

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.1
Asynchttpclient Project » Async-Http-Client » Version: 2.0.10

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.10
Asynchttpclient Project » Async-Http-Client » Version: 2.0.11

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.11
Asynchttpclient Project » Async-Http-Client » Version: 2.0.12

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.12
Asynchttpclient Project » Async-Http-Client » Version: 2.0.13

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.13
Asynchttpclient Project » Async-Http-Client » Version: 2.0.14

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.14
Asynchttpclient Project » Async-Http-Client » Version: 2.0.15

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.15
Asynchttpclient Project » Async-Http-Client » Version: 2.0.16

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.16
Asynchttpclient Project » Async-Http-Client » Version: 2.0.17

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.17
Asynchttpclient Project » Async-Http-Client » Version: 2.0.18

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.18
Asynchttpclient Project » Async-Http-Client » Version: 2.0.19

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.19
Asynchttpclient Project » Async-Http-Client » Version: 2.0.2

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.2
Asynchttpclient Project » Async-Http-Client » Version: 2.0.20

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.20
Asynchttpclient Project » Async-Http-Client » Version: 2.0.21

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.21
Asynchttpclient Project » Async-Http-Client » Version: 2.0.22

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.22
Asynchttpclient Project » Async-Http-Client » Version: 2.0.23

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.23
Asynchttpclient Project » Async-Http-Client » Version: 2.0.24

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.24
Asynchttpclient Project » Async-Http-Client » Version: 2.0.25

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.25
Asynchttpclient Project » Async-Http-Client » Version: 2.0.26

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.26
Asynchttpclient Project » Async-Http-Client » Version: 2.0.27

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.27
Asynchttpclient Project » Async-Http-Client » Version: 2.0.28

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.28
Asynchttpclient Project » Async-Http-Client » Version: 2.0.29

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.29
Asynchttpclient Project » Async-Http-Client » Version: 2.0.3

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.3
Asynchttpclient Project » Async-Http-Client » Version: 2.0.30

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.30
Asynchttpclient Project » Async-Http-Client » Version: 2.0.31

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.31
Asynchttpclient Project » Async-Http-Client » Version: 2.0.32

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.32
Asynchttpclient Project » Async-Http-Client » Version: 2.0.33

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.33
Asynchttpclient Project » Async-Http-Client » Version: 2.0.34

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.34
Asynchttpclient Project » Async-Http-Client » Version: 2.0.4

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.4
Asynchttpclient Project » Async-Http-Client » Version: 2.0.5

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.5
Asynchttpclient Project » Async-Http-Client » Version: 2.0.6

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.6
Asynchttpclient Project » Async-Http-Client » Version: 2.0.7

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.7
Asynchttpclient Project » Async-Http-Client » Version: 2.0.8

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.8
Asynchttpclient Project » Async-Http-Client » Version: 2.0.9

cpe:2.3:a:asynchttpclient_project:async-http-client:2.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2017-14063

Products

Pricing

Contact Us