| Package | Affected versions | Patched versions |
|---|---|---|
| http server | ≥ 2.4.0, ≤ 2.4.39 | |
| communications element manager | = 8.0.0= 8.1.0= 8.1.1= 8.2.0 | |
| enterprise manager ops center | = 12.3.3= 12.4.0 | |
| secure global desktop | = 5.4= 5.5 | |
| software collection | = 1.0 |
In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free