Latest Added Vulnerabilities Examples · Example 3 of 4 in Product

CVEs of Apache HTTP Server 2.4.49

GEThttps://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list

The newest CVEs that affect Apache HTTP Server 2.4.49.

Param: vendor product version
Value: apache http_server 2.4.49

version keeps the CVEs whose affected range includes that exact release.

In the response, look at [].enrichment.cpe[].version_start_including and version_end_excluding: 2.4.49 lies inside each range (2.4.0 or 2.4.17 up to 2.4.68).

Request

curl

curl 'https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?vendor=apache&product=http_server&version=2.4.49&size=5' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json'

Python

import requests

url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list"

params = {
    "vendor": "apache",
    "product": "http_server",
    "version": "2.4.49",
    "size": "5"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
}

response = requests.get(url, params=params, headers=headers)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?vendor=apache&product=http_server&version=2.4.49&size=5";

const response = await fetch(url, {
  method: "GET",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json"
  },
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
)

func main() {
	req, err := http.NewRequest("GET", "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?vendor=apache&product=http_server&version=2.4.49&size=5", nil)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?vendor=apache&product=http_server&version=2.4.49&size=5"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .GET()
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Get, "https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?vendor=apache&product=http_server&version=2.4.49&size=5");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?vendor=apache&product=http_server&version=2.4.49&size=5',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
    ],
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/explore/vulnerability-insight/latest-added-vulnerabilities-list?vendor=apache&product=http_server&version=2.4.49&size=5')

request = Net::HTTP::Get.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · application/json

Shortened for this page: items: 3 of 5 shown; [].references: first 10 items

Response Body

[
  {
    "id": "CVE-2026-49975",
    "source_identifier": "user@apache.org",
    "published": "2026-06-08T16:16:44Z",
    "last_modified": "2026-08-19T12:18:28Z",
    "status": "Modified",
    "evaluator_comment": null,
    "evaluator_solution": null,
    "evaluator_impact": null,
    "cisa_exploit_add": null,
    "cisa_action_due": null,
    "cisa_required_action": null,
    "cisa_vulnerability_name": null,
    "descriptions": [
      {
        "lang": "en",
        "value": "Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests.\n\nThis issue affects Apache HTTP Server: from 2.4.17 through 2.4.67."
      },
      {
        "lang": "es",
        "value": "Vulnerabilidad de asignación de memoria con valor de tamaño excesivo en el mod_http del Servidor HTTP Apache conduce a denegación de servicio a través de solicitudes HTTP maliciosas.\n\nEste problema afecta al Servidor HTTP Apache: desde 2.4.17 hasta 2.4.67."
      }
    ],
    "references": [
      {
        "url": "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source": "user@apache.org",
        "tags": [
          "Vendor Advisory"
        ]
      },
      {
        "url": "http://www.openwall.com/lists/oss-security/2026/06/03/3",
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Mailing List",
          "Third Party Advisory"
        ]
      },
      {
        "url": "http://www.openwall.com/lists/oss-security/2026/06/08/16",
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Mailing List",
          "Third Party Advisory"
        ]
      },
      {
        "url": "https://lists.debian.org/debian-lts-announce/2026/06/msg00009.html",
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Mailing List",
          "Third Party Advisory"
        ]
      },
      {
        "url": "https://access.redhat.com/errata/RHSA-2026:25042",
        "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
        "tags": null
      },
      {
        "url": "https://access.redhat.com/errata/RHSA-2026:25057",
        "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
        "tags": null
      },
      {
        "url": "https://access.redhat.com/errata/RHSA-2026:25090",
        "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
        "tags": null
      },
      {
        "url": "https://access.redhat.com/errata/RHSA-2026:25225",
        "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
        "tags": null
      },
      {
        "url": "https://access.redhat.com/errata/RHSA-2026:27114",
        "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
        "tags": null
      },
      {
        "url": "https://access.redhat.com/errata/RHSA-2026:27200",
        "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
        "tags": null
      }
    ],
    "metrics": {
      "cvss_metric_v40": null,
      "cvss_metric_v31": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary",
          "cvss_data": {
            "version": "3.1",
            "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attack_vector": "NETWORK",
            "attack_complexity": "LOW",
            "privileges_required": "NONE",
            "user_interaction": "NONE",
            "scope": "UNCHANGED",
            "confidentiality_impact": "NONE",
            "integrity_impact": "NONE",
            "availability_impact": "HIGH",
            "base_score": 7.5,
            "base_severity": "HIGH",
            "exploit_code_maturity": null,
            "remediation_level": null,
            "report_confidence": null,
            "temporal_score": null,
            "temporal_severity": null,
            "confidentiality_requirement": null,
            "integrity_requirement": null,
            "availability_requirement": null,
            "modified_attack_vector": null,
            "modified_attack_complexity": null,
            "modified_privileges_required": null,
            "modified_user_interaction": null,
            "modified_scope": null,
            "modified_confidentiality_impact": null,
            "modified_integrity_impact": null,
            "modified_availability_impact": null,
            "environmental_score": null,
            "environmental_severity": null
          },
          "exploitability_score": 3.9,
          "impact_score": 3.6
        },
        {
          "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
          "type": "Secondary",
          "cvss_data": {
            "version": "3.1",
            "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "attack_vector": "NETWORK",
            "attack_complexity": "LOW",
            "privileges_required": "NONE",
            "user_interaction": "NONE",
            "scope": "UNCHANGED",
            "confidentiality_impact": "NONE",
            "integrity_impact": "NONE",
            "availability_impact": "HIGH",
            "base_score": 7.5,
            "base_severity": "HIGH",
            "exploit_code_maturity": null,
            "remediation_level": null,
            "report_confidence": null,
            "temporal_score": null,
            "temporal_severity": null,
            "confidentiality_requirement": null,
            "integrity_requirement": null,
            "availability_requirement": null,
            "modified_attack_vector": null,
            "modified_attack_complexity": null,
            "modified_privileges_required": null,
            "modified_user_interaction": null,
            "modified_scope": null,
            "modified_confidentiality_impact": null,
            "modified_integrity_impact": null,
            "modified_availability_impact": null,
            "environmental_score": null,
            "environmental_severity": null
          },
          "exploitability_score": 3.9,
          "impact_score": 3.6
        }
      ],
      "cvss_metric_v30": null,
      "cvss_metric_v2": null
    },
    "weaknesses": [
      {
        "source": "user@apache.org",
        "type": "Secondary",
        "description": [
          {
            "lang": "en",
            "value": "CWE-789"
          }
        ]
      },
      {
        "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
        "type": "Secondary",
        "description": [
          {
            "lang": "en",
            "value": "CWE-409"
          }
        ]
      }
    ],
    "configurations": [
      {
        "operator": null,
        "negate": null,
        "nodes": [
          {
            "operator": "OR",
            "negate": false,
            "cpe_match": [
              {
                "vulnerable": true,
                "criteria": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
                "match_criteria_id": "DD819875-456D-45A6-90C9-4EDA544029A4",
                "version_start_including": "2.4.17",
                "version_start_excluding": null,
                "version_end_including": null,
                "version_end_excluding": "2.4.68"
              },
              {
                "vulnerable": true,
                "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
                "match_criteria_id": "FA6FEEC2-9F11-4643-8827-749718254FED",
                "version_start_including": null,
                "version_start_excluding": null,
                "version_end_including": null,
                "version_end_excluding": null
              }
            ]
          }
        ]
      }
    ],
    "vendor_comments": null,
    "enrichment": {
      "cpe": [
        {
          "criteria": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
          "vendor": "apache",
          "product": "http_server",
          "product_type": "a",
          "vulnerable": true,
          "version_start_including": "2.4.17",
          "version_start_excluding": null,
          "version_end_including": null,
          "version_end_excluding": "2.4.68",
          "affected_versions_first": "2.4.17",
          "affected_versions_last": "2.4.67"
        },
        {
          "criteria": "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
          "vendor": "debian",
          "product": "debian_linux",
          "product_type": "o",
          "vulnerable": true,
          "version_start_including": null,
          "version_start_excluding": null,
          "version_end_including": null,
          "version_end_excluding": null,
          "affected_versions_first": "11.0",
          "affected_versions_last": "11.0"
        }
      ],
      "cwe": [
        {
          "id": 409,
          "owasptop10_2021": null,
          "name": "Improper Handling of Highly Compressed Data (Data Amplification)",
          "description": "The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.",
          "capec_id": null,
          "scope": [
            "Availability"
          ],
          "impact": [
            "DoS: Amplification",
            "DoS: Crash, Exit, or Restart",
            "DoS: Resource Consumption (CPU)",
            "DoS: Resource Consumption (Memory)"
          ],
          "detection_method": null
        },
        {
          "id": 789,
          "owasptop10_2021": null,
          "name": "Memory Allocation with Excessive Size Value",
          "description": "The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.",
          "capec_id": null,
          "scope": [
            "Availability"
          ],
          "impact": [
            "DoS: Resource Consumption (Memory)"
          ],
          "detection_method": [
            "Automated Dynamic Analysis",
            "Automated Static Analysis",
            "Fuzzing"
          ]
        }
      ],
      "epss_score": {
        "epss": 0.34303,
        "percentile": 0.98337,
        "date": "2026-09-23"
      },
      "cisa_kev": null,
      "vdeep_metric": {
        "available_versions": [
          "3.1"
        ],
        "source": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
        "type": "Secondary",
        "cvss_data": {
          "version": "3.1",
          "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "attack_vector": "NETWORK",
          "attack_complexity": "LOW",
          "attack_requirements": null,
          "privileges_required": "NONE",
          "user_interaction": "NONE",
          "vulnerable_system_confidentiality": "NONE",
          "vulnerable_system_integrity": "NONE",
          "vulnerable_system_availability": "HIGH",
          "subsequent_system_confidentiality": null,
          "subsequent_system_integrity": null,
          "subsequent_system_availability": null,
          "exploit_maturity": null,
          "confidentiality_requirements": null,
          "integrity_requirements": null,
          "availability_requirements": null,
          "modified_attack_vector": null,
          "modified_attack_complexity": null,
          "modified_attack_requirements": null,
          "modified_privileges_required": null,
          "modified_user_interaction": null,
          "modified_vulnerable_system_confidentiality": null,
          "modified_vulnerable_system_integrity": null,
          "modified_vulnerable_system_availability": null,
          "modified_subsequent_system_confidentiality": null,
          "modified_subsequent_system_integrity": null,
          "modified_subsequent_system_availability": null,
          "safety": null,
          "automatable": null,
          "recovery": null,
          "value_density": null,
          "vulnerability_response_effort": null,
          "provider_urgency": null,
          "base_score": 7.5,
          "base_severity": "HIGH"
        }
      }
    }
  },
  {
    "id": "CVE-2026-44631",
    "source_identifier": "user@apache.org",
    "published": "2026-06-08T16:16:40Z",
    "last_modified": "2026-07-23T07:10:00Z",
    "status": "Analyzed",
    "evaluator_comment": null,
    "evaluator_solution": null,
    "evaluator_impact": null,
    "cisa_exploit_add": null,
    "cisa_action_due": null,
    "cisa_required_action": null,
    "cisa_vulnerability_name": null,
    "descriptions": [
      {
        "lang": "en",
        "value": "Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration.\n\nThis issue affects Apache HTTP Server: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue."
      },
      {
        "lang": "es",
        "value": "Vulnerabilidad de escritura insuficiente de búfer en el Servidor HTTP Apache en expresiones regulares manipuladas en la configuración.\n\nEste problema afecta al Servidor HTTP Apache: desde 2.4.0 hasta 2.4.67.\n\nSe recomienda a los usuarios actualizar a la versión 2.4.68, la cual corrige el problema."
      }
    ],
    "references": [
      {
        "url": "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source": "user@apache.org",
        "tags": [
          "Vendor Advisory"
        ]
      },
      {
        "url": "http://www.openwall.com/lists/oss-security/2026/06/08/14",
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Mailing List",
          "Third Party Advisory"
        ]
      }
    ],
    "metrics": {
      "cvss_metric_v40": null,
      "cvss_metric_v31": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary",
          "cvss_data": {
            "version": "3.1",
            "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "attack_vector": "NETWORK",
            "attack_complexity": "LOW",
            "privileges_required": "NONE",
            "user_interaction": "NONE",
            "scope": "UNCHANGED",
            "confidentiality_impact": "HIGH",
            "integrity_impact": "HIGH",
            "availability_impact": "HIGH",
            "base_score": 9.8,
            "base_severity": "CRITICAL",
            "exploit_code_maturity": null,
            "remediation_level": null,
            "report_confidence": null,
            "temporal_score": null,
            "temporal_severity": null,
            "confidentiality_requirement": null,
            "integrity_requirement": null,
            "availability_requirement": null,
            "modified_attack_vector": null,
            "modified_attack_complexity": null,
            "modified_privileges_required": null,
            "modified_user_interaction": null,
            "modified_scope": null,
            "modified_confidentiality_impact": null,
            "modified_integrity_impact": null,
            "modified_availability_impact": null,
            "environmental_score": null,
            "environmental_severity": null
          },
          "exploitability_score": 3.9,
          "impact_score": 5.9
        }
      ],
      "cvss_metric_v30": null,
      "cvss_metric_v2": null
    },
    "weaknesses": [
      {
        "source": "user@apache.org",
        "type": "Secondary",
        "description": [
          {
            "lang": "en",
            "value": "CWE-124"
          }
        ]
      }
    ],
    "configurations": [
      {
        "operator": null,
        "negate": null,
        "nodes": [
          {
            "operator": "OR",
            "negate": false,
            "cpe_match": [
              {
                "vulnerable": true,
                "criteria": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
                "match_criteria_id": "03F07E89-F9BF-4913-8250-F79447AA6EBD",
                "version_start_including": "2.4.0",
                "version_start_excluding": null,
                "version_end_including": null,
                "version_end_excluding": "2.4.68"
              }
            ]
          }
        ]
      }
    ],
    "vendor_comments": null,
    "enrichment": {
      "cpe": [
        {
          "criteria": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
          "vendor": "apache",
          "product": "http_server",
          "product_type": "a",
          "vulnerable": true,
          "version_start_including": "2.4.0",
          "version_start_excluding": null,
          "version_end_including": null,
          "version_end_excluding": "2.4.68",
          "affected_versions_first": "2.4.0",
          "affected_versions_last": "2.4.67"
        }
      ],
      "cwe": [
        {
          "id": 124,
          "owasptop10_2021": null,
          "name": "Buffer Underwrite ('Buffer Underflow')",
          "description": "The product writes to a buffer using an index or pointer that references a memory location prior to the beginning of the buffer.",
          "capec_id": null,
          "scope": [
            "Access Control",
            "Availability",
            "Confidentiality",
            "Integrity",
            "Other"
          ],
          "impact": [
            "Bypass Protection Mechanism",
            "DoS: Crash, Exit, or Restart",
            "Execute Unauthorized Code or Commands",
            "Modify Memory",
            "Other"
          ],
          "detection_method": [
            "Automated Dynamic Analysis",
            "Automated Static Analysis"
          ]
        }
      ],
      "epss_score": {
        "epss": 0.00504,
        "percentile": 0.42156,
        "date": "2026-09-23"
      },
      "cisa_kev": null,
      "vdeep_metric": {
        "available_versions": [
          "3.1"
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvss_data": {
          "version": "3.1",
          "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "attack_vector": "NETWORK",
          "attack_complexity": "LOW",
          "attack_requirements": null,
          "privileges_required": "NONE",
          "user_interaction": "NONE",
          "vulnerable_system_confidentiality": "HIGH",
          "vulnerable_system_integrity": "HIGH",
          "vulnerable_system_availability": "HIGH",
          "subsequent_system_confidentiality": null,
          "subsequent_system_integrity": null,
          "subsequent_system_availability": null,
          "exploit_maturity": null,
          "confidentiality_requirements": null,
          "integrity_requirements": null,
          "availability_requirements": null,
          "modified_attack_vector": null,
          "modified_attack_complexity": null,
          "modified_attack_requirements": null,
          "modified_privileges_required": null,
          "modified_user_interaction": null,
          "modified_vulnerable_system_confidentiality": null,
          "modified_vulnerable_system_integrity": null,
          "modified_vulnerable_system_availability": null,
          "modified_subsequent_system_confidentiality": null,
          "modified_subsequent_system_integrity": null,
          "modified_subsequent_system_availability": null,
          "safety": null,
          "automatable": null,
          "recovery": null,
          "value_density": null,
          "vulnerability_response_effort": null,
          "provider_urgency": null,
          "base_score": 9.8,
          "base_severity": "CRITICAL"
        }
      }
    }
  },
  {
    "id": "CVE-2026-44186",
    "source_identifier": "user@apache.org",
    "published": "2026-06-08T16:16:40Z",
    "last_modified": "2026-07-23T07:10:00Z",
    "status": "Analyzed",
    "evaluator_comment": null,
    "evaluator_solution": null,
    "evaluator_impact": null,
    "cisa_exploit_add": null,
    "cisa_action_due": null,
    "cisa_required_action": null,
    "cisa_vulnerability_name": null,
    "descriptions": [
      {
        "lang": "en",
        "value": "Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in the mod_proxy_ftp module in Apache HTTP Server with an attacker controlled backend FTP server.\n\nThis issue affects undefined: from 2.4.0 through 2.4.67.\n\nUsers are recommended to upgrade to version 2.4.68, which fixes the issue."
      },
      {
        "lang": "es",
        "value": "Bucle con condición de salida inalcanzable ('Bucle infinito') vulnerabilidad en el módulo mod_proxy_ftp en el Servidor HTTP Apache con un servidor FTP de backend controlado por el atacante.\n\nEste problema afecta a indefinido: desde 2.4.0 hasta 2.4.67.\n\nSe recomienda a los usuarios actualizar a la versión 2.4.68, que corrige el problema."
      }
    ],
    "references": [
      {
        "url": "https://httpd.apache.org/security/vulnerabilities_24.html",
        "source": "user@apache.org",
        "tags": [
          "Vendor Advisory"
        ]
      },
      {
        "url": "http://www.openwall.com/lists/oss-security/2026/06/08/13",
        "source": "af854a3a-2127-422b-91ae-364da2661108",
        "tags": [
          "Mailing List",
          "Third Party Advisory"
        ]
      }
    ],
    "metrics": {
      "cvss_metric_v40": null,
      "cvss_metric_v31": [
        {
          "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type": "Secondary",
          "cvss_data": {
            "version": "3.1",
            "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "attack_vector": "NETWORK",
            "attack_complexity": "LOW",
            "privileges_required": "NONE",
            "user_interaction": "NONE",
            "scope": "UNCHANGED",
            "confidentiality_impact": "LOW",
            "integrity_impact": "LOW",
            "availability_impact": "LOW",
            "base_score": 7.3,
            "base_severity": "HIGH",
            "exploit_code_maturity": null,
            "remediation_level": null,
            "report_confidence": null,
            "temporal_score": null,
            "temporal_severity": null,
            "confidentiality_requirement": null,
            "integrity_requirement": null,
            "availability_requirement": null,
            "modified_attack_vector": null,
            "modified_attack_complexity": null,
            "modified_privileges_required": null,
            "modified_user_interaction": null,
            "modified_scope": null,
            "modified_confidentiality_impact": null,
            "modified_integrity_impact": null,
            "modified_availability_impact": null,
            "environmental_score": null,
            "environmental_severity": null
          },
          "exploitability_score": 3.9,
          "impact_score": 3.4
        }
      ],
      "cvss_metric_v30": null,
      "cvss_metric_v2": null
    },
    "weaknesses": [
      {
        "source": "user@apache.org",
        "type": "Secondary",
        "description": [
          {
            "lang": "en",
            "value": "CWE-835"
          }
        ]
      }
    ],
    "configurations": [
      {
        "operator": null,
        "negate": null,
        "nodes": [
          {
            "operator": "OR",
            "negate": false,
            "cpe_match": [
              {
                "vulnerable": true,
                "criteria": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
                "match_criteria_id": "03F07E89-F9BF-4913-8250-F79447AA6EBD",
                "version_start_including": "2.4.0",
                "version_start_excluding": null,
                "version_end_including": null,
                "version_end_excluding": "2.4.68"
              }
            ]
          }
        ]
      }
    ],
    "vendor_comments": null,
    "enrichment": {
      "cpe": [
        {
          "criteria": "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*",
          "vendor": "apache",
          "product": "http_server",
          "product_type": "a",
          "vulnerable": true,
          "version_start_including": "2.4.0",
          "version_start_excluding": null,
          "version_end_including": null,
          "version_end_excluding": "2.4.68",
          "affected_versions_first": "2.4.0",
          "affected_versions_last": "2.4.67"
        }
      ],
      "cwe": [
        {
          "id": 835,
          "owasptop10_2021": null,
          "name": "Loop with Unreachable Exit Condition ('Infinite Loop')",
          "description": "The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.",
          "capec_id": null,
          "scope": [
            "Availability"
          ],
          "impact": [
            "DoS: Amplification",
            "DoS: Resource Consumption (CPU)",
            "DoS: Resource Consumption (Memory)"
          ],
          "detection_method": [
            "Automated Static Analysis"
          ]
        }
      ],
      "epss_score": {
        "epss": 0.00583,
        "percentile": 0.46618,
        "date": "2026-09-23"
      },
      "cisa_kev": null,
      "vdeep_metric": {
        "available_versions": [
          "3.1"
        ],
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvss_data": {
          "version": "3.1",
          "vector_string": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "attack_vector": "NETWORK",
          "attack_complexity": "LOW",
          "attack_requirements": null,
          "privileges_required": "NONE",
          "user_interaction": "NONE",
          "vulnerable_system_confidentiality": "LOW",
          "vulnerable_system_integrity": "LOW",
          "vulnerable_system_availability": "LOW",
          "subsequent_system_confidentiality": null,
          "subsequent_system_integrity": null,
          "subsequent_system_availability": null,
          "exploit_maturity": null,
          "confidentiality_requirements": null,
          "integrity_requirements": null,
          "availability_requirements": null,
          "modified_attack_vector": null,
          "modified_attack_complexity": null,
          "modified_attack_requirements": null,
          "modified_privileges_required": null,
          "modified_user_interaction": null,
          "modified_vulnerable_system_confidentiality": null,
          "modified_vulnerable_system_integrity": null,
          "modified_vulnerable_system_availability": null,
          "modified_subsequent_system_confidentiality": null,
          "modified_subsequent_system_integrity": null,
          "modified_subsequent_system_availability": null,
          "safety": null,
          "automatable": null,
          "recovery": null,
          "value_density": null,
          "vulnerability_response_effort": null,
          "provider_urgency": null,
          "base_score": 7.3,
          "base_severity": "HIGH"
        }
      }
    }
  }
]

Content-Type: application/json
ratelimit-limit: 1
ratelimit-remaining: 0
ratelimit-reset: 1
x-ratelimit-limit-second: 1
x-ratelimit-remaining-second: 0
deepinfo-request-id: 5f0c6a8e-1b2d-4c3e-9f4a-7b8c9d0e1f2a

Request

What this example sends. Every parameter is documented on Latest Added; the exact request is in the code panel.

Parameter	Value
`vendor`query	`apache`
`product`query	`http_server`
`version`query	`2.4.49`
`size`query	`5`

Reference updated September 24, 2026

Request

Related Examples