Package · Debian

modsecurity-apache

14 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

High 7.5

CVE-2025-47947 Public exploit

ModSecurity Has Possible DoS Vulnerability

ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. Versions up to and including 2.9.8 are vulnerable to denial of service in one special case (in stable released versions): when the payload's content…

owasp-modsecurity ModSecurity modsecurity-apache modsecurity-apache Debian Ubuntu

May 21, 2025
Unscored —

CVE-2021-42717 Public exploit

ModSecurity 3.x through 3.0.5 mishandles excessively nested JSON objects. Crafted JSON objects with nesting tens-of-tho…

modsecurity modsecurity modsecurity-apache modsecurity-apache Debian Ubuntu

Dec 7, 2021
Unscored —

CVE-2013-2765 Public exploit EPSS 14%

The ModSecurity module before 2.7.4 for the Apache HTTP Server allows remote attackers to cause a denial of service (NU…

modsecurity-apache Debian

Jul 15, 2013
Unscored —

CVE-2012-4528 Public exploit EPSS 12%

The mod_security2 module before 2.7.0 for the Apache HTTP Server allows remote attackers to bypass rules, and deliver a…

modsecurity-apache Debian

Dec 28, 2012