CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2022-22720
Critical (9.8). EPSS 28% chance of exploitation in the next 30 days.
Apache HTTP Server 2.4.52 and earlier fails to close inbound connection when errors are encountered discarding the request body, exposing the server to HTTP Request Smuggling
Severity
- EPSS
- 28% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
- CWE
- CWE-444
- Published
- Modified
- Record from
- the NVD, synced
Affected
- apache:http_server
- apple:mac_os_x
- apple:macos
- debian:debian_linux
- fedoraproject:fedora
- oracle:enterprise_manager_ops_center
- oracle:http_server
- oracle:zfs_storage_appliance_kit