CVE-2007-6388: Apache HTTP Server

Medium severity, CVSS 4.3. EPSS: 75.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Apache HTTP Server: from 1.3.2, up to and including 1.3.39; from 2.0.35, up to and including 2.0.61; from 2.2.0, up to and including 2.2.6

Published 2008-01-08. Last modified 2026-06-16.