Apache Mod Jk vulnerabilities

2 CVEs affecting Apache Mod Jk, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2008-5519, published 2009-04-09.

More from Apache.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-6258, published 2008-02-19. High severity, CVSS 7.5. EPSS: 41.5% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in the legacy mod_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary code via a long (1) Host header, or (2) Hostname within a…
• CVE-2008-5519, published 2009-04-09. Low severity, CVSS 2.6. EPSS: 7.3% chance of exploitation in the next 30 days. The JK Connector (aka mod_jk) 1.2.0 through 1.2.26 in Apache Tomcat allows remote attackers to obtain sensitive information via an arbitrary request from an HTTP client, in opportunistic…