PatchTheCVEapache stats vulnerabilities
Recent CVEs affecting apache stats products. 2 tracked.
apache stats has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2007-02-16. Highest priority: CVE-2007-0930 (score 48/100).
- CVE-2007-0975 MEDIUM 5.0 DOWNGRADE Variable extraction vulnerability in Ian Bezanson Apache Stats before 0.0.3 beta allows attackers to overwrite
- CVE-2007-0930 HIGH 7.5 DOWNGRADE Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables
FAQ
How do I fix apache stats vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is apache stats being exploited right now?
None of the tracked apache stats CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which apache stats CVE should I patch first?
CVE-2007-0930 currently ranks highest (48/100): Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables.