Skip to content
Noroxi

CWE-444 · 425 records

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

CVEs in this class

426 records

  • CVE-2022-22536
    99Now

    SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher

    CriticalCVSS 10.0KEVWeaponizedEPSS 97%

    sap · content serverFeb 9, 2022

  • CVE-2023-41265
    95Now

    An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023

    CriticalCVSS 9.9KEVWeaponizedEPSS 88%

    qlik · qlik senseAug 29, 2023

  • CVE-2023-48365
    83Now

    Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683.

    CriticalCVSS 9.9KEVWeaponizedEPSS 47%

    qlik · qlik senseNov 15, 2023

  • CVE-2026-48710
    77This week

    Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks

    MediumCVSS 6.5KEVWeaponizedEPSS 70%

    encode · starletteMay 26, 2026

  • CVE-2023-25690
    64This week

    Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

    CriticalCVSS 9.8Proof of conceptEPSS 84%

    apache · http serverMar 7, 2023

  • CVE-2026-88773
    60This week

    HTTP Request Smuggling

    CriticalCVSS 9.3WeaponizedEPSS 3%

    citrix · netscaler application delivery controllerSep 27, 2026

  • CVE-2025-55315
    59Plan

    ASP.NET Security Feature Bypass Vulnerability

    CriticalCVSS 9.9Proof of conceptEPSS 66%

    microsoft · asp.net coreOct 14, 2025

  • CVE-2020-9490
    57Plan

    Apache HTTP Server versions 2.4.20 to 2.4.43.

    HighCVSS 7.5No exploitEPSS 88%

    apache · http serverAug 7, 2020

  • CVE-2021-30180
    57Plan

    Apache Dubbo RCE on customers via Condition route poisoning (Unsafe YAML unmarshaling)

    CriticalCVSS 9.8Proof of conceptEPSS 60%

    apache · dubboJun 1, 2021

  • CVE-2019-15605
    56Plan

    HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed

    CriticalCVSS 9.8Proof of conceptEPSS 57%

    nodejs · node.jsFeb 7, 2020

  • CVE-2022-32214
    51Plan

    The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP re

    MediumCVSS 6.5No exploitEPSS 81%

    llhttp · llhttpJul 14, 2022

  • CVE-2022-32215
    47Plan

    The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding hea

    MediumCVSS 6.5No exploitEPSS 70%

    llhttp · llhttpJul 14, 2022

  • CVE-2020-11993
    47Plan

    Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, loggin

    HighCVSS 7.5No exploitEPSS 56%

    apache · http serverAug 7, 2020

  • CVE-2022-22720
    47Plan

    HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier

    CriticalCVSS 9.8Proof of conceptEPSS 28%

    apache · http serverMar 14, 2022

  • CVE-2017-7658
    45Plan

    In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when pr

    CriticalCVSS 9.8No exploitEPSS 19%

    eclipse · jettyJun 26, 2018

  • CVE-2021-33037
    43Plan

    Incorrect Transfer-Encoding handling with HTTP/1.0

    MediumCVSS 5.3No exploitEPSS 74%

    apache · tomcatJul 12, 2021

  • CVE-2017-7657
    43Plan

    In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled

    CriticalCVSS 9.8No exploitEPSS 14%

    eclipse · jettyJun 26, 2018

  • CVE-2015-5739
    42Plan

    The net/http library in net/textproto/reader.go in Go before 1.4.3 does not properly parse HTTP header keys, which allows remote attackers t

    CriticalCVSS 9.8No exploitEPSS 9%

    golang · goOct 18, 2017

  • CVE-2022-29361
    41Plan

    Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HT

    CriticalCVSS 9.8Proof of conceptEPSS 8%

    palletsprojects · werkzeugMay 24, 2022

  • CVE-2019-20445
    40Plan

    HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Tr

    CriticalCVSS 9.1No exploitEPSS 13%

    netty · nettyJan 29, 2020

  • CVE-2021-45468
    40Plan

    Imperva Web Application Firewall (WAF) before 2021-12-23 allows remote unauthenticated attackers to use "Content-Encoding: gzip" to evade WA

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    imperva · web application firewallJan 14, 2022

  • CVE-2020-10108
    40Plan

    In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability.

    CriticalCVSS 9.8No exploitEPSS 3%

    twisted · twistedMar 12, 2020

  • CVE-2015-5740
    40Plan

    The net/http library in net/http/transfer.go in Go before 1.4.3 does not properly parse HTTP headers, which allows remote attackers to condu

    CriticalCVSS 9.8No exploitEPSS 3%

    golang · goOct 18, 2017

  • CVE-2020-10109
    40Plan

    In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability.

    CriticalCVSS 9.8No exploitEPSS 3%

    twisted · twistedMar 12, 2020

  • CVE-2019-17559
    40Plan

    There is a vulnerability in Apache Traffic Server 6.0.0 to 6.2.3, 7.0.0 to 7.1.8, and 8.0.0 to 8.0.5 with a smuggling attack and scheme pars

    CriticalCVSS 9.8No exploitEPSS 3%

    apache · traffic serverMar 23, 2020

All vulnerability classes