CVE-2020-11984

PoC —

CVSS 3.1

9.8 critical

EPSS

90%p100

Published

Aug 7, 2020 (Aug 7, 2020)

Modified

Jun 17, 2026

Description

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

Vendors: apache netapp canonical debian fedoraproject opensuse oracle
Products: http server, clustered data ontap, ubuntu linux, debian linux, fedora, leap, communications element manager, communications session report manager, communications session route manager, enterprise manager ops center, hyperion infrastructure technology, instantis enterprisetrack
Weakness: CWE-120
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (90.0%)

In the news2 stories

Google Researcher Reported 3 Flaws in Apache Web Server Software

The Hacker NewsAug 25, 06:52 UTC · Aug 25, 2020Exploit / PoC in the wildCVE-2020-9490 CVE-2020-11984 CVE-2020-11993

60

Google Project Zero expert found 3 flaws in Apache Web Server

Security AffairsAug 25, 08:09 UTC · Aug 25, 2020Vulnerability CVE-2020-9490 CVE-2020-11984 CVE-2020-11993

47