Apache HTTP Server Version with Possible Known Vulnerabilities

Summary

The server disclosed the version of a server side technology it is running via an HTTP response header, but only partially, e.g. the major and minor version without the patch level. Some releases with that partial version are affected by known vulnerabilities, but the version does not include enough information to be certain that the server is running one of them, so this alert is raised at low risk and low confidence. The version, header and the vulnerabilities which affect any release with that version, listed by severity, are given in the other info. See the references for the details of each. Note that some distributions backport security fixes without changing the version number, so check whether the fixes have actually been applied before reporting these as confirmed.