The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade sisuUpgrade maven-resolver-transport-wagonUpgrade plexus-cipherUpgrade maven-libUpgrade hawtjni-runtimeUpgrade jcl-over-slf4jUpgrade plexus-interpolationUpgrade maven-resolver-connector-basicUpgrade jboss-interceptors-1.2-apiUpgrade maven-openjdk17Upgrade guavaUpgrade httpcomponents-coreUpgrade mavenUpgrade maven-wagon-fileUpgrade apache-commons-codecUpgrade jsr-305Upgrade maven-wagonUpgrade apache-commons-lang3Upgrade sisu-injectUpgrade plexus-classworldsUpgrade apache-commons-loggingUpgrade cdi-apiUpgrade slf4jUpgrade geronimo-annotationUpgrade plexus-sec-dispatcherUpgrade plexus-utilsUpgrade aopallianceUpgrade maven-wagon-provider-apiUpgrade jsoupUpgrade google-guiceUpgrade maven-wagon-httpUpgrade maven-wagon-http-sharedUpgrade jansi-nativeUpgrade maven-shared-utilsUpgrade apache-commons-ioUpgrade maven-resolver-apiUpgrade httpcomponents-clientUpgrade guava20Upgrade maven-resolverUpgrade apache-commons-cliUpgrade maven-openjdk11Upgrade jansiUpgrade maven-openjdk8Upgrade maven-resolver-implUpgrade glassfish-el-apiUpgrade maven-resolver-spiUpgrade sisu-plexusUpgrade atinjectUpgrade maven-resolver-utilUpgrade plexus-containers-component-annotations | May 13, 2022 | Dec 2, 2020 |
| Amazon Linux Ami 2 | — | Upgrade httpcomponents-client-javadocUpgrade httpcomponents-client | Feb 23, 2023 | Dec 2, 2020 |
| Centos_linux | — | Upgrade glassfish-el-apiUpgrade jsr-305Upgrade google-guiceUpgrade maven-resolverUpgrade plexus-interpolationUpgrade sisu-injectUpgrade atinjectUpgrade geronimo-annotationUpgrade jcl-over-slf4jUpgrade jsoupUpgrade maven-resolver-spiUpgrade maven-wagon-httpUpgrade maven-wagon-provider-apiUpgrade httpcomponents-coreUpgrade maven-libUpgrade maven-resolver-implUpgrade plexus-utilsUpgrade plexus-classworldsUpgrade aopallianceUpgrade mavenUpgrade maven-wagon-http-sharedUpgrade guavaUpgrade jboss-interceptors-1.2-apiUpgrade jansi-nativeUpgrade httpcomponents-clientUpgrade maven-openjdk8Upgrade maven-openjdk17Upgrade sisu-plexusUpgrade guava20Upgrade maven-wagon-fileUpgrade plexus-sec-dispatcherUpgrade plexus-containers-component-annotationsUpgrade sisuUpgrade apache-commons-loggingUpgrade plexus-cipherUpgrade apache-commons-cliUpgrade maven-resolver-transport-wagonUpgrade apache-commons-lang3Upgrade maven-wagonUpgrade slf4jUpgrade apache-commons-ioUpgrade maven-shared-utilsUpgrade hawtjni-runtimeUpgrade maven-resolver-utilUpgrade apache-commons-codecUpgrade cdi-apiUpgrade maven-openjdk11Upgrade maven-resolver-apiUpgrade maven-resolver-connector-basicUpgrade jansi | May 13, 2022 | Dec 2, 2020 |
| Debian | — | Upgrade httpcomponents-client | Oct 13, 2020 | Oct 13, 2020 |
| Freebsd | — | Upgrade httpclientUpgrade jakarta-commons-httpclientUpgrade apache-commons-httpclientUpgrade maven | Nov 4, 2022 | Apr 19, 2021 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 33727619 for version 14.1.1.0.0.Apply the Patch Set Update (PSU) 33727616 for version 12.2.1.4.0. | Feb 28, 2022 | Dec 2, 2020 |
| Oracle_linux | — | Upgrade maven-resolver-spiUpgrade plexus-sec-dispatcherUpgrade plexus-interpolationUpgrade plexus-containers-component-annotationsUpgrade sisu-plexusUpgrade maven-libUpgrade apache-commons-loggingUpgrade maven-wagon-httpUpgrade maven-resolverUpgrade maven-wagonUpgrade maven-resolver-apiUpgrade maven-wagon-fileUpgrade sisu-injectUpgrade apache-commons-lang3Upgrade apache-commons-ioUpgrade maven-openjdk11Upgrade httpcomponents-coreUpgrade hawtjni-runtimeUpgrade maven-openjdk8Upgrade jansiUpgrade sisuUpgrade geronimo-annotationUpgrade apache-commons-cliUpgrade jsr-305Upgrade jansi-nativeUpgrade atinjectUpgrade maven-resolver-implUpgrade apache-commons-codecUpgrade slf4jUpgrade maven-wagon-http-sharedUpgrade maven-resolver-connector-basicUpgrade guava20Upgrade google-guiceUpgrade plexus-classworldsUpgrade maven-shared-utilsUpgrade maven-wagon-provider-apiUpgrade plexus-utilsUpgrade httpcomponents-clientUpgrade glassfish-el-apiUpgrade maven-openjdk17Upgrade maven-resolver-utilUpgrade maven-resolver-transport-wagonUpgrade jcl-over-slf4jUpgrade cdi-apiUpgrade mavenUpgrade plexus-cipherUpgrade jboss-interceptors-1.2-apiUpgrade guavaUpgrade jsoupUpgrade aopalliance | May 18, 2022 | Oct 8, 2020 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Oct 8, 2020 |
| Red_hat Jboss_eap | — | — | Apr 10, 2023 | Dec 2, 2020 |
| Redhat_linux | — | Upgrade maven-wagon-http-sharedUpgrade maven-resolver-transport-wagonUpgrade plexus-classworldsUpgrade cdi-apiUpgrade guavaUpgrade maven-resolver-implUpgrade sisu-plexusUpgrade jcl-over-slf4jUpgrade google-guiceUpgrade mavenUpgrade httpcomponents-clientUpgrade aopallianceUpgrade jsoupUpgrade apache-commons-codecUpgrade maven-resolver-utilUpgrade guava20Upgrade maven-openjdk17Upgrade hawtjni-runtimeUpgrade maven-shared-utilsUpgrade glassfish-el-apiUpgrade httpcomponents-coreUpgrade apache-commons-loggingUpgrade maven-wagon-httpUpgrade apache-commons-cliUpgrade jansi-nativeUpgrade maven-openjdk8Upgrade maven-resolver-connector-basicUpgrade maven-resolver-apiUpgrade jboss-interceptors-1.2-apiUpgrade maven-resolverUpgrade geronimo-annotationUpgrade maven-libUpgrade maven-wagon-provider-apiUpgrade sisuUpgrade plexus-containers-component-annotationsUpgrade maven-resolver-spiUpgrade plexus-utilsUpgrade slf4jUpgrade maven-openjdk11Upgrade apache-commons-ioUpgrade maven-wagon-fileUpgrade apache-commons-lang3Upgrade jsr-305Upgrade plexus-sec-dispatcherUpgrade maven-wagonUpgrade jansiUpgrade sisu-injectUpgrade atinjectNo solution existsUpgrade plexus-cipherUpgrade plexus-interpolation | May 13, 2022 | Dec 2, 2020 |
| Rocky_linux | — | Upgrade jansi-native | Mar 5, 2024 | Dec 2, 2020 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.1.5Upgrade Splunk Enterprise to version 9.0.10Upgrade Splunk Enterprise to version 9.2.2 | Sep 30, 2025 | Dec 2, 2020 |
| Suse | — | Upgrade mavenUpgrade maven-lib | Aug 9, 2024 | Dec 2, 2020 |
| Ubuntu | — | Upgrade libhttpclient-java (Ubuntu Pro) | Mar 22, 2023 | Dec 2, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub