Unrated severityNVD Advisory· Published May 13, 2008· Updated Jun 16, 2026
CVE-2008-2168
CVE-2008-2168
Description
Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded URLs that are not properly handled when displaying the 403 Forbidden error page.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
68cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*+ 48 more
- cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.32:beta:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.34:beta:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.49:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.50:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.51:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.52:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.53:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.54:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.55:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.56:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.57:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.58:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.59:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.60:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.61:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.0.9:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.1.4:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.1.5:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.1.6:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.1.7:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.1.8:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*
- cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*
- osv-coords18 versionspkg:apk/chainguard/apache2pkg:apk/chainguard/apache2-compatpkg:apk/chainguard/apache2-configpkg:apk/chainguard/apache2-config-compatpkg:apk/chainguard/apache2-datapkg:apk/chainguard/apache2-devpkg:apk/chainguard/apache2-docpkg:apk/chainguard/apache2-oci-entrypointpkg:apk/chainguard/apache2-utilspkg:apk/wolfi/apache2pkg:apk/wolfi/apache2-compatpkg:apk/wolfi/apache2-configpkg:apk/wolfi/apache2-config-compatpkg:apk/wolfi/apache2-datapkg:apk/wolfi/apache2-devpkg:apk/wolfi/apache2-docpkg:apk/wolfi/apache2-oci-entrypointpkg:apk/wolfi/apache2-utils
< 0+ 17 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
Patches
Vulnerability mechanics
References
15- www.securityfocus.com/bid/29112nvdExploit
- h20000.www2.hp.com/bizsupport/TechSupport/Document.jspnvd
- marc.infonvd
- marc.infonvd
- secunia.com/advisories/31651nvd
- secunia.com/advisories/34219nvd
- secunia.com/advisories/35650nvd
- securityreason.com/securityalert/3889nvd
- www.securityfocus.com/archive/1/491862/100/0/threadednvd
- www.securityfocus.com/archive/1/491901/100/0/threadednvd
- www.securityfocus.com/archive/1/491930/100/0/threadednvd
- www.securityfocus.com/archive/1/491967/100/0/threadednvd
- www.ubuntu.com/usn/USN-731-1nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/42303nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5143nvd
News mentions
0No linked articles in our index yet.