CVE:CVE-2019-10092
CNNVD:CNNVD-201908-1144
Apache HTTP Server是美国阿帕奇（Apache）基金会的一款开源网页服务器。该服务器具有快速、可靠且可通过简单的API进行扩充的特点。
Apache httpd中的mod_proxy错误页面存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。以下产品及版本受到影响：Apache httpd 2.4.39版本，2.4.38版本，2.4.37版本，2.4.35版本，2.4.34版本，2.4.33版本，2.4.30版本，2.4.29版本，2.4.28版本，2.4.27版本，2.4.26版本，2.4.25版本，2.4.23版本，2.4.20版本，2.4.18版本，2.4.17版本，2.4.16版本，2.4.12版本，2.4.10版本，2.4.9版本，2.4.7版本，2.4.6版本，2.4.4版本，2.4.3版本，2.4.2版本，2.4.1版本，2.4.0版本。
solution:Upgrade apache http_server to a higher version than 2.4.39,and avoid the version [2.4.0,2.4.39]; Upgrade opensuse leap to a higher version than 15.0,15.1,and avoid the version 15.0,15.1; Upgrade debian debian_linux to a higher version than 8.0,9.0,10.0,and avoid the version 8.0,9.0,10.0; Upgrade redhat software_collection to a higher version than 1.0,and avoid the version 1.0; Upgrade fedoraproject fedora to a higher version than 30,and avoid the version 30; Upgrade canonical ubuntu_linux to a higher version than 16.04,18.04,19.04,and avoid the version 16.04,18.04,19.04; Upgrade netapp clustered_data_ontap to a higher version than 9.5,9.6,9.6:p1,9.6:p3,9.6:p4,9.6:p7,9.6:p8,and avoid the version (,9.5],9.6,9.6:p1,9.6:p3,9.6:p4,9.6:p7,9.6:p8; Upgrade oracle communications_element_manager to a higher version than 8.0.0,8.1.0,8.1.1,8.2.0,and avoid the version 8.0.0,8.1.0,8.1.1,8.2.0; Upgrade oracle enterprise_manager_ops_center to a higher version than 12.3.3,12.4.0,and avoid the version 12.3.3,12.4.0; Upgrade oracle secure_global_desktop to a higher version than 5.4,5.5,and avoid the version 5.4,5.5