How severe is CVE-2011-3348?

CVE-2011-3348 has a CVSS 2.0 base score of 4.3, rated medium severity.

Is CVE-2011-3348 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 22% (97th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2011-3348?

CVE-2011-3348 primarily affects Redhat Jboss Enterprise Web Server. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2011-3348?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2011-3348 published?

CVE-2011-3348 was published on 2011-09-20 and last updated on 2026-06-16.

CVE-2011-3348

CVE-2011-3348 is a medium-severity vulnerability in Redhat Jboss Enterprise Web Server with a CVSS 2.0 base score of 4.3. Its EPSS exploit-prediction score of 22% places it in the 97th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-400.

Key facts

Severity: Medium (CVSS 2.0 base score 4.3)
EPSS exploit prediction: 22% (97th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-400
Affected product: Redhat Jboss Enterprise Web Server
Published: 2011-09-20
Last modified: 2026-06-16

Description

The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request.

Frequently asked questions

What is CVE-2011-3348?: The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21, when used with mod_proxy_balancer in certain configurations, allows remote attackers to cause a denial of service (temporary "error state" in the backend server) via a malformed HTTP request.
How severe is CVE-2011-3348?: CVE-2011-3348 has a CVSS 2.0 base score of 4.3, rated medium severity.
Is CVE-2011-3348 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 22% (97th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2011-3348?: CVE-2011-3348 primarily affects Redhat Jboss Enterprise Web Server. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2011-3348?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2011-3348 published?: CVE-2011-3348 was published on 2011-09-20 and last updated on 2026-06-16.

References

Affected products (2)

cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
cpe:2.3:a:redhat:jboss_enterprise_web_server:1.0.0:*:*:*:*:*:*:*

More vulnerabilities in Redhat Jboss Enterprise Web Server

CVE-2014-3699 — Critical (CVSS 9.8): eDeploy has RCE via cPickle deserialization of untrusted data
CVE-2014-3700 — Critical (CVSS 9.8): eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data
CVE-2011-3923 — Critical (CVSS 9.8): Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class…
CVE-2015-7501 — Critical (CVSS 9.8): Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and…
CVE-2016-8735 — Critical (CVSS 9.8): Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before…
CVE-2016-5018 — Critical (CVSS 9.1): In Apache Tomcat 9.0.0.M1 to 9.0.0.M9, 8.5.0 to 8.5.4, 8.0.0.RC1 to 8.0.36, 7.0.0 to 7.0.70 and 6.0.0 to 6.0.45 a…

All CVEs affecting Redhat Jboss Enterprise Web Server →

Other CWE-400 (Uncontrolled Resource Consumption) vulnerabilities

CVE-2026-46775 — Critical (CVSS 9.9): Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are affected are 24.2.0-26.1.0.…
CVE-2025-61303 — Critical (CVSS 9.8): Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a…
CVE-2025-43193 — Critical (CVSS 9.8): The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7,…
CVE-2025-24269 — Critical (CVSS 9.8): The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4. An app may be able to…
CVE-2025-24264 — Critical (CVSS 9.8): The issue was addressed with improved memory handling. This issue is fixed in Safari 18.4, iOS 18.4 and iPadOS 18.4,…
CVE-2025-24260 — Critical (CVSS 9.8): The issue was addressed with improved memory handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5,…

Browse all CWE-400 (Uncontrolled Resource Consumption) vulnerabilities →

Threat intelligence

Threat-intel indicators referencing this CVE:

221.161.235.168 (ipv4-addr)
124.6.178.98 (ipv4-addr)
103.20.122.54 (ipv4-addr)
144.22.150.242 (ipv4-addr)
211.253.10.61 (ipv4-addr)
121.164.135.251 (ipv4-addr)
188.59.178.22 (ipv4-addr)
121.78.158.30 (ipv4-addr)