Gulf CybersecurityBaseline
العربيةCheck your domain
Kuwait City at night from space, its streets in amber light along the dark water of the bayRiyadh at night from space, a wide grid of white and amber light in the desertDubai at night from space, with Palm Jumeirah lit in the sea below the coast roadDoha at night from space, the city's lights spreading from the bay along its roadsBahrain at night from space, the island's towns joined by lit roads in a dark seaMuscat and Al Seeb at night from space, the coast road and the airport in amber light beside a dark sea

CVE-2021-42013 Apache HTTP Server

An exploited vulnerability CISA catalogued on 3 November 2021 in Apache HTTP Server, and this page follows how many of the Arabian Gulf's sites still announce an affected version with every census.

Exposure today

Catalogued on 3 November 2021

  • 0.0% of the Arabian Gulf's sites announcing a full Apache HTTP Server version announce an affected one 0 of 123 announcing a full version Measured on 23 October 2026 by reading the first page of every live domain in the Arabian Gulf, and 10,101 websites answered.

Apache HTTP Server Path Traversal Vulnerability

Apache HTTP Server contains a path traversal vulnerability that allows an attacker to perform remote code execution if files outside directories configured by Alias-like directives are not under default require all denied or if CGI scripts are enabled. This CVE ID resolves an incomplete patch for CVE-2021-41773.

Used in ransomware campaigns

Each state has its own figure on its own page, never set beside another.

The series

Every census since the index began following this vulnerability, newest first.

  1. 0.0% 23 October 2026 0 of 123 announcing a full version

Affected versions

As NVD gives them, and what each site announces is held against them.

  • Apache HTTP Server v = 2.4.49
  • Apache HTTP Server v = 2.4.50

The fix is to move Apache HTTP Server to a version outside these ranges, or apply what its maker advises, and then stop announcing the version in the site's headers.

CISA set 17 November 2021 as the deadline for US federal agencies to fix it.

How to cite

0.0% of the sites in the Arabian Gulf announcing a full Apache HTTP Server version announce one affected by the exploited vulnerability CVE-2021-42013

Source: Gulf Cybersecurity Baseline, readiness index, census of 23 October 2026, https://gbaseline.3li.info/en/readiness/cve-2021-42013/

0.0٪ من مواقع الخليج العربي التي تعلن إصدار خادم Apache كاملاً تعلن إصداراً مصاباً بالثغرة المستغلة CVE-2021-42013

المصدر خط الأساس الخليجي للأمن السيبراني مؤشر الاستعدادية بقياس 23 أكتوبر 2026 على https://gbaseline.3li.info/readiness/cve-2021-42013/

Read more