CWE-443 – HTTP response splitting (Deprecated) | Common Weakness Enumeration (CWE)

Overview

CWE-443 is a deprecated classification in the CWE framework. It remains in the catalog for historical hierarchy and CVE traceability.

Security impact: Security impact: Low / none for active exploitation (deprecated catalog entry).
Historical note: Historical note: MITRE periodically reorganizes the CWE tree; prefer current, non-deprecated weaknesses for threat modeling.

This weakness can be found at CWE-113.

These CVEs are mapped to this weakness in this database and kept for traceability and search.

CVE	Published	Summary
CVE-2026-33523	2026-05-04	HTTP response splitting vulnerability in multiple Apache HTTP Server modules with untrusted or compromised backend servers. This issue affects Apache HTTP Server: from through 2.4.66. Users are reco…

Name: CWE Community
Date: 2006-07-19
Version: Draft 3
Comment: Submitted by members of the CWE community to extend early CWE versions

Date	Name	Version	Importance	Comment
2008-09-08	CWE Content Team	1.0	—	updated Relationships
2009-10-29	CWE Content Team	1.6	—	updated Relationships
2021-07-20	CWE Content Team	4.5	—	updated Name
2023-06-29	CWE Content Team	4.12	—	updated Mapping_Notes