Known vulnerabilities in jetty9 (Debian package)
Vendor:
Debian
Software:
jetty9 (Debian package)
Software CPE:
cpe:2.3:o:debian:jetty9_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
20
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9
Breakdown by Severity Chart
9.4.57-1.1~deb13u1
9.4.57-1.1~deb12u1
9.4.57-0+deb12u1
9.4.50-4+deb12u3
9.4.50-4+deb11u2
9.4.50-4+deb12u2
9.4.50-4+deb11u1
9.4.50-4+deb12u1
9.4.39-3+deb11u2
9.4.39-3+deb11u1
9.4.16-0+deb10u1
9.4.33-1~bpo10+1
9.4.33
9.4.33-1
9.4.31-1~bpo10+1
9.4.31
9.4.31-1
9.4.29
9.4.29-1
9.4.28-1~bpo10+1
9.4.28
9.4.26
9.4.15
9.2.26
9.2.21
9.4.28-1
9.4.27-1
9.4.26-1~bpo10+1
9.4.26-1
9.4.18-2
9.4.18-1
9.4.15-1
9.4.14-1
9.2.26-1~bpo9+1
9.2.14-1~bpo8+1
9.2.16-1~bpo8+1
9.2.18-1~bpo8+1
9.2.19-2~bpo8+1
9.2.21-1+deb9u1
9.2.24-1~bpo9+1
9.2.24-1
9.2.25-1
9.2.26-1
9.2.23-1~bpo9+1
9.2.23-1~bpo8+1
9.2.23-1
9.2.22-3
9.2.22-1
9.2.22-2
9.2.14-1
9.2.15-1
9.2.16-1
9.2.18-1
9.2.19-1
9.2.19-2
9.2.20-1
9.2.21-1
9.2.21-1~bpo8+1
Vulnerabilities (20)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU114316 - Resource exhaustion CVE-2025-5115 |
CWE-400 | Medium | 9.4.57-1.1~deb12u1, 9.4.57-1.1~deb13u1 | 21.08.2025 |
SB2025082101 SB2025082751 SB20250828111 and 42 more |
||
| #VU98519 - Resource exhaustion CVE-2024-6762 |
CWE-400 | Medium | 9.4.57-0+deb12u1 | 14.10.2024 |
SB20241014113 SB2024110897 SB2025040503 and 2 more |
||
| #VU98518 - Resource exhaustion CVE-2024-9823 |
CWE-400 | Medium | 9.4.57-0+deb12u1 | 14.10.2024 |
SB20241014112 SB2024120637 SB2025011709 and 14 more |
||
| #VU98517 - Resource exhaustion CVE-2024-8184 |
CWE-400 | Medium | 9.4.57-0+deb12u1 | 14.10.2024 |
SB20241014108 SB2024101836 SB2024112849 and 38 more |
||
| #VU86808 - Resource exhaustion CVE-2024-22201 |
CWE-400 | Medium | 9.4.50-4+deb11u2, 9.4.50-4+deb12u3 | 26.02.2024 |
SB2024022652 SB2024030711 SB2024030845 and 43 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 9.4.50-4+deb11u1, 9.4.50-4+deb12u2 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 651 more |
||
| #VU81726 - Integer overflow CVE-2023-36478 |
CWE-190 | Medium | 9.4.50-4+deb11u1, 9.4.50-4+deb12u2 | 10.10.2023 |
SB2023101018 SB2023102640 SB2023103106 and 53 more |
||
| #VU80793 - Improper Authorization CVE-2023-41900 |
CWE-285 | Low | 9.4.39-3+deb11u2, 9.4.50-4+deb12u1 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023102621 and 29 more |
||
| #VU80792 - Improper input validation CVE-2023-36479 |
CWE-20 | Medium | 9.4.39-3+deb11u2, 9.4.50-4+deb12u1 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023102621 and 48 more |
||
| #VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40167 |
CWE-444 | Medium | 9.4.39-3+deb11u2, 9.4.50-4+deb12u1 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023101760 and 68 more |
||
| #VU75218 - Resource exhaustion CVE-2023-26048 |
CWE-400 | Medium | 9.4.39-3+deb11u2, 9.4.50-4+deb12u1 | 18.04.2023 |
SB2023041842 SB2023051753 SB2023060701 and 55 more |
||
| #VU75217 - Improper input validation CVE-2023-26049 |
CWE-20 | Low | 9.4.39-3+deb11u2, 9.4.50-4+deb12u1 | 18.04.2023 |
SB2023041842 SB2023051821 SB2023060836 and 78 more |
||
| #VU65831 - Improper input validation CVE-2022-2047 |
CWE-20 | Low | 9.4.39-3+deb11u1 | 27.07.2022 |
SB2022072723 SB2022080103 SB2022080260 and 41 more |
||
| #VU65830 - Resource Management Errors CVE-2022-2048 |
CWE-399 | Medium | 9.4.39-3+deb11u1 | 27.07.2022 |
SB2022072723 SB2022080103 SB2022080260 and 44 more |
||
| #VU55644 - Incorrect Permission Assignment for Critical Resource CVE-2020-28169 |
CWE-732 | Low | 9.4.16-0+deb10u1 | 08.08.2021 |
SB2020122416 SB2021080803 |
||
| #VU55642 - Insufficient Session Expiration CVE-2021-34428 |
CWE-613 | Low | 9.4.16-0+deb10u1 | 08.08.2021 |
SB2021080801 SB2021080803 SB2021081922 and 25 more |
||
| #VU52385 - Improper input validation CVE-2020-27223 |
CWE-20 | Medium | 9.4.16-0+deb10u1 | 21.04.2021 |
SB2021042107 SB2021063002 SB2021063034 and 19 more |
||
| #VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2020-27216 |
CWE-362 | Low | 9.4.16-0+deb10u1 | 23.10.2020 |
SB2020121307 SB2020121308 SB2021012011 and 27 more |
||
| #VU26320 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-10241 |
CWE-79 | Low | 9.4.16-0+deb10u1 | 23.03.2020 |
SB2020032710 SB2020072802 SB2020121701 and 14 more |
||
| #VU25067 - Improper input validation CVE-2019-10247 |
CWE-20 | Medium | 9.4.16-0+deb10u1 | 07.02.2020 |
SB2020011489 SB2020032710 SB2020042110 and 25 more |