Known vulnerabilities in jetty9 (Debian package) 9.4.26-1~bpo10+1

Vendor: Debian

Software: jetty9 (Debian package)

Version: 9.4.26-1~bpo10+1

Software CPE: cpe:2.3:o:debian:jetty9_debian_package:*:*:*:*:*:debian_linux:*:*

Website: https://www.debian.org/

Total vulnerabilities: 6

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9

Vulnerabilities (6)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU55644 - Incorrect Permission Assignment for Critical Resource CVE-2020-28169	CWE-732	Low	Public exploit available	No	9.4.16-0+deb10u1	08.08.2021	SB2020122416 SB2021080803
#VU55642 - Insufficient Session Expiration CVE-2021-34428	CWE-613	Low	No	No	9.4.16-0+deb10u1	08.08.2021	SB2021080801 SB2021080803 SB2021081922 and 25 more
#VU52385 - Improper input validation CVE-2020-27223	CWE-20	Medium	Public exploit available	No	9.4.16-0+deb10u1	21.04.2021	SB2021042107 SB2021063002 SB2021063034 and 19 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2020-27216	CWE-362	Low	No	No	9.4.16-0+deb10u1	23.10.2020	SB2020121307 SB2020121308 SB2021012011 and 27 more
#VU26320 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-10241	CWE-79	Low	No	No	9.4.16-0+deb10u1	23.03.2020	SB2020032710 SB2020072802 SB2020121701 and 14 more
#VU25067 - Improper input validation CVE-2019-10247	CWE-20	Medium	No	No	9.4.16-0+deb10u1	07.02.2020	SB2020011489 SB2020032710 SB2020042110 and 25 more