Known vulnerabilities in Jersey

Vendor: Eclipse
Software: Jersey
Software CPE: cpe:2.3:a:eclipse:jersey:*:*:*:*:*:*:*:*
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jersey Jersey is affected by 3 known vulnerabilities: 2 medium, 1 low Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121703 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-12383
CWE-362 Medium
No
No
2.46, 3.0.17, 3.1.10, 4.0.0-M2 20.01.2026 SB2026012071
SB2026012079
SB20260120119
and 17 more
#VU94749 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2014-3643
CWE-611 Medium
No
No
- 26.07.2024 SB2019121506
SB2024072613
#VU52651 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28168
CWE-200 Low
No
No
3.0.2 27.04.2021 SB2021042713
SB2021081922
SB2022042255
and 13 more