Known vulnerabilities in Jetty

Vendor: Eclipse
Software: Jetty
Software CPE: cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
Total vulnerabilities: 47
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jetty Jetty is affected by 47 known vulnerabilities: 4 high, 28 medium, 15 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137401 - Use of Non-Canonical URL Paths for Authorization Decisions
CVE-2026-8384
CWE-647 Medium
No
No
12.0.35, 12.1.9 13.07.2026 SB2026071349
#VU137400 - Missing release of memory after effective lifetime
CVE-2024-7708
CWE-401 Medium
No
No
10.0.23, 11.0.23 13.07.2026 SB2026071350
#VU137399 - Improper input validation
CVE-2026-6790
CWE-20 Medium
No
No
9.4.61, 10.0.29, 11.0.29, 12.0.35, 12.1.9 13.07.2026 SB2026071349
#VU137398 - Exposure of sensitive information to an unauthorized actor
CVE-2026-10051
CWE-200 Medium
No
No
12.0.36, 12.1.10 13.07.2026 SB2026071348
#VU137397 - Improper Handling of Alternate Encoding
CVE-2026-10050
CWE-173 High
No
No
9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 13.07.2026 SB2026071348
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332
CWE-444 Medium
No
No
12.0.33, 12.1.7 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 9 more
#VU125816 - Sensitive Information in Resource Not Removed Before Reuse
CVE-2026-5795
CWE-226 High
No
No
12.0.34, 12.1.8 11.04.2026 SB2026041112
SB20260507308
SB2026052932
and 3 more
#VU123577 - Missing release of memory after effective lifetime
CVE-2026-1605
CWE-401 Medium
No
No
12.0.32, 12.1.6 05.03.2026 SB2026030559
SB2026050522
SB2026061616
and 2 more
#VU123576 - Improper input validation
CVE-2025-11143
CWE-20 Low
No
No
12.0.31, 12.1.5 05.03.2026 SB2026030558
SB2026040716
SB2026042070
and 10 more
#VU114316 - Resource exhaustion
CVE-2025-5115
CWE-400 Medium
No
No
9.4.58.v20250814, 10.0.26, 11.0.26 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009
CWE-404 Medium
No
No
9.4.57 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU108836 - Resource exhaustion
CVE-2025-1948
CWE-400 Medium
No
No
12.0.17 09.05.2025 SB2025050924
SB2025051562
SB2025063009
and 18 more
#VU98519 - Resource exhaustion
CVE-2024-6762
CWE-400 Medium
No
No
10.0.18, 11.0.18, 12.0.4 14.10.2024 SB20241014113
SB2024110897
SB2025040503
and 2 more
#VU98518 - Resource exhaustion
CVE-2024-9823
CWE-400 Medium
No
No
9.4.54.v20240207, 10.0.18, 11.0.18, 12.0.3 14.10.2024 SB20241014112
SB2024120637
SB2025011709
and 14 more
#VU98517 - Resource exhaustion
CVE-2024-8184
CWE-400 Medium
No
No
9.4.56.v20240826, 10.0.24, 11.0.24, 12.0.9 14.10.2024 SB20241014108
SB2024101836
SB2024112849
and 38 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763
CWE-918 Medium
No
No
9.4.57.v20241219, 12.0.12 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU86808 - Resource exhaustion
CVE-2024-22201
CWE-400 Medium
No
No
9.4.54.v20240208, 10.0.20, 11.0.20, 12.0.6 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
9.4.53.v20231009, 10.0.17, 11.0.17, 12.0.2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU81726 - Integer overflow
CVE-2023-36478
CWE-190 Medium
No
No
9.4.53.v20230927, 10.0.16, 11.0.16 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80793 - Improper Authorization
CVE-2023-41900
CWE-285 Low
No
No
9.4.52.v20230823, 10.0.16, 11.0.16 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 29 more


Showing elements 1 - 20 out of 47