Known vulnerabilities in Jetty 9.4.18.v20190429

Vendor: Eclipse
Software: Jetty
Version: 9.4.18.v20190429
Software CPE: cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Jetty version 9.4.18.v20190429 Jetty 9.4.18.v20190429 is affected by 23 vulnerabilities: 2 high, 15 medium, 6 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137399 - Improper input validation
CVE-2026-6790
CWE-20 Medium
No
No
9.4.61, 10.0.29, 11.0.29, 12.0.35, 12.1.9 13.07.2026 SB2026071349
#VU137397 - Improper Handling of Alternate Encoding
CVE-2026-10050
CWE-173 High
No
No
9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 13.07.2026 SB2026071348
SB2026081819
SB2026083180
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332
CWE-444 Medium
No
No
12.0.33, 12.1.7 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 11 more
#VU123576 - Improper input validation
CVE-2025-11143
CWE-20 Low
No
No
12.0.31, 12.1.5 05.03.2026 SB2026030558
SB2026040716
SB2026042070
and 12 more
#VU114316 - Resource exhaustion
CVE-2025-5115
CWE-400 Medium
No
No
9.4.58.v20250814, 10.0.26, 11.0.26 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009
CWE-404 Medium
No
No
9.4.57 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU98518 - Resource exhaustion
CVE-2024-9823
CWE-400 Medium
No
No
9.4.54.v20240207, 10.0.18, 11.0.18, 12.0.3 14.10.2024 SB20241014112
SB2024120637
SB2025011709
and 14 more
#VU98517 - Resource exhaustion
CVE-2024-8184
CWE-400 Medium
No
No
9.4.56.v20240826, 10.0.24, 11.0.24, 12.0.9 14.10.2024 SB20241014108
SB2024101836
SB2024112849
and 38 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763
CWE-918 Medium
No
No
9.4.57.v20241219, 12.0.12 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU86808 - Resource exhaustion
CVE-2024-22201
CWE-400 Medium
No
No
9.4.54.v20240208, 10.0.20, 11.0.20, 12.0.6 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Public exploit available
Exploited
9.4.53.v20231009, 10.0.17, 11.0.17, 12.0.2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU81726 - Integer overflow
CVE-2023-36478
CWE-190 Medium
No
No
9.4.53.v20230927, 10.0.16, 11.0.16 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80793 - Improper Authorization
CVE-2023-41900
CWE-285 Low
No
No
9.4.52.v20230823, 10.0.16, 11.0.16 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 29 more
#VU80792 - Improper input validation
CVE-2023-36479
CWE-20 Medium
No
No
9.4.52.v20230823, 10.0.16, 11.0.16 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167
CWE-444 Medium
No
No
9.4.52.v20230823, 10.0.16, 11.0.16, 12.0.1 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU75218 - Resource exhaustion
CVE-2023-26048
CWE-400 Medium
No
No
9.4.51.v20230217, 10.0.14, 11.0.14 18.04.2023 SB2023041842
SB2023051753
SB2023060701
and 55 more
#VU75217 - Improper input validation
CVE-2023-26049
CWE-20 Low
No
No
9.4.51.v20230217, 10.0.14, 11.0.14 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU65831 - Improper input validation
CVE-2022-2047
CWE-20 Low
No
No
9.4.47.v20220610, 10.0.10, 11.0.10 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU65830 - Resource Management Errors
CVE-2022-2048
CWE-399 Medium
No
No
9.4.47.v20220610, 10.0.10, 11.0.10 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 44 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428
CWE-613 Low
No
No
9.4.41.v20210516, 10.0.3, 11.0.3 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more


Showing elements 1 - 20 out of 23