Known vulnerabilities in Jetty 9.4.21.v20190926
Vendor:
Eclipse
Software:
Jetty
Version:
9.4.21.v20190926
Software CPE:
cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
Website:
https://eclipse.org
Total vulnerabilities:
24
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Vulnerabilities by Severity
12.1.12
12.0.38
11.0.31
11.0.30
11.0.29
11.0.28
11.0.27
10.0.31
10.0.30
10.0.29
10.0.28
10.0.27
9.4.63
9.4.62
9.4.61
9.4.60
9.4.59
12.1.11
12.0.37
12.0.36
12.1.10
12.1.9
12.0.35
12.0.34
12.1.8
12.0.33
12.1.7
12.1.6
12.0.32
12.1.5
12.0.31
12.1.4
12.0.30
12.1.3
12.0.29
12.1.2
12.0.28
12.0.27
12.1.1
12.0.26
11.0.26
10.0.26
9.4.58.v20250814
12.0.25
12.1.0
12.0.24
12.0.23
12.0.22
12.0.21
12.0.20
12.0.19
12.0.18
11.0.25
10.0.25
12.0.17
9.4.57.v20241219
9.4.57
12.0.16
12.0.15
12.0.14
12.0.13
11.0.24
10.0.24
9.4.56.v20240826
11.0.23
10.0.23
12.0.12
12.0.11
11.0.22
10.0.22
9.4.55.v20240627
-
12.0.10
11.0.21
10.0.21
12.0.9
12.0.8
12.0.7
9.4.54.v20240208
9.4.54.v20240207
12.0.6
11.0.20
10.0.20
12.0.5
11.0.19
10.0.19
12.0.4
12.0.3
11.0.18
10.0.18
9.4.53.v20231009
12.0.2
11.0.17
10.0.17
9.4.53.v20230927
12.0.1
11.0.16
10.0.16
9.4.52.v20230823
9.4.52.v20230821
9.4.52.v20230815
12.0.0
11.0.15
10.0.15
11.0.14
10.0.14
9.4.51.v20230217
11.0.13
9.4.50.v20221201
10.0.13
9.4.50.v20221107
11.0.12
10.0.12
9.4.49.v20220914
11.0.11
10.0.11
9.4.48.v20220622
11.0.10
10.0.10
9.4.47.v20220610
9.4.46.v20220331
11.0.9
10.0.9
9.4.46.v20220330
9.4.46.v20220328
9.4.45.v20220203
9.4.45.v20220128
9.4.45.v20220125
11.0.8
10.0.8
9.4.45.v20220121
9.4.45.v20220119
10.0.7
11.0.7
9.3.30.v20211001
9.3.30.v20210930
9.3.30.v20210929
9.4.44.v20210927
9.4.44.v20210924
9.4.43.v20210629
9.4.43.v202010629
11.0.6
9.4.43.v20210624
10.0.6
10.0.5
11.0.5
11.0.4
9.4.42.v20210604
10.0.4
9.4.41.v20210516
9.4.41.v20210512
10.0.3
11.0.3
9.4.40.v20210413
11.0.2
10.0.2
9.4.39.v20210325
9.4.38.v20210224
11.0.1
9.4.37.v20210219
10.0.1
9.4.36.v20210114
10.0.0
11.0.0
9.4.35.v20201120
9.4.34.v20201102
9.4.33.v20201020
9.3.29.v20201019
9.4.33.v20201019
9.4.32.v20200930
9.4.12
9.4.11
9.4.10
9.4.9
9.4.8
9.4.7
9.4.6
9.4.5
9.4.4
9.4.3
9.4.2
9.4.1
9.4.0
9.3.24
9.3.23
9.3.22
9.3.21
9.3.20
9.3.19
9.3.18
9.3.17
9.3.16
9.3.15
9.3.14
9.3.13
9.3.12
9.3.11
9.3.10
9.3.9
9.3.8
9.3.7
9.3.6
9.3.5
9.3.4
9.3.3
9.3.2
9.3.1
9.3.0
9.4.29
9.4.28
9.4.27
9.4.31.v20200723
9.4.30.v20200611
9.4.30.v20200610
9.4.29.v20200521
9.4.29.v20200519
9.4.29.v20200512
9.4.29.v20200507
9.2.30.v20200428
9.4.28.v20200408
9.4.27.v20200227
9.4.27.v20200226
9.4.26.v20200117
9.4.26.v20200115
9.4.25.v20191220
9.4.23.v20191118
9.4.24.v20191120
9.2.29.v20191105
9.3.28.v20191105
7.0.0.v20091001
7.0.1.v20091116
7.0.1.v20091117
7.0.1.v20091122
7.0.1.v20091123
7.1.2.v20100521
7.1.2.v20100522
7.1.4.v20090609
7.1.4.v20100609
7.2.2.v20101201
7.2.2.v20101203
7.3.0.v20110202
7.3.0.v20112401
7.3.0.20110202
7.3.1.v20110304
7.4.1.v20110512
7.4.1
7.4.3.v20110630
7.5.1.v20110907
7.6.0.v20120125
7.6.2.v20120302
7.6.3.v20120413
7.6.4.v20120522
7.6.5.v20120713
7.6.11.v20130725
7.6.13.v20130910
7.6.13.v20130916
7.6.18.v20150929
7.6.19.v20160209
7.6.20.v20160902
7.6.21.v20160908
8.0.1.v20110907
8.1.0.v20120125
8.1.2.v20120302
8.1.3.v20120413
8.1.4.v20120522
8.1.5.v20120713
8.1.12.v20130725
8.1.13.v20130910
8.1.17.v20150415
8.1.18.v20150929
8.1.19.v20160209
8.1.20.v20160902
8.1.21.v20160908
8.1.22.v20160922
8.2.0.v20160908
9.0.2.v20140415
9.0.4.v20130621
9.0.5.v20130813
9.0.6.v20130919
9.0.7.v20131031
9.1.6.v20151106
9.1.6.v20160112
9.2.0.v20140523
9.2.23.v20171218
9.2.24.v20180105
9.2.25.v20180606
9.2.26.v20180806
9.2.27.v20190403
9.2.28.v20190418
9.3.23.v20180228
9.3.25.v20180904
9.3.26.v20190403
9.3.27.v20190418
9.4.0.v20180619
9.4.1.v20180619
9.4.2.v20180619
9.4.3.v20180619
9.4.4.v20180619
9.4.5.v20180619
9.4.6.v20180619
9.4.7.v20180619
9.4.8.v20180619
9.4.10.v20180503
9.4.12.v20180830
9.4.13.v20181111
9.4.14.v20181114
9.4.15.v20190215
9.4.16.v20190411
9.4.17.v20190418
9.4.18.v20190429
9.4.19.v20190610
9.4.20.v20190813
9.4.21.v20190926
9.4.22.v20191022
6.1.6rc0
5
3.0
6.1
4.2
2.4
4.1
6
5.1.0
6.1.9
1.0.1
3.1.1
3.1.0
3.1.3
3.1.2
3.1.5
3.1.4
4.0.b2
3.1.7
3.1.6
2.2
3.0.b02
3.0.b04
3.0.b01
3.0.b03
3.0.b05
4.2.22
2.3.0
4.2.21
2.3.1
2.3.4
2.3.2
2.0
2.3.5
4.2.27
2.3.3
4.2.26
4.2.25
2.4.7
2.4.8
4.2.12
2.4.6
2.4.9
4.2.3
4.2.1
4.2.17
4.2.19
4.2.16
4.2.18
4.2.2
4.2.5
2.0.0
4.1.d0
6.1.3
4.1.d2
2.0.1
4.2.6
4.2.7
2.0.3
2.0.4
2.0.2
2.0.5
1.2.0
4.1.1
5.1.2
4.1.4
4.1.2
4.1.d1
4.1.3
6.1.1
2.1.b0
4.2.4
4.0
3.0.a99
5.1.12
5.1.11
2.1.b1
3.0.a92
3.0.a94
3.0.a91
3.0.a96
3.0.a93
5.1.13
5.1.14
5.1.10
4.2.0
6.1.14
6.1.16
6.1.11
3.0.a98
6.1.10
2.2.1
3.0.a95
3.0.a97
2.2.2
2.2.5
2.2.0
2.2.3
2.2.6
2.2.4
2.2.7
6.1.4
7.0.0
5.0
6.1.2
4.1.0
4.2.9
5.0.0
1.0
5.1.4
1.1
5.1
6.1.0
3.1.9
3.1.8
1.1.1
3.0.2
3.0.1
3.0.a6
3.0.4
3.0.a7
3.0.3
3.0.a4
3.0.6
3.0.a5
3.0.5
3.0.a2
3.0.a3
3.0.a0
3.0.a1
3.0.0
3.0.a8
3.0.a9
5.1.6
4.2.8_01
5.1.9
5.1.8
4.2.23
4.2.10
4.2.20
4.2.24
2.4.0
2.4.3
5.1.1
2.4.1
2.4.4
3.0.a90
2.4.2
5.1.3
5.1.5
2.4.5
4.0.d3
4.0.d0
4.0.d2
6.1.15
2.3.0a
4.1.b0
5.1.7
6.0.2
2.1.0
1.3.4
1.3.0
1.3.3
1.3.2
1.3.5
1.3.1
6.0.1
2.1.2
2.1.3
2.1.6
2.1.1
2.1.4
2.1.7
2.1.5
4.0.b1
3.1
4.0.b0
6.0.0
6.1.12
4.0.d1
4.0.d4
2.2.8
4.0.2
4.0.5
6.1.6
4.0.0
4.0.3
4.2.14
4.2.15
6.1.7
4.0.1
6.1.5
6.1.8
4.0.6
4.0.4
4.1.b1
9.4.9.v20180320
9.2.25.v2018060
9.4.11.v20180605
9.3.24.v20180605
8.4.1-R5
8.3.0-R11
8.2.0-R18
8.4.1
8.3.0
8.2.0
9.4.8.v20171121
9.4.7.v20170914
9.4.6.v20170531
9.4.5.v20170502
9.4.4.v20170410
9.4.3.v20170317
9.4.2.v20170220
9.4.1.v20170120
9.4.0.v20161208
9.4.0.v20161207
9.3.22.v20171030
9.3.21.v20170918
9.3.20.v20170531
9.3.19.v20170502
9.3.17.v20170317
9.3.16.v20170120
9.3.16.v20170119
9.3.15.v20161220
9.3.14.v20161028
9.3.13.v20161014
9.3.4.v20151005
9.3.0.v20150601
9.2.23.v20171214
9.2.22.v20170606
9.2.20.v20161216
9.2.17.v20160517
9.2.16.v20160414
9.2.16.v20160407
9.2.11.v20150528
9.2.6.v20141203
7.6.17.v20150415
9.3.8.v20160314
9.3.3.v20150827
9.3.0.v20150612
9.2.15.v20160210
9.2.14.v20151106
9.2.13.v20150730
9.2.12.v20150709
9.2.11.v20150529
9.2.10.v20150310
9.2.9.v20150224
9.2.8.v20150217
9.2.7.v20150116
9.2.6.v20141205
9.2.5.v20141112
9.2.4.v20141103
9.2.3.v20140905
9.2.2.v20140723
9.2.1.v20140609
9.2.0.v20140526
9.1.5.v20140505
9.1.4.v20140401
9.1.3.v20140225
9.1.2.v20140210
9.1.1.v20140108
9.1.0.v20131115
9.0.7.v20131107
9.0.6.v20130930
9.0.5.v20130815
9.0.4.v20130625
9.0.3.v20130506
9.0.2.v20130417
9.0.1.v20130408
9.0.0.v20130308
8.1.16.v20140903
8.1.15.v20140411
8.1.14.v20131031
8.1.13.v20130916
8.1.12.v20130726
8.1.11.v20130520
8.1.10.v20130312
8.1.9.v20130131
8.1.8.v20121106
8.1.7.v20120910
8.1.6.v20120903
8.1.5.v20120716
8.1.4.v20120524
8.1.3.v20120416
8.1.2.v20120308
8.1.1.v20120215
8.1.0.v20120127
8.0.4.v20111024
8.0.3.v20111011
8.0.2.v20111006
8.0.1.v20110908
8.0.0.v20110901
7.6.16.v20140903
7.6.15.v20140411
7.6.14.v20131031
7.6.12.v20130726
7.6.11.v20130520
7.6.10.v20130312
7.6.9.v20130131
7.6.8.v20121106
7.6.7.v20120910
7.6.6.v20120903
7.6.5.v20120716
7.6.4.v20120524
7.6.3.v20120416
7.6.2.v20120308
7.6.1.v20120215
7.6.0.v20120127
7.5.4.v20111024
7.5.3.v20111011
7.5.2.v20111006
7.5.1.v20110908
7.5.0.v20110901
7.4.5.v20110725
7.4.4.v20110707
7.4.3.v20110701
7.4.2.v20110526
7.4.1.v20110513
7.4.0.v20110414
7.3.1.v20110307
7.3.0.v20110203
7.2.2.v20101205
7.2.1.v20101111
7.2.0.v20101020
7.1.6.v20100715
7.1.5.v20100705
7.1.4.v20100610
7.1.3.v20100526
7.1.2.v20100523
7.1.1.v20100517
7.1.0.v20100505
7.0.2.v20100331
7.0.1.v20091125
7.0.0.v20091005
9.2.21.v20170120
9.3.18.v20170406
9.4.4.v20170414
7.6.21
7.6.20
8.1.21
8.1.20
9.2.19.v20160908
9.3.12.v20160915
9.3.9.v20160517
9.3.8.v20160311
9.3.7.v20160115
9.3.6.v20151106
9.3.5.v20151012
9.3.4.v20151007
9.3.3.v20150825
9.3.2.v20150730
9.3.1.v20150714
9.3.0.v20150608
9.2.18.v20160721
8.1.19
7.6.19
9.3.11.v20160721
9.3.10.v20160621
Vulnerabilities (24)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU137399 - Improper input validation CVE-2026-6790 |
CWE-20 | Medium | 9.4.61, 10.0.29, 11.0.29, 12.0.35, 12.1.9 | 13.07.2026 |
SB2026071349 |
||
| #VU137397 - Improper Handling of Alternate Encoding CVE-2026-10050 |
CWE-173 | High | 9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 | 13.07.2026 |
SB2026071348 SB2026081819 SB2026083180 |
||
| #VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2026-2332 |
CWE-444 | Medium | 12.0.33, 12.1.7 | 14.04.2026 |
SB2026041433 SB2026050517 SB20260507308 and 11 more |
||
| #VU123576 - Improper input validation CVE-2025-11143 |
CWE-20 | Low | 12.0.31, 12.1.5 | 05.03.2026 |
SB2026030558 SB2026040716 SB2026042070 and 12 more |
||
| #VU114316 - Resource exhaustion CVE-2025-5115 |
CWE-400 | Medium | 9.4.58.v20250814, 10.0.26, 11.0.26 | 21.08.2025 |
SB2025082101 SB2025082751 SB20250828111 and 42 more |
||
| #VU108837 - Improper Resource Shutdown or Release CVE-2024-13009 |
CWE-404 | Medium | 9.4.57 | 09.05.2025 |
SB2025050925 SB2025052987 SB2025060616 and 22 more |
||
| #VU98518 - Resource exhaustion CVE-2024-9823 |
CWE-400 | Medium | 9.4.54.v20240207, 10.0.18, 11.0.18, 12.0.3 | 14.10.2024 |
SB20241014112 SB2024120637 SB2025011709 and 14 more |
||
| #VU98517 - Resource exhaustion CVE-2024-8184 |
CWE-400 | Medium | 9.4.56.v20240826, 10.0.24, 11.0.24, 12.0.9 | 14.10.2024 |
SB20241014108 SB2024101836 SB2024112849 and 38 more |
||
| #VU98516 - Server-Side Request Forgery (SSRF) CVE-2024-6763 |
CWE-918 | Medium | 9.4.57.v20241219, 12.0.12 | 14.10.2024 |
SB20241014107 SB2024112849 SB2024120517 and 49 more |
||
| #VU86808 - Resource exhaustion CVE-2024-22201 |
CWE-400 | Medium | 9.4.54.v20240208, 10.0.20, 11.0.20, 12.0.6 | 26.02.2024 |
SB2024022652 SB2024030711 SB2024030845 and 43 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 9.4.53.v20231009, 10.0.17, 11.0.17, 12.0.2 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 651 more |
||
| #VU81726 - Integer overflow CVE-2023-36478 |
CWE-190 | Medium | 9.4.53.v20230927, 10.0.16, 11.0.16 | 10.10.2023 |
SB2023101018 SB2023102640 SB2023103106 and 53 more |
||
| #VU80793 - Improper Authorization CVE-2023-41900 |
CWE-285 | Low | 9.4.52.v20230823, 10.0.16, 11.0.16 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023102621 and 29 more |
||
| #VU80792 - Improper input validation CVE-2023-36479 |
CWE-20 | Medium | 9.4.52.v20230823, 10.0.16, 11.0.16 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023102621 and 48 more |
||
| #VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-40167 |
CWE-444 | Medium | 9.4.52.v20230823, 10.0.16, 11.0.16, 12.0.1 | 14.09.2023 |
SB2023091440 SB2023092933 SB2023101760 and 68 more |
||
| #VU75218 - Resource exhaustion CVE-2023-26048 |
CWE-400 | Medium | 9.4.51.v20230217, 10.0.14, 11.0.14 | 18.04.2023 |
SB2023041842 SB2023051753 SB2023060701 and 55 more |
||
| #VU75217 - Improper input validation CVE-2023-26049 |
CWE-20 | Low | 9.4.51.v20230217, 10.0.14, 11.0.14 | 18.04.2023 |
SB2023041842 SB2023051821 SB2023060836 and 78 more |
||
| #VU65831 - Improper input validation CVE-2022-2047 |
CWE-20 | Low | 9.4.47.v20220610, 10.0.10, 11.0.10 | 27.07.2022 |
SB2022072723 SB2022080103 SB2022080260 and 41 more |
||
| #VU65830 - Resource Management Errors CVE-2022-2048 |
CWE-399 | Medium | 9.4.47.v20220610, 10.0.10, 11.0.10 | 27.07.2022 |
SB2022072723 SB2022080103 SB2022080260 and 44 more |
||
| #VU55642 - Insufficient Session Expiration CVE-2021-34428 |
CWE-613 | Low | 9.4.41.v20210516, 10.0.3, 11.0.3 | 08.08.2021 |
SB2021080801 SB2021080803 SB2021081922 and 25 more |
Showing elements 1 - 20 out of 24