Known vulnerabilities in Jetty 9.4.54.v20240207

Vendor: Eclipse
Software: Jetty
Version: 9.4.54.v20240207
Software CPE: cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Jetty version 9.4.54.v20240207 Jetty 9.4.54.v20240207 is affected by 17 vulnerabilities: 3 high, 13 medium, 1 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155902 - Incorrect Authorization
CVE-2026-18659
CWE-863 Medium
No
No
9.4.65, 10.0.33, 12.0.39, 12.1.12 15.10.2026 SB20261015130
#VU155900 - Improper Handling of Case Sensitivity
CVE-2026-18660
CWE-178 High
No
No
9.4.65, 10.0.33, 12.0.39, 12.1.12 15.10.2026 SB20261015130
#VU155899 - Exposure of sensitive information to an unauthorized actor
CVE-2026-76184
CWE-200 Medium
No
No
9.4.65, 10.0.33, 12.0.39, 12.1.13 15.10.2026 SB20261015130
#VU155898 - Exposure of sensitive information to an unauthorized actor
CVE-2026-77711
CWE-200 Medium
No
No
9.4.65, 10.0.33, 12.0.39, 12.1.13 15.10.2026 SB20261015130
#VU155896 - Incorrect Authorization
CVE-2026-18661
CWE-863 High
No
No
9.4.65, 10.0.33, 12.0.39, 12.1.12 15.10.2026 SB20261015130
#VU155895 - Incorrect Authorization
CVE-2026-18662
CWE-863 Medium
No
No
9.4.65, 10.0.33, 12.0.39, 12.1.12 15.10.2026 SB20261015130
#VU155894 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2026-76182
CWE-74 Medium
No
No
9.4.65, 10.0.33, 12.0.39, 12.1.13 15.10.2026 SB20261015130
#VU150800 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-19203
CWE-444 Medium
No
No
9.4.64, 10.0.32, 11.0.32, 12.0.38, 12.1.12 18.09.2026 SB2026091662
SB2026100519
SB20261007209
and 4 more
#VU150237 - Resource exhaustion
CVE-2026-12611
CWE-400 Medium
No
No
9.4.64, 10.0.32, 11.0.32, 12.0.38, 12.1.11 16.09.2026 SB2026091662
SB2026100520
#VU137399 - Improper input validation
CVE-2026-6790
CWE-20 Medium
No
No
9.4.61, 10.0.29, 11.0.29, 12.0.35, 12.1.9 13.07.2026 SB2026071349
SB2026091018
SB20260917198
and 3 more
#VU137397 - Improper Handling of Alternate Encoding
CVE-2026-10050
CWE-173 High
No
No
9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 13.07.2026 SB2026071348
SB2026081819
SB2026083180
and 2 more
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332
CWE-444 Medium
No
No
12.0.33, 12.1.7 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 13 more
#VU123576 - Improper input validation
CVE-2025-11143
CWE-20 Low
No
No
12.0.31, 12.1.5 05.03.2026 SB2026030558
SB2026040716
SB2026042070
and 13 more
#VU114316 - Resource exhaustion
CVE-2025-5115
CWE-400 Medium
No
No
9.4.58.v20250814, 10.0.26, 11.0.26 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009
CWE-404 Medium
No
No
9.4.57 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU98517 - Resource exhaustion
CVE-2024-8184
CWE-400 Medium
No
No
9.4.56.v20240826, 10.0.24, 11.0.24, 12.0.9 14.10.2024 SB20241014108
SB2024101836
SB2024112849
and 38 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763
CWE-918 Medium
No
No
9.4.57.v20241219, 12.0.12 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more