Known vulnerabilities in Jetty 9.4.54.v20240208

Vendor: Eclipse
Software: Jetty
Version: 9.4.54.v20240208
Software CPE: cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Jetty version 9.4.54.v20240208 Jetty 9.4.54.v20240208 is affected by 8 vulnerabilities: 1 high, 6 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137399 - Improper input validation
CVE-2026-6790
CWE-20 Medium
No
No
9.4.61, 10.0.29, 11.0.29, 12.0.35, 12.1.9 13.07.2026 SB2026071349
#VU137397 - Improper Handling of Alternate Encoding
CVE-2026-10050
CWE-173 High
No
No
9.4.63, 10.0.31, 11.0.31, 12.0.36, 12.1.10 13.07.2026 SB2026071348
SB2026081819
SB2026083180
#VU125866 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2026-2332
CWE-444 Medium
No
No
12.0.33, 12.1.7 14.04.2026 SB2026041433
SB2026050517
SB20260507308
and 11 more
#VU123576 - Improper input validation
CVE-2025-11143
CWE-20 Low
No
No
12.0.31, 12.1.5 05.03.2026 SB2026030558
SB2026040716
SB2026042070
and 12 more
#VU114316 - Resource exhaustion
CVE-2025-5115
CWE-400 Medium
No
No
9.4.58.v20250814, 10.0.26, 11.0.26 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU108837 - Improper Resource Shutdown or Release
CVE-2024-13009
CWE-404 Medium
No
No
9.4.57 09.05.2025 SB2025050925
SB2025052987
SB2025060616
and 22 more
#VU98517 - Resource exhaustion
CVE-2024-8184
CWE-400 Medium
No
No
9.4.56.v20240826, 10.0.24, 11.0.24, 12.0.9 14.10.2024 SB20241014108
SB2024101836
SB2024112849
and 38 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763
CWE-918 Medium
No
No
9.4.57.v20241219, 12.0.12 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more