Known vulnerabilities in Jetty - page 2

Vendor: Eclipse
Software: Jetty
Software CPE: cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
Total vulnerabilities: 47
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jetty Jetty is affected by 47 known vulnerabilities: 4 high, 28 medium, 15 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97294 - Exposure of sensitive information to an unauthorized actor
CVE-2019-10246
CWE-200 Medium
No
No
- 16.09.2024 SB2019051138
SB2024091613
SB2025082547
and 1 more
#VU80792 - Improper input validation
CVE-2023-36479
CWE-20 Medium
No
No
9.4.52.v20230823, 10.0.16, 11.0.16 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167
CWE-444 Medium
No
No
9.4.52.v20230823, 10.0.16, 11.0.16, 12.0.1 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU78057 - Improper Restriction of XML External Entity Reference ('XXE')
CWE-611 Low
No
No
- 10.07.2023 SB2023071038
#VU75218 - Resource exhaustion
CVE-2023-26048
CWE-400 Medium
No
No
9.4.51.v20230217, 10.0.14, 11.0.14 18.04.2023 SB2023041842
SB2023051753
SB2023060701
and 55 more
#VU75217 - Improper input validation
CVE-2023-26049
CWE-20 Low
No
No
9.4.51.v20230217, 10.0.14, 11.0.14 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU65832 - Missing release of memory after effective lifetime
CVE-2022-2191
CWE-401 Medium
No
No
10.0.10, 11.0.10 27.07.2022 SB2022072723
SB2022100615
SB2022101891
and 8 more
#VU65831 - Improper input validation
CVE-2022-2047
CWE-20 Low
No
No
9.4.47.v20220610, 10.0.10, 11.0.10 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU65830 - Resource Management Errors
CVE-2022-2048
CWE-399 Medium
No
No
9.4.47.v20220610, 10.0.10, 11.0.10 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 44 more
#VU56964 - Improper Access Control
CVE-2021-34429
CWE-284 Medium
Available
No
9.4.43.v20210624, 10.0.6, 11.0.6 30.09.2021 SB2021093014
SB2021093016
SB2022012745
and 25 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428
CWE-613 Low
No
No
9.4.41.v20210516, 10.0.3, 11.0.3 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more
#VU53973 - Improper input validation
CVE-2021-28169
CWE-20 Medium
No
No
9.4.41.v20210512, 10.0.4, 11.0.3 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU51878 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28163
CWE-200 Medium
No
No
9.4.39.v20210325, 10.0.2, 11.0.2 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 27 more
#VU51877 - Improper input validation
CVE-2021-28164
CWE-20 Medium
Available
No
9.4.39.v20210325 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 22 more
#VU51876 - Resource exhaustion
CVE-2021-28165
CWE-400 Medium
No
No
9.4.39.v20210325, 10.0.2, 11.0.2 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216
CWE-362 Low
No
No
9.4.33.v20201019 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more
#VU34161 - Operation on a Resource after Expiration or Release
CVE-2019-17638
CWE-672 High
No
No
- 09.07.2020 SB2020070939
SB2020081709
SB2020102107
and 11 more
#VU25334 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-17632
CWE-79 Low
No
No
9.4.24.v20191120 13.02.2020 SB2019112514
SB2020021330
SB2020010714
and 1 more
#VU36036 - Improper input validation
CVE-2018-12545
CWE-20 Medium
No
No
- 27.03.2019 SB2019032714
SB2023020235
SB2023050520
and 4 more
#VU13527 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2017-7656
CWE-444 Low
No
No
9.3.24.v20180605, 9.4.11.v20180605 30.06.2018 SB2018070205
SB2018082001
SB2022041923
and 17 more


Showing elements 21 - 40 out of 47