Known vulnerabilities in Jetty - page 2

Vendor: Eclipse
Software: Jetty
Software CPE: cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*
Total vulnerabilities: 58
Public exploits: 4
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Jetty Jetty is affected by 58 known vulnerabilities: 7 high, 36 medium, 15 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86808 - Resource exhaustion
CVE-2024-22201
CWE-400 Medium
No
No
9.4.54.v20240208, 10.0.20, 11.0.20, 12.0.6 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
9.4.53.v20231009, 10.0.17, 11.0.17, 12.0.2 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 654 more
#VU81726 - Integer overflow
CVE-2023-36478
CWE-190 Medium
No
No
9.4.53.v20230927, 10.0.16, 11.0.16 10.10.2023 SB2023101018
SB2023102640
SB2023103106
and 53 more
#VU80793 - Improper Authorization
CVE-2023-41900
CWE-285 Low
No
No
9.4.52.v20230823, 10.0.16, 11.0.16 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 29 more
#VU80792 - Improper input validation
CVE-2023-36479
CWE-20 Medium
No
No
9.4.52.v20230823, 10.0.16, 11.0.16 14.09.2023 SB2023091440
SB2023092933
SB2023102621
and 48 more
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167
CWE-444 Medium
No
No
9.4.52.v20230823, 10.0.16, 11.0.16, 12.0.1 14.09.2023 SB2023091440
SB2023092933
SB2023101760
and 68 more
#VU78057 - Improper Restriction of XML External Entity Reference ('XXE')
CWE-611 Low
No
No
- 10.07.2023 SB2023071038
#VU75218 - Resource exhaustion
CVE-2023-26048
CWE-400 Medium
No
No
9.4.51.v20230217, 10.0.14, 11.0.14 18.04.2023 SB2023041842
SB2023051753
SB2023060701
and 55 more
#VU75217 - Improper input validation
CVE-2023-26049
CWE-20 Low
No
No
9.4.51.v20230217, 10.0.14, 11.0.14 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU65832 - Missing release of memory after effective lifetime
CVE-2022-2191
CWE-401 Medium
No
No
10.0.10, 11.0.10 27.07.2022 SB2022072723
SB2022100615
SB2022101891
and 8 more
#VU65831 - Improper input validation
CVE-2022-2047
CWE-20 Low
No
No
9.4.47.v20220610, 10.0.10, 11.0.10 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 41 more
#VU65830 - Resource Management Errors
CVE-2022-2048
CWE-399 Medium
No
No
9.4.47.v20220610, 10.0.10, 11.0.10 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 44 more
#VU56964 - Improper Access Control
CVE-2021-34429
CWE-284 Medium
Available
No
9.4.43.v20210624, 10.0.6, 11.0.6 30.09.2021 SB2021093014
SB2021093016
SB2022012745
and 25 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428
CWE-613 Low
No
No
9.4.41.v20210516, 10.0.3, 11.0.3 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more
#VU53973 - Improper input validation
CVE-2021-28169
CWE-20 Medium
No
No
9.4.41.v20210512, 10.0.4, 11.0.3 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU51878 - Exposure of sensitive information to an unauthorized actor
CVE-2021-28163
CWE-200 Medium
No
No
9.4.39.v20210325, 10.0.2, 11.0.2 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 27 more
#VU51877 - Improper input validation
CVE-2021-28164
CWE-20 Medium
Available
No
9.4.39.v20210325 01.04.2021 SB2021040179
SB2021050704
SB2021051321
and 22 more
#VU51876 - Resource exhaustion
CVE-2021-28165
CWE-400 Medium
No
No
9.4.39.v20210325, 10.0.2, 11.0.2 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216
CWE-362 Low
No
No
9.4.33.v20201019 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more
#VU36036 - Improper input validation
CVE-2018-12545
CWE-20 Medium
No
No
- 27.03.2019 SB2019032714
SB2023020235
SB2023050520
and 4 more


Showing elements 21 - 40 out of 58