| CVE-2022-2191 |
In Eclipse Jetty versions 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, SslConnection does not release…
|
7.5
High
|
Jul 7, 2022 |
| CVE-2022-2047 |
In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the…
|
2.7
Low
|
Jul 7, 2022 |
| CVE-2022-2048 |
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug…
|
7.5
High
|
Jul 7, 2022 |
| CVE-2021-34429 |
For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded…
|
5.3
Medium
|
Jul 15, 2021 |
| CVE-2021-34428 |
For Eclipse Jetty…
|
2.9
Low
|
Jun 22, 2021 |
| CVE-2021-28169 |
For Eclipse Jetty…
|
5.3
Medium
|
Jun 9, 2021 |
| CVE-2021-28165 |
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon…
|
7.5
High
|
Apr 1, 2021 |
| CVE-2021-28164 |
In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that…
|
5.3
Medium
|
Apr 1, 2021 |
| CVE-2021-28163 |
In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps…
|
2.7
Low
|
Apr 1, 2021 |
| CVE-2020-27223 |
In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request…
|
5.2
Medium
|
Feb 26, 2021 |
| CVE-2020-27218 |
In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to…
|
Not rated
|
Nov 28, 2020 |
| CVE-2020-27216 |
In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru…
|
Not rated
|
Oct 23, 2020 |
| CVE-2019-17638 |
In Eclipse Jetty, versions 9.4.27.v20200227 to 9.4.29.v20200521, in case of too large response headers, Jetty throws…
|
Not rated
|
Jul 9, 2020 |
| CVE-2019-17632 |
In Eclipse Jetty versions 9.4.21.v20190926, 9.4.22.v20191022, and 9.4.23.v20191118, the generation of default…
|
Not rated
|
Nov 25, 2019 |
| CVE-2019-10241 |
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS…
|
Not rated
|
Apr 22, 2019 |
| CVE-2019-10247 |
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any…
|
Not rated
|
Apr 22, 2019 |
| CVE-2019-10246 |
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the…
|
Not rated
|
Apr 22, 2019 |
| CVE-2018-12545 |
In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client…
|
Not rated
|
Mar 27, 2019 |
| CVE-2018-12536 |
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad…
|
Not rated
|
Jun 27, 2018 |
| CVE-2017-7658 |
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x…
|
Not rated
|
Jun 26, 2018 |
| CVE-2017-7657 |
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with…
|
Not rated
|
Jun 26, 2018 |
| CVE-2017-7656 |
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with…
|
Not rated
|
Jun 26, 2018 |
| CVE-2018-12538 |
In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for…
|
Not rated
|
Jun 22, 2018 |