Skip to contentThe Eclipse Foundation Eclipse Jetty vulnerabilities
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreJetty SslConnection does not release pooled ByteBuffers in case of errorsCVE-2022-2191Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +5 more +7 moreJetty invalid URI parsing may produce invalid HttpURI.authorityCVE-2022-2047Fix available2.7 Low
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreJetty vulnerable to Invalid HTTP/2 requests that can lead to denial of serviceCVE-2022-2048Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity os controller +16 more +18 moreEncoded URIs can access WEB-INF directory in Eclipse JettyCVE-2021-34429Public exploitFix availableEPSS 99.3%5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +14 more +16 moreSessionListener can prevent a session from being invalidated breaking logoutCVE-2021-34428Public exploitFix available2.9 Low
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2021-28169Fix availableEPSS 78.5%5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, jenkins +19 more +21 moreJetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resourcesCVE-2021-28165Public exploitFix availableEPSS 53.9%7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp cloud manager +15 more +17 moreAuthorization Before Parsing and Canonicalization in jettyCVE-2021-28164Public exploitFix availableEPSS 82.4%5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 moreDirectory exposure in jettyCVE-2021-28163Fix available2.7 Low
- eclipse jetty, the eclipse foundation eclipse jetty, apache nifi +14 more +16 moreDOS vulnerability for Quoted Quality CSV headersCVE-2020-27223Public exploitFix availableEPSS 78.0%5.2 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 moreBuffer not correctly recycled in Gzip Request inflationCVE-2020-27218Fix available4.8 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2020-27216Fix available7.0 High
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2019-17638Public exploitFix availableEPSS 11.1%9.4 Critical
- eclipse jetty, the eclipse foundation eclipse jetty +1 moreUnescaped exception messages in error responses in JettyCVE-2019-17632Fix available6.1 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 moreInstallation information leak in Eclipse JettyCVE-2019-10247Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 moreInformation Exposure vulnerability in Eclipse JettyCVE-2019-10246Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, apache activemq +5 more +7 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2019-10241Fix available6.1 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, fedoraproject fedora +2 moreUncontrolled Resource Consumption in org.eclipse.jetty:jetty-serverCVE-2018-12545Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, oracle retail xstore point of service +2 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2018-12536Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +17 more +19 moreJetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)CVE-2017-7658Fix availableEPSS 19.0%9.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +15 more +17 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2017-7657Fix availableEPSS 14.4%9.8 Critical
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +2 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2017-7656Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity management plug-ins +10 more +12 moreAccess and integrity issue within Eclipse JettyCVE-2018-12538Fix available8.8 High