Product by Debian
Jetty9
22 known vulnerabilities in Jetty9 (Debian), 1 of them actively exploited (CISA KEV).
Key figures
22
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 158 other products | 7.5 | |
| High | CVE-2021-28165 | The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 7.5 | |
| High | CVE-2025-5115 | MadeYouReset HTTP/2 vulnerability | 7.5 | |
| High | CVE-2023-36478 | HTTP/2 HPACK integer overflow and buffer allocation | 7.5 | |
| Medium | CVE-2021-28169 | The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| Medium | CVE-2020-27223 | The Eclipse Foundation Eclipse Jetty: Inefficient Algorithmic Complexity | 5.2 | |
| Medium | CVE-2019-10241 | The Eclipse Foundation Eclipse Jetty: Cross-site Scripting | 6.1 | |
| High | CVE-2020-27216 | The Eclipse Foundation Eclipse Jetty: Creation of Temporary File With Insecure Permissions | 7.0 | |
| High | CVE-2022-2048 | The Eclipse Foundation Eclipse Jetty: Insufficient Resource Pool | 7.5 | |
| Medium | CVE-2019-10247 | The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information Due to Incompatible Policies | 5.3 | |
| Medium | CVE-2023-26048 | OutOfMemoryError for large multipart without filename in Eclipse Jetty | 5.3 | |
| High | CVE-2024-22201 | Jetty connection leaking on idle timeout when TCP congested | 7.5 | |
| Medium | CVE-2023-40167 | Jetty accepts "+" prefixed value in Content-Length | 5.3 | |
| Medium | CVE-2024-8184 | Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks | 5.9 | |
| High | CVE-2024-9823 | Jetty DOS vulnerability on DosFilter | 5.3 | |
| High | CVE-2024-13009 | Eclipse Jetty GZIP buffer release | 7.2 | |
| Low | CVE-2023-36479 | Jetty vulnerable to errant command quoting in CGI Servlet | 3.5 | |
| Low | CVE-2022-2047 | The Eclipse Foundation Eclipse Jetty: Improper Input Validation | 2.7 | |
| Medium | CVE-2023-26049 | Cookie parsing of quoted values can exfiltrate values from other cookies in Eclipse Jetty | 2.4 | |
| Medium | CVE-2024-6762 | Jetty PushSessionCacheFilter can cause remote DoS attacks | 3.1 | |
| Medium | CVE-2023-41900 | Jetty's OpenId Revoked authentication allows one request | 3.5 | |
| Low | CVE-2021-34428 | The Eclipse Foundation Eclipse Jetty: Insufficient Session Expiration | 2.9 |