Product by Eclipse Foundation
Eclipse Jetty
62 known vulnerabilities in Eclipse Jetty (Eclipse Foundation), 1 of them actively exploited (CISA KEV).
Key figures
62
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2023-44487 | HTTP/2 Rapid Reset Attack Vulnerability In CISA KEValso in 160 other products | 7.5 | |
| Critical | CVE-2017-7658 | The Eclipse Foundation Eclipse Jetty: HTTP Request/Response Smuggling | 9.8 | |
| Critical | CVE-2017-7657 | The Eclipse Foundation Eclipse Jetty: HTTP Request/Response Smuggling | 9.8 | |
| Critical | CVE-2019-17638 | The Eclipse Foundation Eclipse Jetty: Operation on a Resource after Expiration or Release | 9.4 | |
| Critical | CVE-2016-4800 | Eclipse Jetty: security vulnerability | 9.8 | |
| High | CVE-2015-2080 | Eclipse Jetty: Information Disclosure | 7.5 | |
| High | CVE-2021-28165 | The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 7.5 | |
| High | CVE-2025-5115 | MadeYouReset HTTP/2 vulnerability | 7.5 | |
| Critical | CVE-2026-2332 | HTTP Request Smuggling via Chunked Extension Quoted-String Parsing | 9.1 | |
| High | CVE-2023-36478 | HTTP/2 HPACK integer overflow and buffer allocation | 7.5 | |
| High | CVE-2017-7656 | The Eclipse Foundation Eclipse Jetty: HTTP Request/Response Smuggling | 7.5 | |
| High | CVE-2017-9735 | Eclipse Jetty: security vulnerability | 7.5 | |
| Medium | CVE-2021-34429 | The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 5.3 | |
| Medium | CVE-2021-28164 | The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 5.3 | |
| Medium | CVE-2021-28169 | The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| High | CVE-2018-12545 | The Eclipse Foundation Eclipse Jetty: Uncontrolled Resource Consumption | 7.5 | |
| Medium | CVE-2020-27223 | The Eclipse Foundation Eclipse Jetty: Inefficient Algorithmic Complexity | 5.2 | |
| Medium | CVE-2019-10241 | The Eclipse Foundation Eclipse Jetty: Cross-site Scripting | 6.1 | |
| High | CVE-2018-12538 | The Eclipse Foundation Eclipse Jetty: J2EE Misconfiguration: Insufficient Session-ID Length | 8.8 | |
| High | CVE-2020-27216 | The Eclipse Foundation Eclipse Jetty: Creation of Temporary File With Insecure Permissions | 7.0 | |
| High | CVE-2022-2048 | The Eclipse Foundation Eclipse Jetty: Insufficient Resource Pool | 7.5 | |
| Medium | CVE-2019-10247 | The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information Due to Incompatible Policies | 5.3 | |
| Medium | CVE-2020-27218 | The Eclipse Foundation Eclipse Jetty: Sensitive Information in Resource Not Removed Before Reuse | 4.8 | |
| Medium | CVE-2018-12536 | The Eclipse Foundation Eclipse Jetty: Generation of Error Message Containing Sensitive Information | 5.3 | |
| High | CVE-2009-5045 | Eclipse Jetty: Information Disclosure | 7.5 |
News
- NCSC-2026-0377 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle Enterprise Managerncsc-nl,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 31sans-atrisk-mail,
- Oracle’s July update fixes ten 10.0 vulnerabilities in Fusion Middlewarecsoonline,
- Oracle’s first monthly patch release fixes 35 flaws, including 11 rated ‘critical’csoonline,