Product by The Eclipse Foundation

Eclipse Jetty

23 known vulnerabilities in Eclipse Jetty (The Eclipse Foundation), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Eclipse Jetty (The Eclipse Foundation)

Critical	CVE-2017-7658	The Eclipse Foundation Eclipse Jetty: HTTP Request/Response Smuggling also in 17 other products	9.8	26.06.2018
Critical	CVE-2017-7657	The Eclipse Foundation Eclipse Jetty: HTTP Request/Response Smuggling also in 17 other products	9.8	26.06.2018
Critical	CVE-2019-17638	The Eclipse Foundation Eclipse Jetty: Operation on a Resource after Expiration or Release also in 1 other product	9.4	09.07.2020
High	CVE-2021-28165	The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization also in 22 other products	7.5	01.04.2021
High	CVE-2017-7656	The Eclipse Foundation Eclipse Jetty: HTTP Request/Response Smuggling also in 2 other products	7.5	26.06.2018
Medium	CVE-2021-34429	The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization also in 18 other products	5.3	15.07.2021
Medium	CVE-2021-28164	The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization also in 17 other products	5.3	01.04.2021
Medium	CVE-2021-28169	The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information to an Unauthorized Actor also in 10 other products	5.3	09.06.2021
High	CVE-2018-12545	The Eclipse Foundation Eclipse Jetty: Uncontrolled Resource Consumption also in 2 other products	7.5	27.03.2019
Medium	CVE-2020-27223	The Eclipse Foundation Eclipse Jetty: Inefficient Algorithmic Complexity also in 18 other products	5.2	26.02.2021
Medium	CVE-2019-10241	The Eclipse Foundation Eclipse Jetty: Cross-site Scripting also in 8 other products	6.1	22.04.2019
High	CVE-2018-12538	The Eclipse Foundation Eclipse Jetty: J2EE Misconfiguration: Insufficient Session-ID Length also in 12 other products	8.8	22.06.2018
High	CVE-2020-27216	The Eclipse Foundation Eclipse Jetty: Creation of Temporary File With Insecure Permissions also in 20 other products	7.0	23.10.2020
High	CVE-2022-2048	The Eclipse Foundation Eclipse Jetty: Insufficient Resource Pool also in 10 other products	7.5	07.07.2022
Medium	CVE-2019-10247	The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information Due to Incompatible Policies also in 27 other products	5.3	22.04.2019
Medium	CVE-2020-27218	The Eclipse Foundation Eclipse Jetty: Sensitive Information in Resource Not Removed Before Reuse also in 18 other products	4.8	28.11.2020
Medium	CVE-2018-12536	The Eclipse Foundation Eclipse Jetty: Generation of Error Message Containing Sensitive Information also in 2 other products	5.3	27.06.2018
High	CVE-2022-2191	The Eclipse Foundation Eclipse Jetty: Improper Resource Shutdown or Release also in 1 other product	7.5	07.07.2022
Medium	CVE-2019-10246	The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information Due to Incompatible Policies also in 25 other products	5.3	22.04.2019
Medium	CVE-2019-17632	The Eclipse Foundation Eclipse Jetty: Cross-site Scripting also in 1 other product	6.1	25.11.2019
Low	CVE-2021-28163	The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information to an Unauthorized Actor also in 23 other products	2.7	01.04.2021
Low	CVE-2022-2047	The Eclipse Foundation Eclipse Jetty: Improper Input Validation also in 9 other products	2.7	07.07.2022
Low	CVE-2021-34428	The Eclipse Foundation Eclipse Jetty: Insufficient Session Expiration also in 18 other products	2.9	22.06.2021

All products by The Eclipse Foundation

Key figures

Vulnerabilities