Skip to content
Noroxi

jetty records

7 published records for vendor jetty.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
57.1%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    7 records
    • CVE-2004-2478
      31Monitor

      Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services D

      HighCVSS 7.5No exploitEPSS 2%

      ca · unicenter web services distributed managementDec 31, 2004

    • CVE-2006-6969
      27Monitor

      Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util

      MediumCVSS 6.8No exploitEPSS 1%

      jetty · jetty http serverFeb 7, 2007

    • CVE-2002-1533
      24Monitor

      Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP

      MediumCVSS 5.8Proof of conceptEPSS 2%

      jetty · jettyMar 31, 2003

    • CVE-2002-1178
      23Monitor

      Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands

      MediumCVSS 5.0Proof of conceptEPSS 9%

      jetty · jetty http serverOct 11, 2002

    • CVE-2006-2758
      21Monitor

      Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ..

      MediumCVSS 5.0Proof of conceptEPSS 4%

      jetty · jettyJun 1, 2006

    • CVE-2004-2381
      21Monitor

      HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash)

      MediumCVSS 5.0No exploitEPSS 1%

      jetty · jetty http serverDec 31, 2004

    • CVE-2006-2759
      20Monitor

      jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably

      MediumCVSS 5.0No exploitEPSS 1%

      jetty · jettyJun 1, 2006