jetty kayıtları
jetty üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %57,1
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
31İzleyin | CVE-2004-2478İstismar yok | Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Dca · unicenter web services distributed management | Yüksek7,5 | — | %2,4 | 31 Ara 2004 |
27İzleyin | CVE-2006-6969İstismar yok | Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.utiljetty · jetty http server | Orta6,8 | — | %1,6 | 7 Şub 2007 |
24İzleyin | CVE-2002-1533Kavram kanıtı | Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP jetty · jetty | Orta5,8 | — | %2,4 | 31 Mar 2003 |
23İzleyin | CVE-2002-1178Kavram kanıtı | Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commandsjetty · jetty http server | Orta5,0 | — | %9,5 | 11 Eki 2002 |
21İzleyin | CVE-2006-2758Kavram kanıtı | Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ..jetty · jetty · CWE-22 | Orta5,0 | — | %4,0 | 1 Haz 2006 |
21İzleyin | CVE-2004-2381İstismar yok | HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) jetty · jetty http server | Orta5,0 | — | %1,8 | 31 Ara 2004 |
20İzleyin | CVE-2006-2759İstismar yok | jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probablyjetty · jetty | Orta5,0 | — | %1,4 | 1 Haz 2006 |
- CVE-2004-247831İzleyin
Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services D
YüksekCVSS 7,5İstismar yokEPSS %2ca · unicenter web services distributed management31 Ara 2004
- CVE-2006-696927İzleyin
Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util
OrtaCVSS 6,8İstismar yokEPSS %2jetty · jetty http server7 Şub 2007
- CVE-2002-153324İzleyin
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP
OrtaCVSS 5,8Kavram kanıtıEPSS %2jetty · jetty31 Mar 2003
- CVE-2002-117823İzleyin
Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands
OrtaCVSS 5,0Kavram kanıtıEPSS %9jetty · jetty http server11 Eki 2002
- CVE-2006-275821İzleyin
Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ..
OrtaCVSS 5,0Kavram kanıtıEPSS %4jetty · jetty1 Haz 2006
- CVE-2004-238121İzleyin
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash)
OrtaCVSS 5,0İstismar yokEPSS %2jetty · jetty http server31 Ara 2004
- CVE-2006-275920İzleyin
jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably
OrtaCVSS 5,0İstismar yokEPSS %1jetty · jetty1 Haz 2006