TI-2024-14794 CVE-2024-22201 · GHSA-rggv-cv7r-mw98
Jetty connection leaking on idle timeout when TCP congested
Priority HIGH 66
Jetty is a Java based web server and servlet engine.
jetty
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
jetty records in CISA KEVNo jetty vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2004-02348 CVE-2004-2478 · GHSA-mcvw-pw2f-v47r
Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner…
Priority LOW 37
Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows re…
TI-2002-01139 CVE-2002-1178 · GHSA-rrv3-c2mh-pf7x
Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0…
Priority LOW 35
Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directo…
TI-2006-06711 CVE-2006-6969 · GHSA-jg2x-r643-w2ch
Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3…
Priority LOW 33
Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util.random, which makes it easier for remote attackers to guess a session identifie…
TI-2002-01455 CVE-2002-1533 · GHSA-5mq8-h82p-wjf2
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote…
Priority LOW 31
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded…
TI-2006-02666 CVE-2006-2758 · GHSA-qmgj-5h75-jr67
Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers…
Priority LOW 30
Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL.
TI-2006-02667 CVE-2006-2759 · GHSA-mq4x-8whh-jx73
jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code…
Priority LOW 26
jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.
TI-2004-02252 CVE-2004-2381 · GHSA-p5rr-q5g6-gm42
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause…
Priority LOW 26
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.