jetty

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

jetty records in CISA KEV

No jetty vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jetty Http Server 4 records LOW Jetty 3 records LOW

Records

3 records in Jetty · all components

TI-2002-01455 CVE-2002-1533 · GHSA-5mq8-h82p-wjf2

Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote…

LOW 31

Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02407 Published 2003-03-18 Fixed in 4.1.1 CWE-80

TI-2006-02666 CVE-2006-2758 · GHSA-qmgj-5h75-jr67

Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers…

LOW 30

Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.04013 Published 2006-06-02 No fix listed CWE-22

TI-2006-02667 CVE-2006-2759 · GHSA-mq4x-8whh-jx73

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code…

LOW 26

jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0135 Published 2006-06-02 Fixed in 6.0.0 CWE-20

Open these records in search →

Critical	0
High	2
Medium	6
Low	0
No CVSS	0