Cross-site scripting in Eclipse Jetty
Priority LOW 39CWE-79Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- Cross-site scripting
- Confidentiality · integrity · availability
- Low · Low · None
- Fix status
- Partial Red Hat: 3 fixed, 7 without a fix
Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-79.
Summary
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.
Why it matters now
EPSS 0.09365 95th percentileScored 2026-11-07
Fix Partial org.eclipse.jetty:jetty-server (Maven): 9.2.27.v20190403, 9.3.26.v20190403, 9.4.16.v20190411Red Hat: 3 advisoriesRed Hat: 3 fixed, 7 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Eclipse Foundation | Eclipse Jetty | up to 9.2.26; up to 9.3.25; up to 9.4.15 | — | No fix listed | CNA |
| — | org.eclipse.jetty:jetty-server (Maven) | before 9.2.27.v20190403 | 9.2.27.v20190403 | Patch available | GHSA-7vx9-xjhr-rw6h |
| — | org.eclipse.jetty:jetty-server (Maven) | 9.3.0 to before 9.3.26.v20190403 | 9.3.26.v20190403 | Patch available | GHSA-7vx9-xjhr-rw6h |
| — | org.eclipse.jetty:jetty-server (Maven) | 9.4.0 to before 9.4.16.v20190411 | 9.4.16.v20190411 | Patch available | GHSA-7vx9-xjhr-rw6h |
- Eclipse Jetty VendorEclipse Foundation Affected up to 9.2.26; up to 9.3.25; up to 9.4.15 Fixed in — No fix listed CNA
- org.eclipse.jetty:jetty-server (Maven) Vendor— Affected before 9.2.27.v20190403 Fixed in 9.2.27.v20190403 Patch available GHSA-7vx9-xjhr-rw6h
- org.eclipse.jetty:jetty-server (Maven) Vendor— Affected 9.3.0 to before 9.3.26.v20190403 Fixed in 9.3.26.v20190403 Patch available GHSA-7vx9-xjhr-rw6h
- org.eclipse.jetty:jetty-server (Maven) Vendor— Affected 9.4.0 to before 9.4.16.v20190411 Fixed in 9.4.16.v20190411 Patch available GHSA-7vx9-xjhr-rw6h
CPE configurations NVD · 139
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:eclipse:jetty:9.2.0:20140523:*:*:*:*:*:* | 9.2.0 20140523 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.0:20140526:*:*:*:*:*:* | 9.2.0 20140526 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.0:maintenance_0:*:*:*:*:*:* | 9.2.0 maintenance_0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.0:maintenance_1:*:*:*:*:*:* | 9.2.0 maintenance_1 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.0:rc0:*:*:*:*:*:* | 9.2.0 rc0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.1:20140609:*:*:*:*:*:* | 9.2.1 20140609 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.2:20140723:*:*:*:*:*:* | 9.2.2 20140723 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.3:20140905:*:*:*:*:*:* | 9.2.3 20140905 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.4:20141103:*:*:*:*:*:* | 9.2.4 20141103 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.5:20141112:*:*:*:*:*:* | 9.2.5 20141112 | Vulnerable | Eclipse Foundation |
- cpe:2.3:a:eclipse:jetty:9.2.0:20140523:*:*:*:*:*:* Versions 9.2.0 20140523 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.0:20140526:*:*:*:*:*:* Versions 9.2.0 20140526 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.0:maintenance_0:*:*:*:*:*:* Versions 9.2.0 maintenance_0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.0:maintenance_1:*:*:*:*:*:* Versions 9.2.0 maintenance_1 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.0:rc0:*:*:*:*:*:* Versions 9.2.0 rc0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.1:20140609:*:*:*:*:*:* Versions 9.2.1 20140609 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.2:20140723:*:*:*:*:*:* Versions 9.2.2 20140723 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.3:20140905:*:*:*:*:*:* Versions 9.2.3 20140905 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.4:20141103:*:*:*:*:*:* Versions 9.2.4 20141103 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.5:20141112:*:*:*:*:*:* Versions 9.2.5 20141112 Vulnerable ·Eclipse Foundation
Show 129 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:eclipse:jetty:9.2.6:20141203:*:*:*:*:*:* | 9.2.6 20141203 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.6:20141205:*:*:*:*:*:* | 9.2.6 20141205 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.7:20150116:*:*:*:*:*:* | 9.2.7 20150116 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.8:20150217:*:*:*:*:*:* | 9.2.8 20150217 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.9:20150224:*:*:*:*:*:* | 9.2.9 20150224 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.10:20150310:*:*:*:*:*:* | 9.2.10 20150310 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.11:20150528:*:*:*:*:*:* | 9.2.11 20150528 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.11:20150529:*:*:*:*:*:* | 9.2.11 20150529 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.11:maintenance_0:*:*:*:*:*:* | 9.2.11 maintenance_0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.12:20150709:*:*:*:*:*:* | 9.2.12 20150709 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.12:maintenance_0:*:*:*:*:*:* | 9.2.12 maintenance_0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.13:20150730:*:*:*:*:*:* | 9.2.13 20150730 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.14:20151106:*:*:*:*:*:* | 9.2.14 20151106 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.15:20160210:*:*:*:*:*:* | 9.2.15 20160210 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.16:20160407:*:*:*:*:*:* | 9.2.16 20160407 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.16:20160414:*:*:*:*:*:* | 9.2.16 20160414 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.17:20160517:*:*:*:*:*:* | 9.2.17 20160517 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.18:20160721:*:*:*:*:*:* | 9.2.18 20160721 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.19:20160908:*:*:*:*:*:* | 9.2.19 20160908 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.20:20161216:*:*:*:*:*:* | 9.2.20 20161216 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.21:20170120:*:*:*:*:*:* | 9.2.21 20170120 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.22:20170606:*:*:*:*:*:* | 9.2.22 20170606 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.23:20171218:*:*:*:*:*:* | 9.2.23 20171218 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.24:20180105:*:*:*:*:*:* | 9.2.24 20180105 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.25:20180606:*:*:*:*:*:* | 9.2.25 20180606 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.2.26:20180806:*:*:*:*:*:* | 9.2.26 20180806 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.0:20150601:*:*:*:*:*:* | 9.3.0 20150601 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.0:20150608:*:*:*:*:*:* | 9.3.0 20150608 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.0:20150612:*:*:*:*:*:* | 9.3.0 20150612 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.0:maintenance0:*:*:*:*:*:* | 9.3.0 maintenance0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.0:maintenance1:*:*:*:*:*:* | 9.3.0 maintenance1 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.0:maintenance2:*:*:*:*:*:* | 9.3.0 maintenance2 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.0:rc0:*:*:*:*:*:* | 9.3.0 rc0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.0:rc1:*:*:*:*:*:* | 9.3.0 rc1 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.1:20150714:*:*:*:*:*:* | 9.3.1 20150714 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.2:20150730:*:*:*:*:*:* | 9.3.2 20150730 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.3:20150825:*:*:*:*:*:* | 9.3.3 20150825 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.3:20150827:*:*:*:*:*:* | 9.3.3 20150827 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.4:20151005:*:*:*:*:*:* | 9.3.4 20151005 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.4:20151007:*:*:*:*:*:* | 9.3.4 20151007 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.4:rc0:*:*:*:*:*:* | 9.3.4 rc0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.4:rc1:*:*:*:*:*:* | 9.3.4 rc1 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.5:20151012:*:*:*:*:*:* | 9.3.5 20151012 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.6:20151106:*:*:*:*:*:* | 9.3.6 20151106 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.7:20160115:*:*:*:*:*:* | 9.3.7 20160115 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.7:rc0:*:*:*:*:*:* | 9.3.7 rc0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.7:rc1:*:*:*:*:*:* | 9.3.7 rc1 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.8:20160311:*:*:*:*:*:* | 9.3.8 20160311 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.8:20160314:*:*:*:*:*:* | 9.3.8 20160314 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.8:rc0:*:*:*:*:*:* | 9.3.8 rc0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.9:20160517:*:*:*:*:*:* | 9.3.9 20160517 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.9:maintenance_0:*:*:*:*:*:* | 9.3.9 maintenance_0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.9:maintenance_1:*:*:*:*:*:* | 9.3.9 maintenance_1 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.10:20160621:*:*:*:*:*:* | 9.3.10 20160621 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.10:maintenance_0:*:*:*:*:*:* | 9.3.10 maintenance_0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.11:20160721:*:*:*:*:*:* | 9.3.11 20160721 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.11:maintenance_0:*:*:*:*:*:* | 9.3.11 maintenance_0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.12:20160915:*:*:*:*:*:* | 9.3.12 20160915 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.13:20161014:*:*:*:*:*:* | 9.3.13 20161014 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.13:maintenance_0:*:*:*:*:*:* | 9.3.13 maintenance_0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.14:20161028:*:*:*:*:*:* | 9.3.14 20161028 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.15:20161220:*:*:*:*:*:* | 9.3.15 20161220 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.16:20170119:*:*:*:*:*:* | 9.3.16 20170119 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.16:20170120:*:*:*:*:*:* | 9.3.16 20170120 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.17:20170317:*:*:*:*:*:* | 9.3.17 20170317 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.17:rc0:*:*:*:*:*:* | 9.3.17 rc0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.18:20170406:*:*:*:*:*:* | 9.3.18 20170406 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.19:20170502:*:*:*:*:*:* | 9.3.19 20170502 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.20:20170531:*:*:*:*:*:* | 9.3.20 20170531 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.21:20170918:*:*:*:*:*:* | 9.3.21 20170918 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.21:maintenance_0:*:*:*:*:*:* | 9.3.21 maintenance_0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.21:rc0:*:*:*:*:*:* | 9.3.21 rc0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.22:20171030:*:*:*:*:*:* | 9.3.22 20171030 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.23:20180228:*:*:*:*:*:* | 9.3.23 20180228 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.24:20180605:*:*:*:*:*:* | 9.3.24 20180605 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.3.25:20180904:*:*:*:*:*:* | 9.3.25 20180904 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.0:20161207:*:*:*:*:*:* | 9.4.0 20161207 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.0:20161208:*:*:*:*:*:* | 9.4.0 20161208 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.0:20180619:*:*:*:*:*:* | 9.4.0 20180619 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.0:maintenance_0:*:*:*:*:*:* | 9.4.0 maintenance_0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.0:maintenance_1:*:*:*:*:*:* | 9.4.0 maintenance_1 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.0:rc0:*:*:*:*:*:* | 9.4.0 rc0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.0:rc1:*:*:*:*:*:* | 9.4.0 rc1 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.0:rc2:*:*:*:*:*:* | 9.4.0 rc2 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.0:rc3:*:*:*:*:*:* | 9.4.0 rc3 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.1:20170120:*:*:*:*:*:* | 9.4.1 20170120 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.1:20180619:*:*:*:*:*:* | 9.4.1 20180619 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.2:20170220:*:*:*:*:*:* | 9.4.2 20170220 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.2:20180619:*:*:*:*:*:* | 9.4.2 20180619 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.3:20170317:*:*:*:*:*:* | 9.4.3 20170317 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.3:20180619:*:*:*:*:*:* | 9.4.3 20180619 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.4:20170410:*:*:*:*:*:* | 9.4.4 20170410 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.4:20170414:*:*:*:*:*:* | 9.4.4 20170414 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.4:20180619:*:*:*:*:*:* | 9.4.4 20180619 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.5:20170502:*:*:*:*:*:* | 9.4.5 20170502 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.5:20180619:*:*:*:*:*:* | 9.4.5 20180619 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.6:20170531:*:*:*:*:*:* | 9.4.6 20170531 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.6:20180619:*:*:*:*:*:* | 9.4.6 20180619 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.7:20170914:*:*:*:*:*:* | 9.4.7 20170914 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.7:20180619:*:*:*:*:*:* | 9.4.7 20180619 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.7:rc0:*:*:*:*:*:* | 9.4.7 rc0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.8:20171121:*:*:*:*:*:* | 9.4.8 20171121 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.8:20180619:*:*:*:*:*:* | 9.4.8 20180619 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.9:20180320:*:*:*:*:*:* | 9.4.9 20180320 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.10:20180503:*:*:*:*:*:* | 9.4.10 20180503 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.10:rc0:*:*:*:*:*:* | 9.4.10 rc0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.10:rc1:*:*:*:*:*:* | 9.4.10 rc1 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.11:20180605:*:*:*:*:*:* | 9.4.11 20180605 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.12:20180830:*:*:*:*:*:* | 9.4.12 20180830 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.12:rc0:*:*:*:*:*:* | 9.4.12 rc0 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.12:rc1:*:*:*:*:*:* | 9.4.12 rc1 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.12:rc2:*:*:*:*:*:* | 9.4.12 rc2 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.13:20181111:*:*:*:*:*:* | 9.4.13 20181111 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.14:20181114:*:*:*:*:*:* | 9.4.14 20181114 | Vulnerable | Eclipse Foundation |
| cpe:2.3:a:eclipse:jetty:9.4.15:20190215:*:*:*:*:*:* | 9.4.15 20190215 | Vulnerable | Eclipse Foundation |
| cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* | 9.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Debian |
| cpe:2.3:a:apache:activemq:5.15.9:*:*:*:*:*:*:* | 5.15.9 | Vulnerable | Apache |
| cpe:2.3:a:apache:drill:1.16.0:*:*:*:*:*:*:* | 1.16.0 | Vulnerable | Apache |
| cpe:2.3:a:oracle:flexcube_core_banking:*:*:*:*:*:*:*:* | 11.5.0 – 11.7.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:flexcube_core_banking:5.2.0:*:*:*:*:*:*:* | 5.2.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:* | 11.2.0.4 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:* | 12.1.0.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:* | 12.2.0.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:* | 18c | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:* | 7.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:* | 15.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:* | 16.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:* | 17.0 | Vulnerable | Oracle |
- cpe:2.3:a:eclipse:jetty:9.2.6:20141203:*:*:*:*:*:* Versions 9.2.6 20141203 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.6:20141205:*:*:*:*:*:* Versions 9.2.6 20141205 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.7:20150116:*:*:*:*:*:* Versions 9.2.7 20150116 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.8:20150217:*:*:*:*:*:* Versions 9.2.8 20150217 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.9:20150224:*:*:*:*:*:* Versions 9.2.9 20150224 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.10:20150310:*:*:*:*:*:* Versions 9.2.10 20150310 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.11:20150528:*:*:*:*:*:* Versions 9.2.11 20150528 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.11:20150529:*:*:*:*:*:* Versions 9.2.11 20150529 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.11:maintenance_0:*:*:*:*:*:* Versions 9.2.11 maintenance_0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.12:20150709:*:*:*:*:*:* Versions 9.2.12 20150709 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.12:maintenance_0:*:*:*:*:*:* Versions 9.2.12 maintenance_0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.13:20150730:*:*:*:*:*:* Versions 9.2.13 20150730 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.14:20151106:*:*:*:*:*:* Versions 9.2.14 20151106 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.15:20160210:*:*:*:*:*:* Versions 9.2.15 20160210 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.16:20160407:*:*:*:*:*:* Versions 9.2.16 20160407 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.16:20160414:*:*:*:*:*:* Versions 9.2.16 20160414 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.17:20160517:*:*:*:*:*:* Versions 9.2.17 20160517 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.18:20160721:*:*:*:*:*:* Versions 9.2.18 20160721 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.19:20160908:*:*:*:*:*:* Versions 9.2.19 20160908 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.20:20161216:*:*:*:*:*:* Versions 9.2.20 20161216 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.21:20170120:*:*:*:*:*:* Versions 9.2.21 20170120 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.22:20170606:*:*:*:*:*:* Versions 9.2.22 20170606 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.23:20171218:*:*:*:*:*:* Versions 9.2.23 20171218 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.24:20180105:*:*:*:*:*:* Versions 9.2.24 20180105 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.25:20180606:*:*:*:*:*:* Versions 9.2.25 20180606 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.2.26:20180806:*:*:*:*:*:* Versions 9.2.26 20180806 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.0:20150601:*:*:*:*:*:* Versions 9.3.0 20150601 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.0:20150608:*:*:*:*:*:* Versions 9.3.0 20150608 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.0:20150612:*:*:*:*:*:* Versions 9.3.0 20150612 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.0:maintenance0:*:*:*:*:*:* Versions 9.3.0 maintenance0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.0:maintenance1:*:*:*:*:*:* Versions 9.3.0 maintenance1 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.0:maintenance2:*:*:*:*:*:* Versions 9.3.0 maintenance2 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.0:rc0:*:*:*:*:*:* Versions 9.3.0 rc0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.0:rc1:*:*:*:*:*:* Versions 9.3.0 rc1 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.1:20150714:*:*:*:*:*:* Versions 9.3.1 20150714 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.2:20150730:*:*:*:*:*:* Versions 9.3.2 20150730 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.3:20150825:*:*:*:*:*:* Versions 9.3.3 20150825 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.3:20150827:*:*:*:*:*:* Versions 9.3.3 20150827 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.4:20151005:*:*:*:*:*:* Versions 9.3.4 20151005 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.4:20151007:*:*:*:*:*:* Versions 9.3.4 20151007 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.4:rc0:*:*:*:*:*:* Versions 9.3.4 rc0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.4:rc1:*:*:*:*:*:* Versions 9.3.4 rc1 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.5:20151012:*:*:*:*:*:* Versions 9.3.5 20151012 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.6:20151106:*:*:*:*:*:* Versions 9.3.6 20151106 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.7:20160115:*:*:*:*:*:* Versions 9.3.7 20160115 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.7:rc0:*:*:*:*:*:* Versions 9.3.7 rc0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.7:rc1:*:*:*:*:*:* Versions 9.3.7 rc1 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.8:20160311:*:*:*:*:*:* Versions 9.3.8 20160311 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.8:20160314:*:*:*:*:*:* Versions 9.3.8 20160314 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.8:rc0:*:*:*:*:*:* Versions 9.3.8 rc0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.9:20160517:*:*:*:*:*:* Versions 9.3.9 20160517 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.9:maintenance_0:*:*:*:*:*:* Versions 9.3.9 maintenance_0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.9:maintenance_1:*:*:*:*:*:* Versions 9.3.9 maintenance_1 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.10:20160621:*:*:*:*:*:* Versions 9.3.10 20160621 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.10:maintenance_0:*:*:*:*:*:* Versions 9.3.10 maintenance_0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.11:20160721:*:*:*:*:*:* Versions 9.3.11 20160721 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.11:maintenance_0:*:*:*:*:*:* Versions 9.3.11 maintenance_0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.12:20160915:*:*:*:*:*:* Versions 9.3.12 20160915 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.13:20161014:*:*:*:*:*:* Versions 9.3.13 20161014 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.13:maintenance_0:*:*:*:*:*:* Versions 9.3.13 maintenance_0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.14:20161028:*:*:*:*:*:* Versions 9.3.14 20161028 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.15:20161220:*:*:*:*:*:* Versions 9.3.15 20161220 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.16:20170119:*:*:*:*:*:* Versions 9.3.16 20170119 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.16:20170120:*:*:*:*:*:* Versions 9.3.16 20170120 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.17:20170317:*:*:*:*:*:* Versions 9.3.17 20170317 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.17:rc0:*:*:*:*:*:* Versions 9.3.17 rc0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.18:20170406:*:*:*:*:*:* Versions 9.3.18 20170406 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.19:20170502:*:*:*:*:*:* Versions 9.3.19 20170502 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.20:20170531:*:*:*:*:*:* Versions 9.3.20 20170531 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.21:20170918:*:*:*:*:*:* Versions 9.3.21 20170918 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.21:maintenance_0:*:*:*:*:*:* Versions 9.3.21 maintenance_0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.21:rc0:*:*:*:*:*:* Versions 9.3.21 rc0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.22:20171030:*:*:*:*:*:* Versions 9.3.22 20171030 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.23:20180228:*:*:*:*:*:* Versions 9.3.23 20180228 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.24:20180605:*:*:*:*:*:* Versions 9.3.24 20180605 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.3.25:20180904:*:*:*:*:*:* Versions 9.3.25 20180904 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.0:20161207:*:*:*:*:*:* Versions 9.4.0 20161207 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.0:20161208:*:*:*:*:*:* Versions 9.4.0 20161208 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.0:20180619:*:*:*:*:*:* Versions 9.4.0 20180619 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.0:maintenance_0:*:*:*:*:*:* Versions 9.4.0 maintenance_0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.0:maintenance_1:*:*:*:*:*:* Versions 9.4.0 maintenance_1 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.0:rc0:*:*:*:*:*:* Versions 9.4.0 rc0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.0:rc1:*:*:*:*:*:* Versions 9.4.0 rc1 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.0:rc2:*:*:*:*:*:* Versions 9.4.0 rc2 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.0:rc3:*:*:*:*:*:* Versions 9.4.0 rc3 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.1:20170120:*:*:*:*:*:* Versions 9.4.1 20170120 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.1:20180619:*:*:*:*:*:* Versions 9.4.1 20180619 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.2:20170220:*:*:*:*:*:* Versions 9.4.2 20170220 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.2:20180619:*:*:*:*:*:* Versions 9.4.2 20180619 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.3:20170317:*:*:*:*:*:* Versions 9.4.3 20170317 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.3:20180619:*:*:*:*:*:* Versions 9.4.3 20180619 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.4:20170410:*:*:*:*:*:* Versions 9.4.4 20170410 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.4:20170414:*:*:*:*:*:* Versions 9.4.4 20170414 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.4:20180619:*:*:*:*:*:* Versions 9.4.4 20180619 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.5:20170502:*:*:*:*:*:* Versions 9.4.5 20170502 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.5:20180619:*:*:*:*:*:* Versions 9.4.5 20180619 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.6:20170531:*:*:*:*:*:* Versions 9.4.6 20170531 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.6:20180619:*:*:*:*:*:* Versions 9.4.6 20180619 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.7:20170914:*:*:*:*:*:* Versions 9.4.7 20170914 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.7:20180619:*:*:*:*:*:* Versions 9.4.7 20180619 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.7:rc0:*:*:*:*:*:* Versions 9.4.7 rc0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.8:20171121:*:*:*:*:*:* Versions 9.4.8 20171121 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.8:20180619:*:*:*:*:*:* Versions 9.4.8 20180619 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.9:20180320:*:*:*:*:*:* Versions 9.4.9 20180320 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.10:20180503:*:*:*:*:*:* Versions 9.4.10 20180503 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.10:rc0:*:*:*:*:*:* Versions 9.4.10 rc0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.10:rc1:*:*:*:*:*:* Versions 9.4.10 rc1 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.11:20180605:*:*:*:*:*:* Versions 9.4.11 20180605 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.12:20180830:*:*:*:*:*:* Versions 9.4.12 20180830 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.12:rc0:*:*:*:*:*:* Versions 9.4.12 rc0 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.12:rc1:*:*:*:*:*:* Versions 9.4.12 rc1 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.12:rc2:*:*:*:*:*:* Versions 9.4.12 rc2 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.13:20181111:*:*:*:*:*:* Versions 9.4.13 20181111 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.14:20181114:*:*:*:*:*:* Versions 9.4.14 20181114 Vulnerable ·Eclipse Foundation
- cpe:2.3:a:eclipse:jetty:9.4.15:20190215:*:*:*:*:*:* Versions 9.4.15 20190215 Vulnerable ·Eclipse Foundation
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
- cpe:2.3:a:apache:activemq:5.15.9:*:*:*:*:*:*:* Versions 5.15.9 Vulnerable ·Apache
- cpe:2.3:a:apache:drill:1.16.0:*:*:*:*:*:*:* Versions 1.16.0 Vulnerable ·Apache
- cpe:2.3:a:oracle:flexcube_core_banking:*:*:*:*:*:*:*:* Versions 11.5.0 – 11.7.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:flexcube_core_banking:5.2.0:*:*:*:*:*:*:* Versions 5.2.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:* Versions 11.2.0.4 Vulnerable ·Oracle
- cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:* Versions 12.1.0.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:* Versions 12.2.0.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:* Versions 18c Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1:*:*:*:*:*:*:* Versions 7.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0:*:*:*:*:*:*:* Versions 15.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0:*:*:*:*:*:*:* Versions 16.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0:*:*:*:*:*:*:* Versions 17.0 Vulnerable ·Oracle
Remediation
- Fix · GHSA-7vx9-xjhr-rw6h org.eclipse.jetty:jetty-server (Maven) Fixed in 9.2.27.v20190403 Advisory →
- Fix · GHSA-7vx9-xjhr-rw6h org.eclipse.jetty:jetty-server (Maven) Fixed in 9.3.26.v20190403 Advisory →
- Fix · GHSA-7vx9-xjhr-rw6h org.eclipse.jetty:jetty-server (Maven) Fixed in 9.4.16.v20190411 Advisory →
Red Hat 3 advisories
- RHSA-2020:1445 Released 2020-04-14 · Red Hat rating ImportantRed Hat AMQ Broker 7.4.3 release and security update
- Red Hat AMQ 7.4.3
- RHSA-2020:0983 Released 2020-03-26 · Red Hat rating ImportantRed Hat Fuse 7.6.0 security update
- Red Hat Fuse 7.6.0
- RHSA-2020:0922 Released 2020-03-23 · Red Hat rating ImportantRed Hat AMQ Broker 7.6 release and security update
- Red Hat AMQ
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Will not fix |
| Red Hat Fuse 7 | Affected | No fix yet |
| Red Hat JBoss A-MQ 6 | Affected | No fix planned: Out of support scope |
| Red Hat JBoss Fuse 6 | Affected | No fix planned: Out of support scope |
| Red Hat Satellite 5 | Affected | No fix planned: Out of support scope |
| Red Hat Software Collections | Affected | No fix planned: Will not fix |
| Red Hat AMQ | Fixed | RHSA-2020:0922 |
| Red Hat AMQ 7.4.3 | Fixed | RHSA-2020:1445 |
| Red Hat Fuse 7.6.0 | Fixed | RHSA-2020:0983 |
Timeline
- 2026-10-02 Threatist record created from CVE-2019-10241
- 2026-10-03 Alias added: GHSA-7vx9-xjhr-rw6h
References
Patch 2
Advisory 5
Other 19
- [kafka-jira] 20190501 [jira] [Created] (KAFKA-8308) Update jetty for security vulnerability CVE-2019-10241
- [kafka-dev] 20190501 [jira] [Created] (KAFKA-8308) Update jetty for security vulnerability CVE-2019-10241
- [kafka-jira] 20190503 [jira] [Assigned] (KAFKA-8308) Update jetty for security vulnerability CVE-2019-10241
- [kafka-jira] 20190503 [jira] [Resolved] (KAFKA-8308) Update jetty for security vulnerability CVE-2019-10241
- [kafka-dev] 20190503 [jira] [Resolved] (KAFKA-8308) Update jetty for security vulnerability CVE-2019-10241
- [activemq-issues] 20190723 [jira] [Created] (AMQ-7249) Security Vulnerabilities in the ActiveMQ dependent jars.
- [activemq-issues] 20190820 [jira] [Created] (AMQ-7279) Security Vulnerabilities in Libraries - jackson-databind-2.9.8.jar, tomcat-servlet-api-8.0.53.jar, tomcat-websocket-api-8.0.53.jar, zookeeper-3.4.6.jar, guava-18.0.jar, jetty-all-9.2.26.v20180806.jar, scala-library-2.11.0.jar
- [drill-dev] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities
- [drill-issues] 20191021 [jira] [Created] (DRILL-7416) Updates required to dependencies to resolve potential security vulnerabilities
- https://lists.apache.org/thread.html/01e004c3f7c7365863a27e7038b7f32dae56ccf3a496b277c9b7f7b6@%3Cjira.kafka.apache.org%3E
- https://lists.apache.org/thread.html/053d9ce4d579b02203db18545fee5e33f35f2932885459b74d1e4272@%3Cissues.activemq.apache.org%3E
- https://lists.apache.org/thread.html/464892b514c029dfc0c8656a93e1c0de983c473df70fdadbd224e09f@%3Cjira.kafka.apache.org%3E
- https://lists.apache.org/thread.html/519eb0fd45642dcecd9ff74cb3e71c20a4753f7d82e2f07864b5108f@%3Cdev.drill.apache.org%3E
- https://lists.apache.org/thread.html/8bff534863c7aaf09bb17c3d0532777258dd3a5c7ddda34198cc2742@%3Cdev.kafka.apache.org%3E
- https://lists.apache.org/thread.html/ac51944aef91dd5006b8510b0bef337adaccfe962fb90e7af9c22db4@%3Cissues.activemq.apache.org%3E
- https://lists.apache.org/thread.html/bcfb37bfba7b3d7e9c7808b5e5a38a98d6bb714d52cf5162bdd48e32@%3Cjira.kafka.apache.org%3E
- https://lists.apache.org/thread.html/d7c4a664a34853f57c2163ab562f39802df5cf809523ea40c97289c1@%3Cdev.kafka.apache.org%3E
- https://lists.apache.org/thread.html/f9bc3e55f4e28d1dcd1a69aae6d53e609a758e34d2869b4d798e13cc@%3Cissues.drill.apache.org%3E
- https://security.netapp.com/advisory/ntap-20190509-0003
More Eclipse Foundation Jetty vulnerabilities
- TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
- TI-2026-08807 Digest authentication lossy encoding CVSS 4.0HIGH 8.7
- TI-2026-01972 HTTP Request Smuggling via Chunked Extension Quoted-String Parsing CVSS 3.1CRITICAL 9.1
- TI-2015-01867 The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote… CVSS 3.0HIGH 7.5
- TI-2021-09394 Uncontrolled resource consumption in Eclipse Jetty CVSS 3.1HIGH 7.5
- TI-2021-13463 Information disclosure in Eclipse Jetty CVSS 3.1MEDIUM 5.3
Sources
- CVE-2019-10241 · CVE Program
- CVE-2019-10241 · NVD
- FIRST EPSS
- GHSA-7vx9-xjhr-rw6h · GitHub Advisory Database · CC BY 4.0
- CVE-2019-10241 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences