JH
Product
Jetty Http Server
4
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Jetty Http Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-6969 | – | Feb 7 | Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util.random, which makes it easier for… Affected: 4.2.9; 4.2.11; 4.2.12; 4.2.14; 4.2.15; 4.2.16; +7 more |
| CVE-2004-2381 | – | Dec 31 | HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large… Affected: 4.0.0; 4.0.1; 4.0.1_rc0; 4.0.1_rc1; 4.0.1_rc2; 4.0.2; +34 more |
| CVE-2004-2478 | – | Dec 31 | Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before… Affected: 3.1.6; 3.1.7; 4.1.0; 4.1.0_rc4; 4.1.1; 4.2.4; +12 more |
| CVE-2002-1178 | – | Oct 11 | Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences… Affected: through 4.1.0 |
Showing 4