Jetty
Vendor:
First CVE: Nov 22, 2005 · Active for 20 years
11
Total CVEs
More Total CVEs than 90% of tracked products
2.2
Avg CVEs / Year
Higher CVE frequency than 76% of tracked products
5.2
Avg CVSS
Higher Avg CVSS than 11% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Jetty over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 22, 2005
20 years ago
Most Recent CVE
Nov 6, 2019
2,456 days ago
CVE Severity & Scoring
Jetty11 CVEs
91%
9%
All CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network3 (27.3%)
Unknown8 (72.7%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low3 (27.3%)
High0 (0.0%)
Unknown8 (72.7%)
User Interaction
None1 (9.1%)
Unknown8 (72.7%)
Required2 (18.2%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None3 (27.3%)
Unknown8 (72.7%)
Top CVEs
Signals from CVEs in this product scope (11 CVEs).
11 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-1523MEDIUM Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access arbitrary files via dir | May 5, 2009 | 5.0 | 41 | NO | YES |
CVE-2005-3747MEDIUM Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash (" | Nov 22, 2005 | 5.0 | 25 | NO | YES |
CVE-2009-4612MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21 allow remote attackers to inject arbitrary web script or HTM | Jan 13, 2010 | 4.3 | 24 | NO | YES |
CVE-2009-4610MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to jsp/du | Jan 13, 2010 | 4.3 | 23 | NO | YES |
CVE-2009-5049MEDIUM WebApp JSP Snoop page XSS in jetty though 6.1.21. | Nov 6, 2019 | 6.1 | 22 | NO | NO |
CVE-2009-5048MEDIUM Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20. | Nov 6, 2019 | 6.1 | 22 | NO | NO |
CVE-2011-4461MEDIUM Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause | Dec 30, 2011 | 5.3 | 22 | NO | NO |
CVE-2009-4611HIGH Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or pos | Jan 13, 2010 | 7.5 | 20 | NO | NO |
CVE-2009-4609MEDIUM The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal variables and other data via a request to a URI ending in /d | Jan 13, 2010 | 5.0 | 19 | NO | NO |
CVE-2009-1524MEDIUM Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing request containing a | May 5, 2009 | 4.3 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (11 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
36.4% of CVEs· 89th percentile
Social Chatter
Signals from CVEs in this product scope (11 CVEs).
Media Mentions
Signals from CVEs in this product scope (11 CVEs).
Top CNAs Publishing CVEs For Jetty
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 7.0.0 | 5 | 5.3 | 11.9% | 0 | 2 |
| 6.1.9 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.8 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.7 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.6 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.5 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.4 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.3 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.21 | 2 | 4.8 | 4.2% | 0 | 1 |
| 6.1.20 | 6 | 5.1 | 2.9% | 0 | 2 |
| 6.1.2 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.19 | 6 | 5.1 | 2.9% | 0 | 2 |
| 6.1.16 | 5 | 5.3 | 3.3% | 0 | 2 |
| 6.1.15 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.14 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.12 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.11 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.10 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.1 | 7 | 5.1 | 6.4% | 0 | 3 |
| 6.1.0 | 7 | 5.1 | 6.4% | 0 | 3 |