Login Request a demo
JE
Product
Jetty
by Eclipse · last CVE Aug 4, 2026
On CISA KEVExploited in the wild
52
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities52In the news0Timeline
Severity mix
Critical 6High 21Medium 21Low 4
Severity
All severities52Critical6High21Medium21Low4
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Jetty to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-34428
3.5
1%
Jun 22
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in…
Affected: through 9.4.40; 10.0.0 through 10.0.2; 11.0.0 through 11.0.2
CVE-2023-36479
3.1
1%
Sep 15
Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project
Affected: 9.0.0 before 9.4.52; 10.0.0 before 10.0.16; 11.0.0 before 11.0.16; 12.0.0; 12.0.0; 12.0.0; +2 more
CVE-2022-2047
2.7
1%
Jul 7
In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI…
Affected: before 9.4.46; 10.0.0 before 10.0.9; 11.0.0 through 11.0.9
CVE-2021-28163
2.7
4%
Apr 1
In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory…
Affected: 9.4.32 before 9.4.39; 10.0.0; 10.0.1; 11.0.0; 11.0.0; 11.0.0; +1 more
Showing 4