JE
Vendor
Jetty
7
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2006-6969 | JH Jetty Http Server Jetty | – | Feb 7 | Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util.random, which makes it easier for… |
| CVE-2006-2759 | JE Jetty Jetty | – | Jun 2 | jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations |
| CVE-2006-2758 | JE Jetty Jetty | – | Jun 2 | Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL |
| CVE-2004-2478 | JH Jetty Http Server Jetty | – | Dec 31 | Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before… |
| CVE-2004-2381 | JH Jetty Http Server Jetty | – | Dec 31 | HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large… |
| CVE-2002-1533 | JE Jetty Jetty | – | Mar 31 | Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name… |
| CVE-2002-1178 | JH Jetty Http Server Jetty | – | Oct 11 | Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences… |