Mortbay

11 CVEs across 1 Mortbay products. Browse Mortbay vulnerabilities, severities, and proof-of-concept exploits.

Mortbay products with known CVEs

ProductCVEs
Jetty11
Mortbay CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2009-5049Medium6.12019-11-06WebApp JSP Snoop page XSS in jetty though 6.1.21.
CVE-2009-5048Medium6.12019-11-06Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20.
CVE-2011-4461Medium5.32011-12-30Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remot…
CVE-2009-46122010-01-13Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21 allow remote attackers to inject arbitr…
CVE-2009-46112010-01-13Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote attackers to modify a w…
CVE-2009-46102010-01-13Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the q…
CVE-2009-46092010-01-13The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal variables and other data via a request…
CVE-2009-35792009-10-07Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitr…
CVE-2009-15242009-05-05Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing…
CVE-2009-15232009-05-05Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access ar…
CVE-2005-37472005-11-22Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL…