Mortbay Jetty
11 CVEs affecting Mortbay Jetty. Latest disclosed: 2019-11-06. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-5049 | Medium | 6.1 | 2019-11-06 | WebApp JSP Snoop page XSS in jetty though 6.1.21. |
CVE-2009-5048 | Medium | 6.1 | 2019-11-06 | Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20. |
CVE-2011-4461 | Medium | 5.3 | 2011-12-30 | Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remot… |
CVE-2009-4612 | | 2010-01-13 | Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21 allow remote attackers to inject arbitr… | |
CVE-2009-4611 | | 2010-01-13 | Mort Bay Jetty 6.x through 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote attackers to modify a w… | |
CVE-2009-4610 | | 2010-01-13 | Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the q… | |
CVE-2009-4609 | | 2010-01-13 | The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote attackers to obtain sensitive information about internal variables and other data via a request… | |
CVE-2009-3579 | | 2009-10-07 | Cross-site scripting (XSS) vulnerability in the CookieDump.java sample application in Mort Bay Jetty 6.1.19 and 6.1.20 allows remote attackers to inject arbitr… | |
CVE-2009-1524 | | 2009-05-05 | Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing… | |
CVE-2009-1523 | | 2009-05-05 | Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x before 6.1.17, and 7.x through 7.0.0.M2 allows remote attackers to access ar… | |
CVE-2005-3747 | | 2005-11-22 | Unspecified vulnerability in Jetty before 5.1.6 allows remote attackers to obtain source code of JSP pages, possibly involving requests for .jsp files with URL… |