Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

eclipse jetty 9.4.38 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2021-28164
In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web....
Eclipse Jetty 9.4.37Eclipse Jetty 9.4.38Netapp Santricity Cloud Connector -Netapp Snapcenter -Netapp E-series Performance Analyzer -Netapp E-series Santricity Web Services -Netapp Virtual Storage ConsoleNetapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data OntapNetapp Cloud Manager -Netapp Snapcenter Plug-in -Netapp E-series Santricity Os ControllerNetapp Element Plug-in For Vcenter Server -Oracle Banking Digital Experience 20.1Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Siebel Core - AutomationOracle Communications Session Route ManagerOracle Banking Digital Experience 21.1Oracle Banking Apis 20.1Oracle Banking Apis 21.1
4
CVSSv2
CVE-2021-28163
In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that m...
Eclipse Jetty 11.0.0Eclipse Jetty 10.0.0Eclipse Jetty 11.0.1Eclipse Jetty 10.0.1Eclipse JettyFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Apache Solr 8.8.1Apache IgniteNetapp Santricity Cloud Connector -Netapp Snapcenter -Netapp E-series Performance Analyzer -Netapp E-series Santricity Web Services -Netapp Virtual Storage ConsoleNetapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data OntapNetapp Cloud Manager -Netapp Snapcenter Plug-in -Netapp Element Plug-in For Vcenter Server -Netapp E-series Santricity Os ControllerOracle Banking Digital Experience 20.1
7.8
CVSSv2
CVE-2021-28165
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
Eclipse JettyOracle Communications Services Gatekeeper 7.0Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Siebel Core - AutomationOracle Communications Element Manager 8.2.2Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Session Report ManagerOracle Communications Session Route ManagerOracle Rest Data ServicesJenkins JenkinsNetapp Santricity Cloud Connector -Netapp E-series Santricity Os ControllerNetapp E-series Performance AnalyzerNetapp SnapcenterNetapp E-series Santricity StorageNetapp Santricity Web Services ProxyNetapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data OntapNetapp E-series Santricity Web ServicesNetapp Ontap ToolsNetapp Cloud Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38002CVE-2006-4304CVE-2024-4336CVE-2024-33437CVE-2024-4340CVE-2024-27956privilegeinsecure direct object referenceXSSitem search icon">CVE-2024-25938
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook