Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

jetty jetty http server 4.2.18 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2006-6969
Jetty prior to 4.2.27, 5.1 prior to 5.1.12, 6.0 prior to 6.0.2, and 6.1 prior to 6.1.0pre3 generates predictable session identifiers using java.util.random, which makes it easier for remote malicious users to guess a session identifier through brute force attacks, bypass authenti...
Jetty Jetty Http Server 4.2.18Jetty Jetty Http Server 4.2.19Jetty Jetty Http Server 4.2.12Jetty Jetty Http Server 4.2.14Jetty Jetty Http Server 5.1.11Jetty Jetty Http Server 6.0.1Jetty Jetty Http Server 4.2.15Jetty Jetty Http Server 4.2.16Jetty Jetty Http Server 4.2.17Jetty Jetty Http Server 6.1.0 Pre2Jetty Jetty Http Server 4.2.11Jetty Jetty Http Server 4.2.24Jetty Jetty Http Server 4.2.9
7.5
CVSSv2
CVE-2004-2478
Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange prior to 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) prior to 3.11, and possibly other products, allows remote malicious users to read arbitrary files via a .. (d...
Ibm Trading Partner Interchange 4.2.1Jetty Jetty Http Server 4.2.14Jetty Jetty Http Server 4.2.15Jetty Jetty Http Server 4.2.6Jetty Jetty Http Server 4.2.7Jetty Jetty Http Server 4.2.11Jetty Jetty Http Server 4.2.12Jetty Jetty Http Server 4.2.4Jetty Jetty Http Server 4.2.5Jetty Jetty Http Server 3.1.6Jetty Jetty Http Server 3.1.7Jetty Jetty Http Server 4.1.0Jetty Jetty Http Server 4.2.16Jetty Jetty Http Server 4.2.17Jetty Jetty Http Server 4.2.9Ca Unicenter Web Services Distributed ManagementJetty Jetty Http Server 4.1.0 Rc4Jetty Jetty Http Server 4.1.1Jetty Jetty Http Server 4.2.18Jetty Jetty Http Server 4.2.19Ibm Trading Partner Interchange
5
CVSSv2
CVE-2004-2381
HttpRequest.java in Jetty HTTP Server prior to 4.2.19 allows remote malicious users to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
Jetty Jetty Http Server 4.0.1Jetty Jetty Http Server 4.0.1 Rc0Jetty Jetty Http Server 4.0.6Jetty Jetty Http Server 4.0.b0Jetty Jetty Http Server 4.0.d4Jetty Jetty Http Server 4.0 Rc1Jetty Jetty Http Server 4.0 Rc2Jetty Jetty Http Server 4.0.0Jetty Jetty Http Server 4.0.4Jetty Jetty Http Server 4.0.5Jetty Jetty Http Server 4.0.d2Jetty Jetty Http Server 4.0.d3Jetty Jetty Http Server 4.1.0 Rc2Jetty Jetty Http Server 4.1.0 Rc3Jetty Jetty Http Server 4.1.4Jetty Jetty Http Server 4.1.b0Jetty Jetty Http Server 4.2.0 Rc0Jetty Jetty Http Server 4.2.0 Rc1Jetty Jetty Http Server 4.2.1Jetty Jetty Http Server 4.2.14 Rc0Jetty Jetty Http Server 4.2.14 Rc1Jetty Jetty Http Server 4.2.3
5
CVSSv2
CVE-2009-1523
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x prior to 6.1.17, and 7.x up to and including 7.0.0.M2 allows remote malicious users to access arbitrary files via directory traversal sequences in the URI.
Mortbay Jetty 6.1.15Mortbay Jetty 6.1.12Mortbay Jetty 6.1.6Mortbay Jetty 6.1.5Mortbay Jetty 6.1.2Mortbay Jetty 6.1.1Mortbay Jetty 5.1.13Mortbay Jetty 5.1.14Mortbay Jetty 6.0.1Mortbay Jetty 6.0.0Mortbay Jetty 5.1.8Mortbay Jetty 5.1.7Mortbay Jetty 5.1.4Mortbay Jetty 5.1.3Mortbay Jetty 5.1.1Mortbay Jetty 5.1.0Mortbay Jetty 5.1Mortbay Jetty 5.0.0Mortbay Jetty 4.2.22Mortbay Jetty 4.2.16Mortbay Jetty 5.0Mortbay Jetty 4.2.14
4.3
CVSSv2
CVE-2009-1524
Cross-site scripting (XSS) vulnerability in Mort Bay Jetty prior to 6.1.17 allows remote malicious users to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character.
Mortbay Jetty 6.1.15Mortbay Jetty 6.1.12Mortbay Jetty 6.1.11Mortbay Jetty 6.1.6Mortbay Jetty 6.1.5Mortbay Jetty 6.1.2Mortbay Jetty 6.1.1Mortbay Jetty 6.1.0Mortbay Jetty 5.1.14Mortbay Jetty 4.2.27Mortbay Jetty 6.0.0Mortbay Jetty 5.1.7Mortbay Jetty 5.1.3Mortbay Jetty 4.2.24Mortbay Jetty 5.1.2Mortbay Jetty 5.1.0Mortbay Jetty 6.0.2Mortbay Jetty 5.1.13Mortbay Jetty 4.2.26Mortbay Jetty 6.0.1Mortbay Jetty 5.1.8Mortbay Jetty 5.1.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook