Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mortbay jetty 6.1.11 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2009-4612
Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x up to and including 6.1.21 allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) jspsnoop/, (2) jspsnoop/ERROR/, a...
Mortbay Jetty 6.1.15Mortbay Jetty 6.1.12Mortbay Jetty 6.1.14Mortbay Jetty 6.1.6Mortbay Jetty 6.1.5Mortbay Jetty 6.1.2Mortbay Jetty 6.1.1Mortbay Jetty 6.1.16Mortbay Jetty 6.1.7Mortbay Jetty 6.1.20Mortbay Jetty 6.1.0Mortbay Jetty 6.1.21Mortbay Jetty 6.1.9Mortbay Jetty 6.1.10Mortbay Jetty 6.1.4Mortbay Jetty 6.1.3Mortbay Jetty 6.1.19Mortbay Jetty 6.1.11Mortbay Jetty 6.1.8
4.3
CVSSv2
CVE-2009-4610
Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote malicious users to inject arbitrary web script or HTML via (1) the query string to jsp/dump.jsp in the JSP Dump feature, or the (2) Name or (3) Value parameter to the default URI for ...
Mortbay Jetty 6.1.15Mortbay Jetty 6.1.8Mortbay Jetty 6.1.7Mortbay Jetty 6.1.6Mortbay Jetty 6.1.2Mortbay Jetty 6.1.16Mortbay Jetty 6.1.12Mortbay Jetty 6.1.10Mortbay Jetty 6.1.5Mortbay Jetty 6.1.20Mortbay Jetty 6.1.1Mortbay Jetty 6.1.0Mortbay Jetty 6.0.0Mortbay Jetty 7.0.0Mortbay Jetty 6.1.4Mortbay Jetty 6.1.3Mortbay Jetty 6.1.19Mortbay Jetty 6.1.14Mortbay Jetty 6.1.9Mortbay Jetty 6.1.11Mortbay Jetty 6.0.2Mortbay Jetty 6.0.1
7.5
CVSSv2
CVE-2009-4611
Mort Bay Jetty 6.x up to and including 6.1.22 and 7.0.0 writes backtrace data without sanitizing non-printable characters, which might allow remote malicious users to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request cont...
Mortbay Jetty 6.1.15Mortbay Jetty 6.1.12Mortbay Jetty 6.1.7Mortbay Jetty 6.1.6Mortbay Jetty 6.1.4Mortbay Jetty 6.1.2Mortbay Jetty 6.1.0Mortbay Jetty 6.0.0Mortbay Jetty 6.1.16Mortbay Jetty 6.1.11Mortbay Jetty 6.1.8Mortbay Jetty 6.1.20Mortbay Jetty 6.1.1Mortbay Jetty 6.0.1Mortbay Jetty 6.1.3Mortbay Jetty 6.1.19Mortbay Jetty 6.1.14Mortbay Jetty 6.1.9Mortbay Jetty 6.1.10Mortbay Jetty 6.1.5Mortbay Jetty 6.0.2Mortbay Jetty 7.0.0
5
CVSSv2
CVE-2009-4609
The Dump Servlet in Mort Bay Jetty 6.x and 7.0.0 allows remote malicious users to obtain sensitive information about internal variables and other data via a request to a URI ending in /dump/, as demonstrated by discovering the value of the getPathTranslated variable.
Mortbay Jetty 6.1.16Mortbay Jetty 6.1.15Mortbay Jetty 6.1.12Mortbay Jetty 6.1.7Mortbay Jetty 6.1.5Mortbay Jetty 6.1.20Mortbay Jetty 6.1.2Mortbay Jetty 6.1.0Mortbay Jetty 6.0.0Mortbay Jetty 6.1.9Mortbay Jetty 6.1.10Mortbay Jetty 6.1.4Mortbay Jetty 6.1.3Mortbay Jetty 6.1.19Mortbay Jetty 6.0.2Mortbay Jetty 7.0.0Mortbay Jetty 6.1.6Mortbay Jetty 6.1.1Mortbay Jetty 6.1.14Mortbay Jetty 6.1.11Mortbay Jetty 6.1.8Mortbay Jetty 6.0.1
5
CVSSv2
CVE-2011-4461
Jetty 8.1.0.RC2 and previous versions computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote malicious users to cause a denial of service (CPU consumption) by sending many crafted parameters.
Oracle Sun Storage Common Array Manager 6.9.0Mortbay Jetty 7.0.0Mortbay Jetty 6.1.16Mortbay Jetty 6.1.15Mortbay Jetty 6.1.11Mortbay Jetty 6.1.12Mortbay Jetty 6.1.4Mortbay Jetty 6.1.2Mortbay Jetty 6.1.1Mortbay Jetty 6.1.0Mortbay Jetty 6.0.0Mortbay Jetty 5.1.14Mortbay Jetty 5.0Mortbay Jetty 5.1.12Mortbay Jetty 5.1.11Mortbay Jetty 5.1.5Mortbay Jetty 5.1.0Mortbay Jetty 5.1Mortbay Jetty 5.1.3Mortbay Jetty 4.2.17Mortbay Jetty 4.2.22Mortbay Jetty 4.2.15
5
CVSSv2
CVE-2009-1523
Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x prior to 6.1.17, and 7.x up to and including 7.0.0.M2 allows remote malicious users to access arbitrary files via directory traversal sequences in the URI.
Mortbay Jetty 6.1.15Mortbay Jetty 6.1.12Mortbay Jetty 6.1.6Mortbay Jetty 6.1.5Mortbay Jetty 6.1.2Mortbay Jetty 6.1.1Mortbay Jetty 5.1.13Mortbay Jetty 5.1.14Mortbay Jetty 6.0.1Mortbay Jetty 6.0.0Mortbay Jetty 5.1.8Mortbay Jetty 5.1.7Mortbay Jetty 5.1.4Mortbay Jetty 5.1.3Mortbay Jetty 5.1.1Mortbay Jetty 5.1.0Mortbay Jetty 5.1Mortbay Jetty 5.0.0Mortbay Jetty 4.2.22Mortbay Jetty 4.2.16Mortbay Jetty 5.0Mortbay Jetty 4.2.14
4.3
CVSSv2
CVE-2009-1524
Cross-site scripting (XSS) vulnerability in Mort Bay Jetty prior to 6.1.17 allows remote malicious users to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character.
Mortbay Jetty 6.1.15Mortbay Jetty 6.1.12Mortbay Jetty 6.1.11Mortbay Jetty 6.1.6Mortbay Jetty 6.1.5Mortbay Jetty 6.1.2Mortbay Jetty 6.1.1Mortbay Jetty 6.1.0Mortbay Jetty 5.1.14Mortbay Jetty 4.2.27Mortbay Jetty 6.0.0Mortbay Jetty 5.1.7Mortbay Jetty 5.1.3Mortbay Jetty 4.2.24Mortbay Jetty 5.1.2Mortbay Jetty 5.1.0Mortbay Jetty 6.0.2Mortbay Jetty 5.1.13Mortbay Jetty 4.2.26Mortbay Jetty 6.0.1Mortbay Jetty 5.1.8Mortbay Jetty 5.1.4
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook