Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

mortbay jetty 3.0.a97 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2

CVE-2011-4461

Jetty 8.1.0.RC2 and previous versions computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote malicious users to cause a denial of service (CPU consumption) by sending many crafted parameters.
Oracle Sun Storage Common Array Manager 6.9.0Mortbay Jetty 1.0.1Mortbay Jetty 6.1.5Mortbay Jetty 6.1.0Mortbay Jetty 6.1.12Mortbay Jetty 4.2.25Mortbay Jetty 5.1.3Mortbay Jetty 6.0.0Mortbay Jetty 1.3.1Mortbay Jetty 3.0.a3Mortbay Jetty 1.3.4Mortbay Jetty 4.2.22Mortbay Jetty 3.1.8Mortbay Jetty 3.0.a0Mortbay Jetty 6.1.15Mortbay Jetty 4.2.1Mortbay Jetty 2.0.4Mortbay Jetty 2.2Mortbay Jetty 2.2.8Mortbay Jetty 7.0.0Mortbay Jetty 5.1.2Mortbay Jetty 5.1.5
5
CVSSv2

CVE-2009-1523

Directory traversal vulnerability in the HTTP server in Mort Bay Jetty 5.1.14, 6.x prior to 6.1.17, and 7.x up to and including 7.0.0.M2 allows remote malicious users to access arbitrary files via directory traversal sequences in the URI.
Mortbay Jetty 1.0.1Mortbay Jetty 6.1.5Mortbay Jetty 6.1.0Mortbay Jetty 6.1.12Mortbay Jetty 4.2.25Mortbay Jetty 5.1.3Mortbay Jetty 6.0.0Mortbay Jetty 1.3.1Mortbay Jetty 3.0.a3Mortbay Jetty 1.3.4Mortbay Jetty 4.2.22Mortbay Jetty 3.1.8Mortbay Jetty 3.0.a0Mortbay Jetty 6.1.15Mortbay Jetty 4.2.1Mortbay Jetty 2.0.4Mortbay JettyMortbay Jetty 2.2Mortbay Jetty 2.2.8Mortbay Jetty 7.0.0Mortbay Jetty 5.1.2Mortbay Jetty 5.1.5
4.3
CVSSv2

CVE-2009-1524

Cross-site scripting (XSS) vulnerability in Mort Bay Jetty prior to 6.1.17 allows remote malicious users to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character.
Mortbay Jetty 1.0.1Mortbay Jetty 6.1.5Mortbay Jetty 6.1.0Mortbay Jetty 6.1.12Mortbay Jetty 4.2.25Mortbay Jetty 5.1.3Mortbay Jetty 6.0.0Mortbay Jetty 1.3.1Mortbay Jetty 3.0.a3Mortbay Jetty 1.3.4Mortbay Jetty 4.2.22Mortbay Jetty 3.1.8Mortbay Jetty 3.0.a0Mortbay Jetty 6.1.15Mortbay Jetty 4.2.1Mortbay Jetty 2.0.4Mortbay Jetty 2.2Mortbay Jetty 2.2.8Mortbay Jetty 5.1.2Mortbay Jetty 5.1.5Mortbay Jetty 5.1.13Mortbay Jetty 3.0.a95
5
CVSSv2

CVE-2005-3747

Unspecified vulnerability in Jetty prior to 5.1.6 allows remote malicious users to obtain source code of JSP pages, possibly involving requests for .jsp files with URL-encoded backslash ("%5C") characters. NOTE: this might be the same issue as CVE-2006-2758.
Mortbay Jetty 1.0.1Mortbay Jetty 4.2.25Mortbay Jetty 5.1.3Mortbay Jetty 1.3.1Mortbay Jetty 3.0.a3Mortbay Jetty 1.3.4Mortbay Jetty 4.2.22Mortbay Jetty 3.1.8Mortbay Jetty 3.0.a0Mortbay Jetty 4.2.1Mortbay Jetty 2.0.4Mortbay Jetty 2.2Mortbay Jetty 2.2.8Mortbay Jetty 5.1.2Mortbay Jetty 5.1.5Mortbay Jetty 3.0.a95Mortbay Jetty 4.2.9Mortbay Jetty 3.0.0Mortbay Jetty 5.0Mortbay Jetty 2.1.1Mortbay Jetty 3.0.a97Mortbay Jetty 2.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3080log injectionCVE-2024-6041CVE-2024-37661XML external entityCVE-2024-0845privilege escalationCVE-2023-37057CVE-2024-27801
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook