The vulnerability of Eclipse Jetty servlet containers arises from the lack of measures taken to protect the structure of web pages, allowing attackers to carry out XSS attacks.

Jetty servlet containers lack page protections, enabling cross site scripting via crafted URLs to DefaultServlet or ResourceHandler.

Reporter	Title	Published	Views	Family All 69
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse jetty	21 Jun 202318:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	15 Apr 202503:05	–	ibm
IBM Security Bulletins	Security Bulletin: Java Vulnerability Affects IBM Sterling Connect:Direct Browser User Interface (CVE-2019-10241, CVE-2019-10246 & CVE-2019-10247)	23 Jun 202216:36	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	7 Oct 202020:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Insights is affected by a Components with known vulnerabilities	6 Oct 202112:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Eclipse Jetty Vulnerabilities Affect IBM Sterling Secure Proxy Summary	24 Jul 202022:19	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect IBM InfoSphere Information Server	11 Sep 201919:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Eclipse Jetty Vulnerabilities Affect IBM Sterling Secure External Authentication Server	24 Jul 202022:19	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	7 Oct 202022:53	–	ibm

Vulners

Node

eclipse jettyRange<9.2.27

eclipse jettyRange<9.3.26

eclipse jettyRange<9.4.16

Source	Link
oracle	www.oracle.com/technetwork/topics/security/public-vuln-to-advisory-mapping-093627.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-10241
bugs	www.bugs.eclipse.org/bugs/show_bug.cgi
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2021-1126SE17
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.5/
strelets	www.strelets.net/patchi-i-obnovleniya-bezopasnosti
nvd	www.nvd.nist.gov/vuln/detail

21 Nov 2023 00:00Current

6.4Medium risk

Vulners AI Score6.4

CVSS 25.8

CVSS 36.1

EPSS0.09591