CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
Confidence
High
EPSS
Percentile
85.0%
Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.
Vendor | Product | Version | CPE |
---|---|---|---|
mortbay_jetty | jetty | 1.0 | cpe:2.3:a:mortbay_jetty:jetty:1.0:*:*:*:*:*:*:* |
mortbay_jetty | jetty | 2.4 | cpe:2.3:a:mortbay_jetty:jetty:2.4:*:*:*:*:*:*:* |
mortbay_jetty | jetty | 3.0 | cpe:2.3:a:mortbay_jetty:jetty:3.0:*:*:*:*:*:*:* |
mortbay_jetty | jetty | 3.1 | cpe:2.3:a:mortbay_jetty:jetty:3.1:*:*:*:*:*:*:* |
mortbay_jetty | jetty | 4.0 | cpe:2.3:a:mortbay_jetty:jetty:4.0:*:*:*:*:*:*:* |
mortbay_jetty | jetty | 4.1 | cpe:2.3:a:mortbay_jetty:jetty:4.1:*:*:*:*:*:*:* |
mortbay_jetty | jetty | 4.2 | cpe:2.3:a:mortbay_jetty:jetty:4.2:*:*:*:*:*:*:* |
mortbay_jetty | jetty | 5 | cpe:2.3:a:mortbay_jetty:jetty:5:*:*:*:*:*:*:* |
mortbay_jetty | jetty | 5.1 | cpe:2.3:a:mortbay_jetty:jetty:5.1:*:*:*:*:*:*:* |
mortbay_jetty | jetty | 6 | cpe:2.3:a:mortbay_jetty:jetty:6:*:*:*:*:*:*:* |
jira.codehaus.org/browse/JETTY-452
lists.opensuse.org/opensuse-security-announce/2009-02/msg00002.html
osvdb.org/42497
secunia.com/advisories/27925
secunia.com/advisories/30941
secunia.com/advisories/35143
svn.codehaus.org/jetty/jetty/trunk/VERSION.txt
www.kb.cert.org/vuls/id/237888
www.securityfocus.com/bid/26697
www.redhat.com/archives/fedora-package-announce/2008-July/msg00227.html
www.redhat.com/archives/fedora-package-announce/2008-July/msg00250.html