Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2019-10247

🗓️ 22 Apr 2019 20:14:49Reported by eclipseType 
cve
 cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 357 Views

Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older reveals directory location in error respons

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse jetty
21 Jun 202318:36
–ibm
IBM Security Bulletins		Security Bulletin: Java Vulnerability Affects IBM Sterling Connect:Direct Browser User Interface (CVE-2019-10241, CVE-2019-10246 & CVE-2019-10247)
23 Jun 202216:36
–ibm
IBM Security Bulletins		Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities
4 May 202320:23
–ibm
IBM Security Bulletins		Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities
7 Oct 202020:49
–ibm
IBM Security Bulletins		Security Bulletin: IBM Security Guardium Insights is affected by a Components with known vulnerabilities
6 Oct 202112:30
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Eclipse Jetty Vulnerabilities Affect IBM Sterling Secure Proxy Summary
24 Jul 202022:19
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect IBM InfoSphere Information Server
11 Sep 201919:44
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in Jetty affect Netcool Agile Service Manager (CVE-2019-10247, CVE-2019-10246)
3 Jul 201905:10
–ibm
IBM Security Bulletins		Security Bulletin: Multiple Eclipse Jetty Vulnerabilities Affect IBM Sterling Secure External Authentication Server
24 Jul 202022:19
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in Jasper used in Jetty 8.1.3 Server where Rational Synergy is deployed
22 Dec 202018:18
–ibm
Rows per page
NVD
Node
OR
eclipsejettyMatch7.0.020091005
eclipsejettyMatch7.0.0maintenance_0
eclipsejettyMatch7.0.0maintenance_1
eclipsejettyMatch7.0.0maintenance_2
eclipsejettyMatch7.0.0maintenance_3
eclipsejettyMatch7.0.0maintenance_4
eclipsejettyMatch7.0.0rc0
eclipsejettyMatch7.0.0rc1
eclipsejettyMatch7.0.0rc3
eclipsejettyMatch7.0.0rc4
eclipsejettyMatch7.0.0rc5
eclipsejettyMatch7.0.0rc6
eclipsejettyMatch7.0.120091125
eclipsejettyMatch7.0.220100331
eclipsejettyMatch7.0.2rc0
eclipsejettyMatch7.1.020100505
eclipsejettyMatch7.1.0rc0
eclipsejettyMatch7.1.0rc1
eclipsejettyMatch7.1.120100517
eclipsejettyMatch7.1.220100523
eclipsejettyMatch7.1.320100526
eclipsejettyMatch7.1.420100610
eclipsejettyMatch7.1.520100705
eclipsejettyMatch7.1.620100715
eclipsejettyMatch7.2.020101020
eclipsejettyMatch7.2.0rc0
eclipsejettyMatch7.2.120101111
eclipsejettyMatch7.2.220101205
eclipsejettyMatch7.3.020110203
eclipsejettyMatch7.3.120110307
eclipsejettyMatch7.4.020110414
eclipsejettyMatch7.4.0rc0
eclipsejettyMatch7.4.120110513
eclipsejettyMatch7.4.220110526
eclipsejettyMatch7.4.320110630
eclipsejettyMatch7.4.320110701
eclipsejettyMatch7.4.420110707
eclipsejettyMatch7.4.520110725
eclipsejettyMatch7.5.020110901
eclipsejettyMatch7.5.0rc0
eclipsejettyMatch7.5.0rc1
eclipsejettyMatch7.5.0rc2
eclipsejettyMatch7.5.120110908
eclipsejettyMatch7.5.220111006
eclipsejettyMatch7.5.320111011
eclipsejettyMatch7.5.420111024
eclipsejettyMatch7.6.020120125
eclipsejettyMatch7.6.020120127
eclipsejettyMatch7.6.0rc0
eclipsejettyMatch7.6.0rc1
eclipsejettyMatch7.6.0rc2
eclipsejettyMatch7.6.0rc3
eclipsejettyMatch7.6.0rc4
eclipsejettyMatch7.6.0rc5
eclipsejettyMatch7.6.120120215
eclipsejettyMatch7.6.220120302
eclipsejettyMatch7.6.220120308
eclipsejettyMatch7.6.320120413
eclipsejettyMatch7.6.320120416
eclipsejettyMatch7.6.420120522
eclipsejettyMatch7.6.420120524
eclipsejettyMatch7.6.520120713
eclipsejettyMatch7.6.520120716
eclipsejettyMatch7.6.620120903
eclipsejettyMatch7.6.720120910
eclipsejettyMatch7.6.820121106
eclipsejettyMatch7.6.920130131
eclipsejettyMatch7.6.1020130312
eclipsejettyMatch7.6.1120130520
eclipsejettyMatch7.6.1120130725
eclipsejettyMatch7.6.1220130726
eclipsejettyMatch7.6.1320130910
eclipsejettyMatch7.6.1320130916
eclipsejettyMatch7.6.1420131031
eclipsejettyMatch7.6.1520140411
eclipsejettyMatch7.6.1620140903
eclipsejettyMatch7.6.1720150415
eclipsejettyMatch7.6.1820150929
eclipsejettyMatch7.6.1920160209
eclipsejettyMatch7.6.2020160902
eclipsejettyMatch7.6.2120160908
eclipsejettyMatch8.0.020110901
eclipsejettyMatch8.0.0maintenance_0
eclipsejettyMatch8.0.0maintenance_1
eclipsejettyMatch8.0.0maintenance_2
eclipsejettyMatch8.0.0maintenance_3
eclipsejettyMatch8.0.0rc0
eclipsejettyMatch8.0.120110908
eclipsejettyMatch8.0.220111006
eclipsejettyMatch8.0.320111011
eclipsejettyMatch8.0.420111024
eclipsejettyMatch8.1.020120127
eclipsejettyMatch8.1.0rc0
eclipsejettyMatch8.1.0rc1
eclipsejettyMatch8.1.0rc2
eclipsejettyMatch8.1.0rc4
eclipsejettyMatch8.1.0rc5
eclipsejettyMatch8.1.120120215
eclipsejettyMatch8.1.220120302
eclipsejettyMatch8.1.220120308
eclipsejettyMatch8.1.320120416
eclipsejettyMatch8.1.420120524
eclipsejettyMatch8.1.520120713
eclipsejettyMatch8.1.520120716
eclipsejettyMatch8.1.620120903
eclipsejettyMatch8.1.720120910
eclipsejettyMatch8.1.820121106
eclipsejettyMatch8.1.920130131
eclipsejettyMatch8.1.1020130312
eclipsejettyMatch8.1.1120130520
eclipsejettyMatch8.1.1220130725
eclipsejettyMatch8.1.1220130726
eclipsejettyMatch8.1.1320130910
eclipsejettyMatch8.1.1320130916
eclipsejettyMatch8.1.1420131031
eclipsejettyMatch8.1.1520140411
eclipsejettyMatch8.1.1620140903
eclipsejettyMatch8.1.1720150415
eclipsejettyMatch8.1.1820150929
eclipsejettyMatch8.1.1920160209
eclipsejettyMatch8.1.2020160902
eclipsejettyMatch8.1.2120160908
eclipsejettyMatch8.1.2220160922
eclipsejettyMatch8.2.020160908
eclipsejettyMatch9.0.020130308
eclipsejettyMatch9.0.0m5
eclipsejettyMatch9.0.0maintenance_0
eclipsejettyMatch9.0.0maintenance_1
eclipsejettyMatch9.0.0maintenance_2
eclipsejettyMatch9.0.0maintenance_3
eclipsejettyMatch9.0.0maintenance_4
eclipsejettyMatch9.0.0maintenance_5
eclipsejettyMatch9.0.0rc0
eclipsejettyMatch9.0.0rc1
eclipsejettyMatch9.0.0rc2
eclipsejettyMatch9.0.0rc3
eclipsejettyMatch9.0.120130408
eclipsejettyMatch9.0.220130417
eclipsejettyMatch9.0.220140415
eclipsejettyMatch9.0.320130506
eclipsejettyMatch9.0.420130621
eclipsejettyMatch9.0.420130625
eclipsejettyMatch9.0.520130813
eclipsejettyMatch9.0.520130815
eclipsejettyMatch9.0.620130919
eclipsejettyMatch9.0.620130930
eclipsejettyMatch9.0.720131031
eclipsejettyMatch9.0.720131107
eclipsejettyMatch9.1.020131115
eclipsejettyMatch9.1.0maintenance_0
eclipsejettyMatch9.1.0rc0
eclipsejettyMatch9.1.0rc1
eclipsejettyMatch9.1.0rc2
eclipsejettyMatch9.1.120140108
eclipsejettyMatch9.1.220140210
eclipsejettyMatch9.1.320140225
eclipsejettyMatch9.1.420140401
eclipsejettyMatch9.1.520140505
eclipsejettyMatch9.1.620151106
eclipsejettyMatch9.1.620160112
eclipsejettyMatch9.2.020140523
eclipsejettyMatch9.2.020140526
eclipsejettyMatch9.2.0maintenance_0
eclipsejettyMatch9.2.0maintenance_1
eclipsejettyMatch9.2.0rc0
eclipsejettyMatch9.2.120140609
eclipsejettyMatch9.2.220140723
eclipsejettyMatch9.2.320140905
eclipsejettyMatch9.2.420141103
eclipsejettyMatch9.2.520141112
eclipsejettyMatch9.2.620141203
eclipsejettyMatch9.2.620141205
eclipsejettyMatch9.2.720150116
eclipsejettyMatch9.2.820150217
eclipsejettyMatch9.2.920150224
eclipsejettyMatch9.2.1020150310
eclipsejettyMatch9.2.1120150528
eclipsejettyMatch9.2.1120150529
eclipsejettyMatch9.2.11maintenance_0
eclipsejettyMatch9.2.1220150709
eclipsejettyMatch9.2.12maintenance_0
eclipsejettyMatch9.2.1320150730
eclipsejettyMatch9.2.1420151106
eclipsejettyMatch9.2.1520160210
eclipsejettyMatch9.2.1620160407
eclipsejettyMatch9.2.1620160414
eclipsejettyMatch9.2.1720160517
eclipsejettyMatch9.2.1820160721
eclipsejettyMatch9.2.1920160908
eclipsejettyMatch9.2.2020161216
eclipsejettyMatch9.2.2120170120
eclipsejettyMatch9.2.2220170606
eclipsejettyMatch9.2.2320171218
eclipsejettyMatch9.2.2420180105
eclipsejettyMatch9.2.2520180606
eclipsejettyMatch9.2.2620180806
eclipsejettyMatch9.2.2720190403
eclipsejettyMatch9.3.020150601
eclipsejettyMatch9.3.020150608
eclipsejettyMatch9.3.020150612
eclipsejettyMatch9.3.0maintenance0
eclipsejettyMatch9.3.0maintenance1
eclipsejettyMatch9.3.0maintenance2
eclipsejettyMatch9.3.0rc0
eclipsejettyMatch9.3.0rc1
eclipsejettyMatch9.3.120150714
eclipsejettyMatch9.3.220150730
eclipsejettyMatch9.3.320150825
eclipsejettyMatch9.3.320150827
eclipsejettyMatch9.3.420151005
eclipsejettyMatch9.3.420151007
eclipsejettyMatch9.3.4rc0
eclipsejettyMatch9.3.4rc1
eclipsejettyMatch9.3.520151012
eclipsejettyMatch9.3.620151106
eclipsejettyMatch9.3.720160115
eclipsejettyMatch9.3.7rc0
eclipsejettyMatch9.3.7rc1
eclipsejettyMatch9.3.820160311
eclipsejettyMatch9.3.820160314
eclipsejettyMatch9.3.8rc0
eclipsejettyMatch9.3.920160517
eclipsejettyMatch9.3.9maintenance_0
eclipsejettyMatch9.3.9maintenance_1
eclipsejettyMatch9.3.1020160621
eclipsejettyMatch9.3.10maintenance_0
eclipsejettyMatch9.3.1120160721
eclipsejettyMatch9.3.11maintenance_0
eclipsejettyMatch9.3.1220160915
eclipsejettyMatch9.3.1320161014
eclipsejettyMatch9.3.13maintenance_0
eclipsejettyMatch9.3.1420161028
eclipsejettyMatch9.3.1520161220
eclipsejettyMatch9.3.1620170119
eclipsejettyMatch9.3.1620170120
eclipsejettyMatch9.3.1720170317
eclipsejettyMatch9.3.17rc0
eclipsejettyMatch9.3.1820170406
eclipsejettyMatch9.3.1920170502
eclipsejettyMatch9.3.2020170531
eclipsejettyMatch9.3.2120170918
eclipsejettyMatch9.3.21maintenance_0
eclipsejettyMatch9.3.21rc0
eclipsejettyMatch9.3.2220171030
eclipsejettyMatch9.3.2320180228
eclipsejettyMatch9.3.2420180605
eclipsejettyMatch9.3.2520180904
eclipsejettyMatch9.3.2620190403
eclipsejettyMatch9.4.020161207
eclipsejettyMatch9.4.020161208
eclipsejettyMatch9.4.020180619
eclipsejettyMatch9.4.0maintenance_0
eclipsejettyMatch9.4.0maintenance_1
eclipsejettyMatch9.4.0rc0
eclipsejettyMatch9.4.0rc1
eclipsejettyMatch9.4.0rc2
eclipsejettyMatch9.4.0rc3
eclipsejettyMatch9.4.120170120
eclipsejettyMatch9.4.120180619
eclipsejettyMatch9.4.220170220
eclipsejettyMatch9.4.220180619
eclipsejettyMatch9.4.320170317
eclipsejettyMatch9.4.320180619
eclipsejettyMatch9.4.420170410
eclipsejettyMatch9.4.420170414
eclipsejettyMatch9.4.420180619
eclipsejettyMatch9.4.520170502
eclipsejettyMatch9.4.520180619
eclipsejettyMatch9.4.620170531
eclipsejettyMatch9.4.620180619
eclipsejettyMatch9.4.720170914
eclipsejettyMatch9.4.720180619
eclipsejettyMatch9.4.7rc0
eclipsejettyMatch9.4.820171121
eclipsejettyMatch9.4.820180619
eclipsejettyMatch9.4.920180320
eclipsejettyMatch9.4.1020180503
eclipsejettyMatch9.4.10rc0
eclipsejettyMatch9.4.10rc1
eclipsejettyMatch9.4.1120180605
eclipsejettyMatch9.4.1220180830
eclipsejettyMatch9.4.12rc0
eclipsejettyMatch9.4.12rc1
eclipsejettyMatch9.4.12rc2
eclipsejettyMatch9.4.1320181111
eclipsejettyMatch9.4.1420181114
eclipsejettyMatch9.4.1520190215
Node
OR
netapponcommand_system_managerRange3.0–3.1.3
netappsnap_creator_frameworkMatch-
netappsnapcenterMatch-
netappsnapmanagerMatch--oracle
netappsnapmanagerMatch--sap
netappstorage_replication_adapter_for_clustered_data_ontapRange9.6≥vmware_vsphere
netappstorage_services_connectorMatch-
netappvasa_provider_for_clustered_data_ontapRange9.6≥
netappvirtual_storage_consoleRange9.6≥vmware_vsphere
netappelementMatch-vcenter_server
Node
OR
oracleautovueMatch21.0.2
oraclecommunications_analyticsMatch12.1.1
oraclecommunications_element_managerMatch8.0.0
oraclecommunications_element_managerMatch8.1.0
oraclecommunications_element_managerMatch8.1.1
oraclecommunications_element_managerMatch8.2.0
oraclecommunications_services_gatekeeperMatch6.0
oraclecommunications_services_gatekeeperMatch6.1
oraclecommunications_services_gatekeeperMatch7.0
oraclecommunications_session_report_managerMatch8.0.0
oraclecommunications_session_report_managerMatch8.1.0
oraclecommunications_session_report_managerMatch8.1.1
oraclecommunications_session_report_managerMatch8.2.0
oraclecommunications_session_route_managerMatch8.0.0
oraclecommunications_session_route_managerMatch8.1.0
oraclecommunications_session_route_managerMatch8.1.1
oraclecommunications_session_route_managerMatch8.2.0
oracledata_integratorMatch12.2.1.3.0
oracledata_integratorMatch12.2.1.4.0
oracleendeca_information_discovery_integratorMatch3.2.0
oracleenterprise_manager_base_platformMatch13.2
oracleenterprise_manager_base_platformMatch13.3
oracleflexcube_core_bankingRange11.5.0–11.7.0
oracleflexcube_core_bankingMatch5.2.0
oracleflexcube_private_bankingMatch12.0.0
oracleflexcube_private_bankingMatch12.1.0
oraclefmw_platformMatch12.2.1.3.0
oraclefmw_platformMatch12.2.1.4.0
oraclehospitality_guest_accessMatch4.2.0
oraclehospitality_guest_accessMatch4.2.1
oracleretail_xstore_point_of_serviceMatch7.1
oracleretail_xstore_point_of_serviceMatch15.0
oracleretail_xstore_point_of_serviceMatch16.0
oracleretail_xstore_point_of_serviceMatch17.0
oracleunified_directoryMatch12.2.1.3.0
oracleunified_directoryMatch12.2.1.4.0
Node
OR
debiandebian_linuxMatch9.0
debiandebian_linuxMatch10.0
[
  {
    "product": "Eclipse Jetty",
    "vendor": "The Eclipse Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "7.x"
      },
      {
        "status": "affected",
        "version": "8.x"
      },
      {
        "lessThanOrEqual": "9.2.27",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "9.3.26",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "9.4.16",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
17 Jun 2026 02:10Current
6Medium risk
Vulners AI Score6
CVSS 25
CVSS 3.15.3
EPSS0.05782
CWE-200CWE-213
eclipse jettycve-2019-10247security vulnerabilityinformation disclosuredirectory location disclosure
357