CVE-2020-27223

🗓️ 26 Feb 2021 21:55:13Reported by eclipseType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 389 Views

Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114, 10.0.0, and 11.0.0 may enter a denial of service (DoS) state due to high CPU usage

Reporter	Title	Published	Views	Family All 84
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: CVE-2020-27223 when Jetty handles a request containing multiple Accept headers the server may enter a denial of service (DoS) state	30 Jul 202105:03	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	11 Mar 202620:59	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect the IBM App Connect Enterprise Toolkit and the IBM Integration Bus Toolkit	30 Jun 202309:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	29 Jun 202123:59	–	ibm
IBM Security Bulletins	Security Bulletin: Common vulnerabilities fixed in Cloudera Data Platform 7.1.9 HF2	7 May 202419:54	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Eclipse Jetty affects IBM Process Mining (CVE-2020-27223,CVE-2021-28169)	1 Feb 202321:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with known vulnerabilities - Eclipse Jetty ( CVE-2021-28163, CVE-2021-28165, CVE-2020-27223)	14 Jul 202118:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities were detected in IBM Secure Proxy	30 Jul 202105:06	–	ibm
IBM Security Bulletins	Security Bulletin: Security fixes available for The IBM® Engineering System Design Rhapsody products on IBM Jazz Technology	19 Apr 202407:11	–	ibm

NVD

Node

eclipse jettyRange9.4.7–9.4.36

eclipse jettyMatch9.4.620170531

eclipse jettyMatch9.4.620180619

eclipse jettyMatch9.4.36-

eclipse jettyMatch9.4.3620210114

eclipse jettyMatch10.0.0-

eclipse jettyMatch11.0.0-

Node

apache nifiMatch1.13.0

apache sparkMatch3.1.1-

Node

netapp e-series_santricity_os_controllerRange11.0.0–11.70.1

netapp e-series_santricity_web_servicesMatch-web_services_proxy

netapp element_plug-in_for_vcenter_serverMatch-

netapp hciMatch-

netapp hci_management_nodeMatch-

netapp management_services_for_element_softwareMatch-

netapp snap_creator_frameworkMatch-

netapp snapcenterMatch-

netapp snapmanagerMatch-oracle

netapp snapmanagerMatch-sap

netapp solidfireMatch-

Node

debian debian_linuxMatch10.0

Node

apache solrMatch8.8.1

Node

oracle rest_data_servicesRange<20.4.3.050.1904-

[
  {
    "defaultStatus": "unaffected",
    "product": "Eclipse Jetty",
    "vendor": "The Eclipse Foundation",
    "versions": [
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "9.4.6.v20170531",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "9.4.36.v20210114",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "10.0.0"
      },
      {
        "status": "affected",
        "version": "11.0.0"
      }
    ]
  }
]

Source	Link
lists	www.lists.apache.org/thread.html/rd8e24a3e482e5984bc8c5492dc790413e4fdc1234e3debb94515796b%40%3Cjira.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/r734f996149bb9b1796740385fcbdf3e093eb9aabedc0f20a48ea1d68%40%3Cissues.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/r07aedcb1ece62969c406cb84c8f0e22cec7e42cdc272f3176e473320%40%3Cusers.solr.apache.org%3E
lists	www.lists.apache.org/thread.html/r26d9196f4d2afb9bec2784bcb6fc183aca82e4119bf41bdc613eec01%40%3Cnotifications.zookeeper.apache.org%3E
lists	www.lists.apache.org/thread.html/rdd6c47321db1bfe12c68a898765bf3b6f97e2afa6a501254ed4feaed%40%3Cjira.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/r7ffd050d3bd7c90d95f4933560b5f4f15971ab9a5f5322fdce116243%40%3Cdev.lucene.apache.org%3E
lists	www.lists.apache.org/thread.html/re0d38cc2b5da28f708fc89de49036f3ace052c47a1202f7d70291614%40%3Cdev.kafka.apache.org%3E
lists	www.lists.apache.org/thread.html/rc721fe2910533bffb6bd4d69ea8ff4f36066d260dbcd2d14e041614a%40%3Cissues.spark.apache.org%3E
lists	www.lists.apache.org/thread.html/rf190d1d28e1367d1664ef6bc2f71227566d7b6b39209817a5364da1f%40%3Cissues.solr.apache.org%3E
lists	www.lists.apache.org/thread.html/re819198d4732804dc01fca8b5b144689a118ede49f6128968773595c%40%3Ccommits.kafka.apache.org%3E

20 Aug 2025 10:15Current

5.2Medium risk

Vulners AI Score5.2

CVSS 24.3

CVSS 3.15.2 - 5.3

EPSS0.33816