EUVD-2022-5062

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Jetty 8.1.0.RC2 and earlier are vulnerable to denial of service via hash collision attacks on form parameters.

Reporter	Title	Published	Views	Family All 55
IBM Security Bulletins	Security Bulletin: Potential security exposure when using InfoSphere BigInsights due to vulnerability in Jetty	25 Sep 202223:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple JRE vulnerabilities addressed in IBM Sterling Secure Proxy (CVE-2013-0440, CVE-2013-0443, CVE-2013-0169)	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Application not signed properly in IBM Sterling External Authentication Server (CVE-2013-0521)	26 Sep 202203:31	–	ibm
IBM Security Bulletins	Security Bulletin: Provision to add https and Secure Flag to bayeux_browser cookie for IBM Control Desk.	19 Sep 202220:54	–	ibm
IBM Security Bulletins	Security Bulletin: Potential denial-of-service (DoS) issues related to Jetty application server identified in OmniFind Enterprise Edition and Content Analytics with Enterprise Search products	25 Sep 202223:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed in IBM Sterling External Authentication Server (CVE-2013-0514, CVE-2013-0517)	25 Sep 202223:13	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple JRE vulnerabilities addressed in IBM Sterling External Authentication Server (CVE-2013-1571, CVE-2013-1500, CVE-2013-0443, CVE-2013-0440, CVE-2013-0169)	25 Sep 202221:06	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of service in IBM InfoSphere Data Replication Dashboard (CVE-2011-4461)	25 Sep 202223:13	–	ibm
IBM Security Bulletins	Security Bulletin: Potential Denial of Service (DoS) security vulnerability in IBM Sterling Secure Proxy	26 Sep 202205:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy’s session or sensitive cookies do not have the secure attribute enabled (CVE-2013-0515)	26 Sep 202203:29	–	ibm

[
  {
    "enisaIdVendor": [
      {
        "id": "07f5d336-0cb7-3fdd-8f0a-6a391acb50c5",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "f11fca51-b953-343f-8220-f33cf1d04ce1",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2011-4461
github	www.github.com/eclipse/jetty.project/commit/085c79d7d6cfbccc02821ffdb64968593df3e0bf
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/72017
github	www.github.com/eclipse/jetty.project
security	www.security.netapp.com/advisory/ntap-20190307-0004
marc	www.marc.info/
kb	www.kb.cert.org/vuls/id/903934
ocert	www.ocert.org/advisories/ocert-2011-003.html
oracle	www.oracle.com/technetwork/security-advisory/cpuapr2016v3-2985753.html
oracle	www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

03 Oct 2025 20:07Current

5.8Medium risk

Vulners AI Score5.8

CVSS 35.3

CVSS 25

EPSS0.03003