Lucene search
K

EUVD-2023-2405

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType 
euvd
 euvd
🔗 euvd.enisa.europa.eu👁 1 Views

Eclipse Jetty CGI Servlet issue allows incorrect command execution; patched in versions 9.4.52 to 12.0.0-beta2.

Related
Affected
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins
Security Bulletin: Multiple vulnerabilities in eclipse jetty affect IBM Business Automation Workflow
3 Jun 202413:36
ibm
IBM Security Bulletins
Security Bulletin: An Eclipse Jetty vulnerability affects IBM Rational Functional Tester
18 Dec 202312:04
ibm
IBM Security Bulletins
Security Bulletin: Multiple Vulnerabilities in IBM StreamSets Data Collector
22 Oct 202512:16
ibm
IBM Security Bulletins
Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in Eclipse Jetty
29 Nov 202314:46
ibm
IBM Security Bulletins
Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in its dependencies (CVE-2022-45688, CVE-2023-28439, CVE-2023-33201, CVE-2023-41900, CVE-2023-36479, CVE-2023-40167, CVE-2023-36478, )
24 Mar 202514:16
ibm
IBM Security Bulletins
Security Bulletin: IBM Sterling Connect:Direct Browser User Interface is vulnerable to multiple vulnerabilities due to Eclipse Jetty
24 Nov 202302:40
ibm
IBM Security Bulletins
Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse Jetty (CVE-2023-40167, CVE-2023-41900, CVE-2023-36479, CVE-2023-36478)
15 Dec 202316:26
ibm
IBM Security Bulletins
Security Bulletin: IBM Observability with Instana is affected by Multiple Security Vulnerabilities
5 Feb 202415:09
ibm
IBM Security Bulletins
Security Bulletin: IBM MaaS360 Cloud Extender Agent, Mobile Enterprise Gateway and VPN Module affected by multiple vulnerabilities
6 Feb 202419:49
ibm
IBM Security Bulletins
Security Bulletin: Multiple Vulnerabilities in Rational Change
8 Oct 202413:07
ibm
Rows per page
[
  {
    "enisaIdVendor": [
      {
        "id": "dee12653-90d9-37ba-94f1-2caddbf9f6ab",
        "vendor": {
          "name": "eclipse"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0dc45a66-5f3e-39b0-af6d-cfb50abdd6f3",
        "product": {
          "name": "jetty.project"
        },
        "product_version": "10.0.0, ≤ 10.0.15"
      },
      {
        "id": "13f0b802-57f9-33c9-8235-95ec0c6ea3f4",
        "product": {
          "name": "jetty.project"
        },
        "product_version": "≤ 12.0.0-beta1"
      },
      {
        "id": "828e807e-87f1-36fa-a6aa-1fb6cab40b74",
        "product": {
          "name": "jetty.project"
        },
        "product_version": "11.0.0, ≤ 11.0.15"
      },
      {
        "id": "aa3ac333-c91a-3519-9646-8ca9740562ee",
        "product": {
          "name": "jetty.project"
        },
        "product_version": "9.0.0, ≤ 9.4.51"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Oct 2025 20:07Current
6.2Medium risk
Vulners AI Score6.2
CVSS 3.13.1 - 3.5
EPSS0.01383
SSVC
1