Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:DSA-4949-1
HistoryAug 05, 2021 - 12:00 a.m.

jetty9 - security update

2021-08-0500:00:00
Google
osv.dev
35

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5.6 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.802 High

EPSS

Percentile

98.3%

JSON

Bulletin has no description

CPENameOperatorVersion
jetty9eq9.4.15-1

Related

openvas 19
debian 3
nessus 19
ibm 57
osv 17
redhat 11
attackerkb 1
suse 1
veracode 7
prion 7
f5 6
debiancve 7
cve 7
ubuntucve 7
github 7
redhatcve 7
symantec 2
githubexploit 6
seebug 2
srcincite 1
freebsd 1
atlassian 1
checkpoint_advisories 1
amazon 1
nuclei 1
openvas
openvas
Debian: Security Advisory (DSA-4949-1)
2021-08-06 00:00:00
Debian: Security Advisory (DLA-2661-1)
2021-05-15 00:00:00
SUSE: Security Advisory (SUSE-SU-2021:2005-1)
2021-06-18 00:00:00
debian
debian
[SECURITY] [DSA 4949-1] jetty9 security update
2021-08-04 21:52:09
[SECURITY] [DLA 2661-1] jetty9 security update
2021-05-14 13:28:53
[SECURITY] [DLA 2688-1] jetty9 security update
2021-06-17 18:46:57
nessus
nessus
Debian DSA-4949-1 : jetty9 - security update
2021-08-05 00:00:00
Jetty 10.0.x < 10.0.3 Multiple Vulnerabilities
2021-10-04 00:00:00
Jetty < 9.4.41 Multiple Vulnerabilities
2021-10-04 00:00:00
ibm
ibm
Security Bulletin: Vulnerability in Eclipse Jetty affects IBM Process Mining (Multiple CVEs)
2023-02-01 21:46:34
Security Bulletin: IBM Storage Protect Server is vulnerable to various attacks due to Eclipse jetty
2023-06-21 18:36:17
Security Bulletin: IBM Network Performance Insight (CVE-2019-10241, CVE-2019-10247)
2019-07-24 03:15:01
osv
osv
jetty9 - security update
2021-05-14 00:00:00
SessionListener can prevent a session from being invalidated breaking logout
2021-06-23 20:23:04
Cross-site Scripting in Eclipse Jetty
2019-04-23 16:06:02
redhat
redhat
(RHSA-2021:2499) Moderate: OpenShift Container Platform 4.6.36 security update
2021-06-29 05:50:19
(RHSA-2021:3758) Moderate: OpenShift Container Platform 4.9.0 packages and security update
2021-10-18 16:34:07
(RHSA-2020:5168) Moderate: rh-eclipse security, bug fix and enhancement update
2020-11-23 08:51:52
attackerkb
attackerkb
CVE-2021-28169
2021-06-09 00:00:00
suse
suse
Security update for jetty-minimal (important)
2021-07-11 00:00:00
veracode
veracode
Insecure Session ID
2021-06-24 03:44:41
Denial Of Service(DoS)
2021-03-01 03:37:45
Cross-site Scripting (XSS)
2019-04-23 03:03:46
prion
prion
Design/Logic Flaw
2019-04-22 20:29:00
Design/Logic Flaw
2019-04-22 20:29:00
Design/Logic Flaw
2021-02-26 22:15:00
f5
f5
K01869532 : Eclipse Jetty vulnerability CVE-2019-10241
2020-12-14 00:00:00
K41412302 : Jetty vulnerability CVE-2019-10247
2020-12-01 00:00:00
K15338344 : Eclipse Jetty vulnerability CVE-2021-28165
2021-10-15 00:00:00
debiancve
debiancve
CVE-2019-10247
2019-04-22 20:29:00
CVE-2019-10241
2019-04-22 20:29:00
CVE-2021-34428
2021-06-22 15:15:00
cve
cve
CVE-2019-10247
2019-04-22 20:29:00
CVE-2019-10241
2019-04-22 20:29:00
CVE-2020-27216
2020-10-23 13:15:00
ubuntucve
ubuntucve
CVE-2019-10241
2019-04-22 00:00:00
CVE-2021-34428
2021-06-22 00:00:00
CVE-2019-10247
2019-04-22 00:00:00
github
github
Cross-site Scripting in Eclipse Jetty
2019-04-23 16:06:02
Installation information leak in Eclipse Jetty
2019-04-23 16:07:12
Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure Vulnerability
2021-06-10 15:43:22
redhatcve
redhatcve
CVE-2019-10247
2019-05-03 12:04:35
CVE-2021-34428
2021-06-22 18:16:39
CVE-2019-10241
2019-05-03 10:22:41
symantec
symantec
Eclipse Jetty CVE-2019-10241 Cross Site Scripting Vulnerability
2019-04-04 00:00:00
Eclipse Jetty CVE-2019-10247 Information Disclosure Vulnerability
2019-06-11 00:00:00
githubexploit
githubexploit
Exploit for Insufficient Session Expiration in Eclipse Jetty
2023-11-01 10:15:36
Exploit for Insufficient Session Expiration in Eclipse Jetty
2023-11-27 07:25:34
Exploit for Uncontrolled Resource Consumption in Eclipse Jetty
2021-03-19 03:50:45
seebug
seebug
Jetty WEB-INF 信息泄露漏洞（CVE-2021-34428）
2021-07-30 00:00:00
Eclipse Jetty 信息泄露漏洞（CVE-2021-28169）
2021-06-09 00:00:00
srcincite
srcincite
SRC-2021-0017 : Jetty Utility Servlets ConcatServlet Double Decoding Information Disclosure Vulnerability
2021-05-05 00:00:00
freebsd
freebsd
jenkins -- Denial of service vulnerability in bundled Jetty
2021-04-20 00:00:00
atlassian
atlassian
DoS (Denial of Service) org.eclipse.jetty:jetty-io in Jira Software Data Center and Server
2023-09-26 16:17:04
checkpoint_advisories
checkpoint_advisories
Eclipse Jetty Denial Of Service (CVE-2020-27223)
2021-04-05 00:00:00
amazon
amazon
Medium: jetty
2024-01-03 21:04:00
nuclei
nuclei
Eclipse Jetty ConcatServlet - Information Disclosure
2021-06-24 16:00:02

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

5.6 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.802 High

EPSS

Percentile

98.3%

JSON
Related for OSV:DSA-4949-1
openvas19debian3nessus19ibm57osv17redhat11attackerkb1suse1veracode7prion7f56debiancve7cve7ubuntucve7github7redhatcve7symantec2githubexploit6seebug2srcincite1freebsd1atlassian1checkpoint_advisories1amazon1nuclei1