CVE-2020-27218

🗓️ 30 Nov 2020 19:29:12Reported by redhat.comType

Vulnerability in Eclipse Jetty versions 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2 allows for body injection in multiplexed connection

Reporter	Title	Published	Views	Family All 81
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Apache HttpClient and Eclipse Jetty Affect IBM Control Center (CVE-2020-13956, CVE-2020-27218)	14 May 202121:15	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	27 Mar 202608:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	29 Jun 202123:59	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Eclipse Jetty affects IBM Process Mining (Multiple CVEs)	1 Feb 202321:46	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities were detected in IBM Secure Proxy	30 Jul 202105:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for April 2024 - Multiple CVEs addressed	15 Apr 202502:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities were detected in IBM Secure External Authentication Server	30 Jul 202105:06	–	ibm
AstraLinux	Astra Linux - уязвимость в jetty9	20 May 202605:53	–	astralinux
Broadcom	Statement on Jetty vulnerabilities in Brocade SANav	1 May 202400:00	–	broadcom

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-27218
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-86wm-rrjm-8wh8
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

20 Apr 2024 00:55Current

2.1Low risk

Vulners AI Score2.1

CVSS 3.14.8

CVSS 25.8

EPSS0.00599