2445 matches found
Information disclosure
Dump Servlet information leak in jetty before 6.1.22...
Design/Logic Flaw
JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22...
CVE-2009-5046
JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22...
CVE-2009-5045
Dump Servlet information leak in jetty before 6.1.22...
CVE-2009-5045
Dump Servlet information leak in jetty before 6.1.22...
CVE-2009-5046
JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22...
CVE-2009-5046
CVE-2009-5046 affects Jetty (JSP Dump and Session Dump Servlets) with XSS due to improper validation in the JSP Dump and Session Dump Servlets, observed in Jetty versions before 6.1.22. The vulnerability enables cross-site scripting that can steal cookie-based credentials when a page using the af...
CVE-2009-5045
CVE-2009-5045 concerns an information disclosure in the Jetty Dump Servlet . Affected software is the Jetty web server/servlet container, with the vulnerability existing in versions prior to 6.1.22 . The NVD reports a CVSSv3.1 base score of 7.5 (HIGH) , indicating a network-accessible issue with ...
CVE-2009-5045
Dump Servlet information leak in jetty before 6.1.22...
CVE-2009-5048
Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20...
CVE-2009-5049
WebApp JSP Snoop page XSS in jetty though 6.1.21...
CVE-2009-5048
Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20...
CVE-2009-5048
Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20...
CVE-2009-5049
WebApp JSP Snoop page XSS in jetty though 6.1.21...
Code injection
WebApp JSP Snoop page XSS in jetty though 6.1.21...
CVE-2009-5049
WebApp JSP Snoop page XSS in jetty though 6.1.21...
Security Bulletin: IBM QRadar SIEM is vulnerable to Jetty Vulnerabilities (CVE-2017-7656, CVE-2017-7657, CVE-2017-7658, CVE-2018-12536)
Summary IBM QRadar SIEM is vulnerable to Jetty Vulnerabilities Vulnerability Details CVEID: CVE-2017-7658 DESCRIPTION: In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x all non HTTP/1.x configurations, and 9.4.x all HTTP/1.x configurations, when presented with two content-lengths headers,...
CVE-2009-5049
WebApp JSP Snoop page XSS in jetty though 6.1.21...
CVE-2009-5049
CVE-2009-5049 affects Jetty, specifically the WebApp JSP Snoop page in Jetty 6.1.21. The vulnerability arises from improper validation of user-supplied input in the WebApp JSP Snoop page, enabling cross-site scripting (XSS). The connected sources consistently describe a WebApp JSP Snoop page XSS ...