Improper Input Validation

🗓️ 08 Jul 2022 04:29:10Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 86 Views

Improper input validation in jetty-http softwar

Reporter	Title	Published	Views	Family All 99
IBM Security Bulletins	Security Bulletin: IBM Secure External Authentication Server is vulnerable to multiple issues due to Eclipse Jetty	29 Jul 202217:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Zookeeper affecting IBM QRadar User Behavior Analytics (CVE-2022-2191, CVE-2022-2047, CVE-2022-2048, CVE-2022-24823, CVE-2020-36518)	29 Sep 202214:01	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Eclipse Jetty affects IBM Process Mining . CVE-2022-2047	1 Feb 202321:59	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in Eclipse Jetty used by IBM Maximo Asset Management (CVE-2022-2047)	2 Mar 202314:09	–	ibm
IBM Security Bulletins	Security Bulletin: Security fixes available for The IBM® Engineering System Design Rhapsody products on IBM Jazz Technology	7 Jun 202406:01	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	27 Mar 202608:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	26 Oct 202218:06	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Service Tester contains vulnerabilities which could affect Eclipse Jetty. Rational Service Tester has taken steps to mitigate these vulnerabilities.	22 Nov 202213:50	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	11 Mar 202620:59	–	ibm

Vulners

Node

jetty9 jetty9Match9.4.33-1debian

AND

jetty9 jetty9Match9.4.38-1debian

AND

debian debian_linuxMatch999

jetty9 jetty9Match9.4.36-1debian

AND

jetty9 jetty9Match9.4.33-1debian

AND

debian debian_linuxMatch11

jetty9 jetty9Match9.4.16-0+deb10u1debian

AND

jetty9 jetty9Match9.4.15-1debian

AND

debian debian_linuxMatch10

eclipse jetty-httpRange11.0.0-alpha0–11.0.9java

eclipse jetty-httpRange10.0.0.beta0–10.0.9java

eclipse jetty-httpRange10.0.0-alpha0–10.0.0.alpha2java

eclipse jetty-httpRange9.3.0.M0–9.4.46.v20220331java

Source	Link
github	www.github.com/eclipse/jetty.project/issues/8014
github	www.github.com/eclipse/jetty.project/commit/d1e64f469362bb9371d530cccded5ecb13fa1cb5
github	www.github.com/eclipse/jetty.project/commit/d1e64f469362bb9371d530cccded5ecb13fa1cb5
github	www.github.com/eclipse/jetty.project/pull/8146
github	www.github.com/eclipse/jetty.project/pull/8015
github	www.github.com/eclipse/jetty.project/commit/4ca8afbbd667c19a084d5ff14a4f08eb7049d1c7
lists	www.lists.debian.org/debian-lts-announce/2022/08/msg00011.html
debian	www.debian.org/security/2022/dsa-5198
github	www.github.com/eclipse/jetty.project/security/advisories/GHSA-cj7v-27pg-wf7q
security	www.security.netapp.com/advisory/ntap-20220901-0006/

08 Sep 2022 10:58Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.12.7

CVSS 24

EPSS0.00401