ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +1659 more potentially affected by CVE-2018-12545 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.12.rc2)

🗓️ 28 Mar 2019 18:33:38Reported by Vulners OSVType

vulnersosv🔗 github.com

Transitive dependency in ai.h2o packages and others leads to CVE-2018-12545 in jetty-server.

Reporter	Title	Published	Views	Family All 47
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	15 Apr 202503:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Command Center is affected by multiple vulnerabilities	4 May 202320:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to Using Components with Known Vulnerabilities	7 Oct 202020:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Eclipse Jetty affect IBM InfoSphere Information Server	11 Sep 201919:44	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Eclipse Jetty affecting Rational Functional Tester	17 Sep 201919:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Process Mining is vulnerable to DOS due to Eclipse Jetty CVE-2018-12545	1 Feb 202321:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Jasper used in Jetty 8.1.3 Server where Rational Synergy is deployed	22 Dec 202018:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Netcool Agile Service Manager is affected by a Jetty vulnerability (CVE-2018-12545)	16 Jul 201905:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics has addressed multiple vulnerabilities	29 Jun 202123:59	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect is vulnerable to multiple attacks due to http2-server and http2-common	21 Jun 202318:13	–	ibm

30 Mar 2026 19:35Current

CVSS 25

CVSS 3.17.5

EPSS0.05124

ai.h2o jetty-server CVE-2018-12545