9.1.1

DATE	CVE	VULNERABILITY TITLE	RISK
2024-10-14	CVE-2024-6763	Unspecified vulnerability in Eclipse Jetty Eclipse Jetty is a lightweight, highly scalable, Java-based web server and Servlet engine . network low complexity eclipse	5.3
2023-10-10	CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. network low complexity ietf nghttp2 netty envoyproxy eclipse caddyserver golang f5 apache apple grpc microsoft nodejs dena facebook amazon debian kazu-yamamoto istio varnish-cache-project traefik projectcontour linkerd linecorp redhat fedoraproject netapp akka konghq jenkins openresty cisco	7.5
2023-09-15	CVE-2023-40167	Jetty is a Java based web server and servlet engine. network low complexity eclipse debian	5.3
2023-09-15	CVE-2023-36479	Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. network low complexity eclipse debian	4.3
2023-04-18	CVE-2023-26048	Unspecified vulnerability in Eclipse Jetty Jetty is a java based web server and servlet engine. network low complexity eclipse	5.3
2023-04-18	CVE-2023-26049	Jetty is a java based web server and servlet engine. network low complexity eclipse debian netapp	5.3
2022-07-07	CVE-2022-2047	Improper Input Validation vulnerability in multiple products In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. network low complexity eclipse debian netapp CWE-20	2.7
2022-07-07	CVE-2022-2048	In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. network low complexity eclipse debian netapp jenkins	7.5
2021-06-22	CVE-2021-34428	Insufficient Session Expiration vulnerability in multiple products For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. low complexity eclipse debian netapp oracle CWE-613	3.5
2021-06-09	CVE-2021-28169	For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. network low complexity eclipse debian oracle netapp	5.3