Vulnerabilities > Mortbay
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-11-06 | CVE-2009-5049 | Cross-site Scripting vulnerability in multiple products WebApp JSP Snoop page XSS in jetty though 6.1.21. | 6.1 |
| 2019-11-06 | CVE-2009-5048 | Cross-site Scripting vulnerability in Mortbay Jetty Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20. | 6.1 |
| 2011-12-30 | CVE-2011-4461 | Cryptographic Issues vulnerability in multiple products Jetty 8.1.0.RC2 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters. | 5.3 |