How many Eclipse Foundation Eclipse Jetty CVEs are in CISA KEV?

None of Eclipse Foundation Eclipse Jetty's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Eclipse Foundation Eclipse Jetty are affected?

104 distinct Eclipse Foundation Eclipse Jetty versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Eclipse Foundation Eclipse Jetty CVEs?

Eclipse Foundation Eclipse Jetty's CVEs most often map to these CWE weakness types: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-400 (Uncontrolled Resource Consumption), CWE-20 (Improper Input Validation).

How many critical Eclipse Foundation Eclipse Jetty vulnerabilities are there?

Eclipse Foundation Eclipse Jetty has 4 critical and 16 high-severity CVEs.

What is the average severity of Eclipse Foundation Eclipse Jetty CVEs?

The average CVSS base score across Eclipse Foundation Eclipse Jetty's scored CVEs is 6.8.

Eclipse Foundation Eclipse Jetty Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Eclipse Foundation Eclipse Jetty vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Eclipse Foundation Eclipse Jetty Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Eclipse Foundation Eclipse Jetty has 38 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 13 have a known public exploit. The average CVSS base score across scored CVEs is 6.8.

Severity and exploitation

How the CVSS severity of Eclipse Foundation Eclipse Jetty's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High16

Medium15

Low3

In CISA’s Known Exploited Vulnerabilities catalog

None of Eclipse Foundation Eclipse Jetty's CVEs are currently listed in CISA's KEV catalog.

Public exploits

13 of Eclipse Foundation Eclipse Jetty's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Eclipse Foundation Eclipse Jetty version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.0 to 9.4.32.v202009301 CVE
10.0.01 CVE
10.0.0.alpha0 to 10.0.0.beta21 CVE
10.0.0.alpha1 to 10.0.0.beta21 CVE
11.0.01 CVE
11.0.0.alpha0 to 11.0.0.beta21 CVE
11.0.0.alpha1 to 11.0.0.beta21 CVE
7.x1 CVE
8.x1 CVE
9.2.271 CVE
9.3.261 CVE

Common weakness types

The CWE weakness categories most often found in Eclipse Foundation Eclipse Jetty CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Eclipse Foundation Eclipse Jetty CVEs were published each year.

2018

2019

2020

2021

2022

2026

Other Eclipse Foundation products

Browse vulnerabilities for other products by Eclipse Foundation.

jetty52 CVEs NetX Duo32 CVEs jetty.project30 CVEs Eclipse Vert.x26 CVEs mosquitto26 CVEs openj923 CVEs threadx netx duo21 CVEs Eclipse Theia18 CVEs

Frequently asked questions

Common questions about Eclipse Foundation Eclipse Jetty vulnerabilities.

How many CVEs does Eclipse Foundation Eclipse Jetty have?: Eclipse Foundation Eclipse Jetty has 38 published CVE records since 2018.
How many Eclipse Foundation Eclipse Jetty CVEs are in CISA KEV?: None of Eclipse Foundation Eclipse Jetty's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Eclipse Foundation Eclipse Jetty vulnerabilities?: Yes — 13 of Eclipse Foundation Eclipse Jetty's CVEs have a known public exploit.
Which versions of Eclipse Foundation Eclipse Jetty are affected?: 104 distinct Eclipse Foundation Eclipse Jetty versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Eclipse Foundation Eclipse Jetty CVEs?: Eclipse Foundation Eclipse Jetty's CVEs most often map to these CWE weakness types: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-400 (Uncontrolled Resource Consumption), CWE-20 (Improper Input Validation).
How many critical Eclipse Foundation Eclipse Jetty vulnerabilities are there?: Eclipse Foundation Eclipse Jetty has 4 critical and 16 high-severity CVEs.
What is the average severity of Eclipse Foundation Eclipse Jetty CVEs?: The average CVSS base score across Eclipse Foundation Eclipse Jetty's scored CVEs is 6.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Eclipse Foundation Eclipse Jetty vulnerabilities

Get an alert for each new Eclipse Foundation Eclipse Jetty CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Eclipse Foundation Eclipse Jetty Vulnerabilities