How many Eclipse Foundation Eclipse Jetty CVEs are in CISA KEV?

None of Eclipse Foundation Eclipse Jetty's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of Eclipse Foundation Eclipse Jetty are affected?

131 distinct Eclipse Foundation Eclipse Jetty versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Eclipse Foundation Eclipse Jetty CVEs?

Eclipse Foundation Eclipse Jetty's CVEs most often map to these CWE weakness types: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-400 (Uncontrolled Resource Consumption), CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).

How many critical Eclipse Foundation Eclipse Jetty vulnerabilities are there?

Eclipse Foundation Eclipse Jetty has 4 critical and 10 high-severity CVEs.

What is the average severity of Eclipse Foundation Eclipse Jetty CVEs?

The average CVSS base score across Eclipse Foundation Eclipse Jetty's scored CVEs is 6.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

Eclipse Foundation

31 CVEs

Eclipse Foundation Eclipse Jetty Vulnerabilities

Name: Eclipse Foundation Eclipse Jetty vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Eclipse Jetty by Eclipse Foundation.

31

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

6.5

Avg CVSS

2018–2026

Last updated July 14, 2026

Overview

Eclipse Foundation Eclipse Jetty has 31 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Eclipse Foundation Eclipse Jetty, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Eclipse Foundation Eclipse Jetty's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical4

High10

Medium14

Low3

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Eclipse Foundation Eclipse Jetty's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of Eclipse Foundation Eclipse Jetty's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Eclipse Foundation Eclipse Jetty version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

1.0 to 9.4.32.v202009301 CVE
10.0.01 CVE
10.0.0.alpha0 to 10.0.0.beta21 CVE
10.0.0.alpha1 to 10.0.0.beta21 CVE
11.0.01 CVE
11.0.0.alpha0 to 11.0.0.beta21 CVE
11.0.0.alpha1 to 11.0.0.beta21 CVE
7.x1 CVE
8.x1 CVE
9.2.271 CVE
9.3.261 CVE
9.4.0.RC0 to 9.4.34.v202011021 CVE
9.4.161 CVE
9.4.21.v201909261 CVE
9.4.22.v201910221 CVE
9.4.23.v201911181 CVE

Version ranges

>= 9.4.07 CVEs
>= 9.3.05 CVEs
< 9.3.244 CVEs
< 9.4.114 CVEs
>= 10.0.04 CVEs
>= 11.0.04 CVEs
<= 10.0.93 CVEs
<= 11.0.93 CVEs
<= 9.2.03 CVEs
<= 10.0.12 CVEs
<= 10.0.22 CVEs
<= 11.0.12 CVEs
<= 11.0.22 CVEs
<= 9.4.382 CVEs

Fixed in

9.3.244 CVEs
9.4.114 CVEs
> 10.0.93 CVEs
> 11.0.93 CVEs
> 9.2.03 CVEs
> 10.0.12 CVEs
> 10.0.22 CVEs
> 10.0.282 CVEs
> 11.0.12 CVEs
> 11.0.22 CVEs
> 11.0.282 CVEs
> 12.0.342 CVEs
> 12.1.82 CVEs
> 9.4.382 CVEs

Find a version

31 CVEs

Sort

High vulnerability · 2026-07-14
CVE-2024-7708
Patch
CWE-400
High · CVSS 7.5
EPSS 0.3% (16th pct)2026-07-14
Medium vulnerability · 2026-07-14
CVE-2026-8384
Patch
CWE-647
Medium · CVSS 5.3
EPSS 0.2% (10th pct)2026-07-14
Medium vulnerability · 2026-07-14
CVE-2026-6790
Patch
CWE-20
Medium · CVSS 5.3
EPSS 0.2% (10th pct)2026-07-14
Medium vulnerability · 2026-07-14
CVE-2026-10051
Patch
CWE-200
Medium · CVSS 6.9
EPSS 0.3% (17th pct)2026-07-14
HTTP Request Smuggling via Chunked Extension Quoted-String Parsing
CVE-2026-2332
Public exploit
Patch
CWE-444
Critical · CVSS 9.1
EPSS 1.1% (63th pct)2026-04-14
High vulnerability · 2026-04-08
CVE-2026-5795
Patch
CWE-226
High · CVSS 7.4
EPSS 0.5% (41th pct)2026-04-08
High vulnerability · 2026-03-05
CVE-2026-1605
Patch
CWE-400
High · CVSS 7.5
EPSS 0.6% (46th pct)2026-03-05
Medium vulnerability · 2026-03-05
CVE-2025-11143
Patch
CWE-20
Medium · CVSS 6.5
EPSS 0.2% (5th pct)2026-03-05
High vulnerability · 2022-07-07
CVE-2022-2191
Patch
CWE-404
High · CVSS 7.5
EPSS 2.0% (79th pct)2022-07-07
Low vulnerability · 2022-07-07
CVE-2022-2047
Patch
CWE-20
Low · CVSS 2.7
EPSS 1.2% (64th pct)2022-07-07
High vulnerability · 2022-07-07
CVE-2022-2048
Patch
CWE-410
High · CVSS 7.5
EPSS 2.3% (81th pct)2022-07-07
Medium vulnerability · 2021-07-15
CVE-2021-34429
Public exploit
Patch
CWE-551
Medium · CVSS 5.3
EPSS 99.3% (100th pct)2021-07-15
Low vulnerability · 2021-06-22
CVE-2021-34428
Patch
CWE-613
Low · CVSS 3.5
EPSS 1.0% (58th pct)2021-06-22
Medium vulnerability · 2021-06-09
CVE-2021-28169
Public exploit
Patch
CWE-200
Medium · CVSS 5.3
EPSS 78.5% (100th pct)2021-06-09
High vulnerability · 2021-04-01
CVE-2021-28165
Patch
CWE-400
High · CVSS 7.5
EPSS 53.9% (99th pct)2021-04-01
Medium vulnerability · 2021-04-01
CVE-2021-28164
Public exploit
Patch
CWE-551
Medium · CVSS 5.3
EPSS 82.4% (100th pct)2021-04-01
Low vulnerability · 2021-04-01
CVE-2021-28163
Patch
CWE-200
Low · CVSS 2.7
EPSS 4.2% (90th pct)2021-04-01
Medium vulnerability · 2021-02-26
CVE-2020-27223
Patch
CWE-407
Medium · CVSS 5.3
EPSS 78.0% (100th pct)2021-02-26
Medium vulnerability · 2020-11-28
CVE-2020-27218
Patch
CWE-226
Medium · CVSS 4.8
EPSS 8.1% (94th pct)2020-11-28
High vulnerability · 2020-10-23
CVE-2020-27216
Patch
CWE-378
High · CVSS 7.0
EPSS 4.4% (90th pct)2020-10-23
Critical vulnerability · 2020-07-09
CVE-2019-17638
Patch
CWE-675
Critical · CVSS 9.4
EPSS 11.1% (95th pct)2020-07-09
Medium vulnerability · 2019-11-25
CVE-2019-17632
Patch
CWE-79
Medium · CVSS 6.1
EPSS 1.9% (77th pct)2019-11-25
Medium vulnerability · 2019-04-22
CVE-2019-10247
Patch
CWE-213
Medium · CVSS 5.3
EPSS 5.8% (92th pct)2019-04-22
Medium vulnerability · 2019-04-22
CVE-2019-10246
Patch
CWE-213
Medium · CVSS 5.3
EPSS 4.0% (89th pct)2019-04-22
Medium vulnerability · 2019-04-22
CVE-2019-10241
Patch
CWE-79
Medium · CVSS 6.1
EPSS 9.6% (95th pct)2019-04-22
High vulnerability · 2019-03-27
CVE-2018-12545
Patch
CWE-400
High · CVSS 7.5
EPSS 5.1% (91th pct)2019-03-27
Medium vulnerability · 2018-06-27
CVE-2018-12536
Patch
CWE-209
Medium · CVSS 5.3
EPSS 4.3% (90th pct)2018-06-27
Critical vulnerability · 2018-06-26
CVE-2017-7658
Patch
CWE-444
Critical · CVSS 9.8
EPSS 21.0% (97th pct)2018-06-26
Critical vulnerability · 2018-06-26
CVE-2017-7657
Patch
CWE-444
Critical · CVSS 9.8
EPSS 16.2% (97th pct)2018-06-26
High vulnerability · 2018-06-26
CVE-2017-7656
Patch
CWE-444
High · CVSS 7.5
EPSS 6.2% (93th pct)2018-06-26

Showing 30 of 31

Common weakness types

The CWE weakness categories most often found in Eclipse Foundation Eclipse Jetty CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Eclipse Foundation Eclipse Jetty CVEs were published each year.

2018

5

2019

5

2020

3

2021

7

2022

3

2026

8

Other Eclipse Foundation products

Browse vulnerabilities for other products by Eclipse Foundation.

jetty51 CVEs jetty.project28 CVEs mosquitto26 CVEs openj921 CVEs threadx netx duo21 CVEs Eclipse Mosquitto16 CVEs Eclipse OpenJ916 CVEs threadx usbx15 CVEs

All Eclipse Foundation vulnerabilities

Frequently asked questions

Common questions about Eclipse Foundation Eclipse Jetty vulnerabilities.

How many CVEs does Eclipse Foundation Eclipse Jetty have?: Eclipse Foundation Eclipse Jetty has 31 published CVE records since 2018.
How many Eclipse Foundation Eclipse Jetty CVEs are in CISA KEV?: None of Eclipse Foundation Eclipse Jetty's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Eclipse Foundation Eclipse Jetty vulnerabilities?: Yes — 4 of Eclipse Foundation Eclipse Jetty's CVEs have a known public exploit.
Which versions of Eclipse Foundation Eclipse Jetty are affected?: 131 distinct Eclipse Foundation Eclipse Jetty versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Eclipse Foundation Eclipse Jetty CVEs?: Eclipse Foundation Eclipse Jetty's CVEs most often map to these CWE weakness types: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-400 (Uncontrolled Resource Consumption), CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor).
How many critical Eclipse Foundation Eclipse Jetty vulnerabilities are there?: Eclipse Foundation Eclipse Jetty has 4 critical and 10 high-severity CVEs.
What is the average severity of Eclipse Foundation Eclipse Jetty CVEs?: The average CVSS base score across Eclipse Foundation Eclipse Jetty's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Eclipse Foundation Eclipse Jetty vulnerabilities

Monitor new Eclipse Foundation Eclipse Jetty vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

<= 9.4.40

2 CVEs

<= 9.4.462 CVEs

10.0.0 <= v <= 10.0.282 CVEs

11.0.0 <= v <= 11.0.282 CVEs

12.0.0 <= v <= 12.0.342 CVEs

12.1.0 <= v <= 12.1.82 CVEs

9.4.0 <= v <= 9.4.602 CVEs

< 9.2.251 CVE

< 9.4.121 CVE

< 9.4.91 CVE

<= 10.0.51 CVE

<= 11.0.51 CVE

<= 9.2.261 CVE

<= 9.2.271 CVE

<= 9.3.251 CVE

<= 9.3.261 CVE

<= 9.4.151 CVE

<= 9.4.161 CVE

<= 9.4.36.v202101141 CVE

<= 9.4.38.v202102241 CVE

<= 9.4.421 CVE

>= 10.0.0.alpha01 CVE

>= 10.0.0.beta21 CVE

>= 10.0.11 CVE

>= 11.0.0.alpha01 CVE

>= 11.0.0.beta21 CVE

>= 11.0.11 CVE

>= 7.2.21 CVE

>= 9.0.01 CVE

>= 9.4.27.v20200227 to 9.4.29.v202005211 CVE

>= 9.4.321 CVE

>= 9.4.371 CVE

>= 9.4.37.v202102191 CVE

>= 9.4.6.v201705311 CVE

10.0.0 <= v <= 10.0.261 CVE

10.0.0 <= v <= 10.0.271 CVE

10.0.7 <= v < 10.0.231 CVE

11.0.0 <= v <= 11.0.261 CVE

11.0.0 <= v <= 11.0.271 CVE

11.0.7 <= v < 11.0.231 CVE

12.0.0 <= v <= 12.0.301 CVE

12.0.0 <= v <= 12.0.311 CVE

12.0.0 <= v <= 12.0.321 CVE

12.0.0 <= v <= 12.0.331 CVE

12.0.0 <= v <= 12.0.351 CVE

12.1.0 <= v <= 12.1.41 CVE

12.1.0 <= v <= 12.1.61 CVE

12.1.0 <= v <= 12.1.71 CVE

12.1.0 <= v <= 12.1.91 CVE

12.1.0. <= v <= 12.1.51 CVE

9.4.0 <= v <= 9.4.581 CVE

9.4.0 <= v <= 9.4.591 CVE

> 9.4.40

2 CVEs

> 9.4.462 CVEs

> 9.4.602 CVEs

> 10.0.261 CVE

> 10.0.271 CVE

> 10.0.51 CVE

> 11.0.261 CVE

> 11.0.271 CVE

> 11.0.51 CVE

> 12.0.301 CVE

> 12.0.311 CVE

> 12.0.321 CVE

> 12.0.331 CVE

> 12.0.351 CVE

> 12.1.41 CVE

> 12.1.51 CVE

> 12.1.61 CVE

> 12.1.71 CVE

> 12.1.91 CVE

> 9.2.261 CVE

> 9.2.271 CVE

> 9.3.251 CVE

> 9.3.261 CVE

> 9.4.151 CVE

> 9.4.161 CVE

> 9.4.36.v202101141 CVE

> 9.4.38.v202102241 CVE

> 9.4.421 CVE

> 9.4.581 CVE

> 9.4.591 CVE

10.0.231 CVE

11.0.231 CVE

9.2.251 CVE

9.4.121 CVE

9.4.91 CVE