How many Eclipse Foundation jetty CVEs are in CISA KEV?

Yes — 1 of Eclipse Foundation jetty's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Eclipse Foundation jetty are affected?

358 distinct Eclipse Foundation jetty versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Eclipse Foundation jetty CVEs?

Eclipse Foundation jetty's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-20 (Improper Input Validation).

How many critical Eclipse Foundation jetty vulnerabilities are there?

Eclipse Foundation jetty has 5 critical and 20 high-severity CVEs.

What is the average severity of Eclipse Foundation jetty CVEs?

The average CVSS base score across Eclipse Foundation jetty's scored CVEs is 6.5.

Eclipse Foundation jetty Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Eclipse Foundation jetty vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Eclipse Foundation jetty Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Eclipse Foundation jetty has 52 published CVE records since 2016, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 8 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Eclipse Foundation jetty, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of Eclipse Foundation jetty's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High20

Medium22

Low5

In CISA’s Known Exploited Vulnerabilities catalog

One of Eclipse Foundation jetty's CVEs is confirmed exploited in the wild.

Public exploits

8 of Eclipse Foundation jetty's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Eclipse Foundation jetty version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

9.3.0 <= v <= 9.3.05 CVEs
10.0.0 <= v < 10.0.164 CVEs
10.0.0 <= v <= 10.0.04 CVEs
11.0.0 <= v < 11.0.164 CVEs
11.0.0 <= v <= 11.0.04 CVEs
9.3.0 <= v < 9.3.244 CVEs
9.3.1 <= v <= 9.3.14 CVEs
9.3.2 <= v <= 9.3.24 CVEs
9.3.3 <= v <= 9.3.34 CVEs
9.3.4 <= v <= 9.3.44 CVEs
9.3.5 <= v <= 9.3.54 CVEs

Common weakness types

The CWE weakness categories most often found in Eclipse Foundation jetty CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Eclipse Foundation jetty CVEs were published each year.

2016

2017

2018

2019

2020

2021

2022

Other Eclipse Foundation products

Browse vulnerabilities for other products by Eclipse Foundation.

Eclipse Jetty32 CVEs jetty.project30 CVEs mosquitto26 CVEs openj923 CVEs threadx netx duo21 CVEs Eclipse Theia18 CVEs Eclipse OpenJ917 CVEs Eclipse Mosquitto16 CVEs

Frequently asked questions

Common questions about Eclipse Foundation jetty vulnerabilities.

How many CVEs does Eclipse Foundation jetty have?: Eclipse Foundation jetty has 52 published CVE records since 2016.
How many Eclipse Foundation jetty CVEs are in CISA KEV?: Yes — 1 of Eclipse Foundation jetty's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Eclipse Foundation jetty vulnerabilities?: Yes — 8 of Eclipse Foundation jetty's CVEs have a known public exploit.
Which versions of Eclipse Foundation jetty are affected?: 358 distinct Eclipse Foundation jetty versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Eclipse Foundation jetty CVEs?: Eclipse Foundation jetty's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-20 (Improper Input Validation).
How many critical Eclipse Foundation jetty vulnerabilities are there?: Eclipse Foundation jetty has 5 critical and 20 high-severity CVEs.
What is the average severity of Eclipse Foundation jetty CVEs?: The average CVSS base score across Eclipse Foundation jetty's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Eclipse Foundation jetty vulnerabilities

Monitor new Eclipse Foundation jetty vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing