How many Eclipse Foundation jetty CVEs are in CISA KEV?

Yes — 1 of Eclipse Foundation jetty's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of Eclipse Foundation jetty are affected?

348 distinct Eclipse Foundation jetty versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Eclipse Foundation jetty CVEs?

Eclipse Foundation jetty's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-20 (Improper Input Validation).

How many critical Eclipse Foundation jetty vulnerabilities are there?

Eclipse Foundation jetty has 5 critical and 20 high-severity CVEs.

What is the average severity of Eclipse Foundation jetty CVEs?

The average CVSS base score across Eclipse Foundation jetty's scored CVEs is 6.5.

Eclipse Foundation jetty Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: Eclipse Foundation jetty vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

Eclipse Foundation jetty Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

Eclipse Foundation jetty has 52 published CVE records since 2016, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 17 have a known public exploit. The average CVSS base score across scored CVEs is 6.5. Affected platforms include windows.

Severity and exploitation

How the CVSS severity of Eclipse Foundation jetty's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High20

Medium22

Low5

In CISA’s Known Exploited Vulnerabilities catalog

One of Eclipse Foundation jetty's CVEs is confirmed exploited in the wild.

Public exploits

17 of Eclipse Foundation jetty's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Eclipse Foundation jetty version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

9.3.0 <= v <= 9.3.05 CVEs
10.0.0 <= v < 10.0.164 CVEs
10.0.0 <= v <= 10.0.04 CVEs
11.0.0 <= v < 11.0.164 CVEs
11.0.0 <= v <= 11.0.04 CVEs
9.3.0 <= v < 9.3.244 CVEs
9.3.1 <= v <= 9.3.14 CVEs
9.3.2 <= v <= 9.3.24 CVEs
9.3.3 <= v <= 9.3.34 CVEs
9.3.4 <= v <= 9.3.44 CVEs
9.3.5 <= v <= 9.3.54 CVEs

Common weakness types

The CWE weakness categories most often found in Eclipse Foundation jetty CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Eclipse Foundation jetty CVEs were published each year.

2016

2017

2018

2019

2020

2021

2022

Other Eclipse Foundation products

Browse vulnerabilities for other products by Eclipse Foundation.

Eclipse Jetty38 CVEs NetX Duo32 CVEs jetty.project30 CVEs Eclipse Vert.x26 CVEs mosquitto26 CVEs openj923 CVEs threadx netx duo21 CVEs Eclipse Theia18 CVEs

Frequently asked questions

Common questions about Eclipse Foundation jetty vulnerabilities.

How many CVEs does Eclipse Foundation jetty have?: Eclipse Foundation jetty has 52 published CVE records since 2016.
How many Eclipse Foundation jetty CVEs are in CISA KEV?: Yes — 1 of Eclipse Foundation jetty's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for Eclipse Foundation jetty vulnerabilities?: Yes — 17 of Eclipse Foundation jetty's CVEs have a known public exploit.
Which versions of Eclipse Foundation jetty are affected?: 348 distinct Eclipse Foundation jetty versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Eclipse Foundation jetty CVEs?: Eclipse Foundation jetty's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-20 (Improper Input Validation).
How many critical Eclipse Foundation jetty vulnerabilities are there?: Eclipse Foundation jetty has 5 critical and 20 high-severity CVEs.
What is the average severity of Eclipse Foundation jetty CVEs?: The average CVSS base score across Eclipse Foundation jetty's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Eclipse Foundation jetty vulnerabilities

Get an alert for each new Eclipse Foundation jetty CVE, with AI-written analysis and remediation steps.

Create an account See pricing