CVE Tools
Track your stack

Mortbay-jetty

3 CVEs tracked since 2007. Since Dec 2007, none of them reached CISA KEV.

Mortbay-jetty CVEs per month

Dec 2007 to Dec 2007. Point at a month, or focus the strip and use the arrow keys.
Mortbay-jetty CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2007-1230

Products

The products that kept showing up in Mortbay-jetty's monthly top three, with their CVEs summed over those months.

  1. Jetty31 month

Latest CVEs

The 4 most recently published vulnerabilities affecting Mortbay-jetty.

  1. CVE-2007-6672Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI.5.0
  2. CVE-2007-5613Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.4.3
  3. CVE-2007-5614Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.7.5
  4. CVE-2007-5615CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.5.0

The record

Peak rank
#37 in Dec 2007
Busiest month shown
Dec 2007, 3 CVEs
Months with a KEV entry
0 since Dec 2007
Monthly snapshots
1 since 2007
Mortbay-jetty's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store