Maven org.eclipse.jetty:jetty-server

Name: Maven org.eclipse.jetty:jetty-server
Brand: Maven

productUS

pkg:maven/org.eclipse.jetty/jetty-server

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

4critical8high12medium1low

updated 2026-10-24

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-27223US	medium5.3	78.0% (100th)	Exploit	11.0.1	2021-02-26	3 versions
CVE-2015-2080US	high7.5	75.4% (100th)	Exploit	9.2.9.v20150224	2016-10-07	< 9.2.9.v20150224
CVE-2021-28165US	high7.5	53.9% (99th)	Exploit	10.0.2	2021-04-01	3 versions
CVE-2019-17638US	critical9.4	11.1% (96th)	Exploit	9.4.30.v20200611	2020-07-09	9.4.27 → 9.4.30.v20200611
CVE-2023-26048US	medium5.3	3.37% (89th)	Exploit	10.0.14	2023-04-18	3 versions
CVE-2023-26049US	medium5.3	1.30% (70th)	Exploit	11.0.14	2023-04-18	4 versions
CVE-2021-34428US	low3.5	0.96% (61st)	Exploit	11.0.3	2021-06-22	3 versions
CVE-2017-7658US	critical9.8	19.4% (97th)	—	9.4.11.v20180605	2018-06-26	3 versions
CVE-2017-7657US	critical9.8	14.9% (97th)	—	9.3.24.v20180605	2018-06-26	2 versions
CVE-2019-10241US	medium6.1	9.37% (95th)	—	9.3.26.v20190403	2019-04-22	3 versions
CVE-2020-27218US	medium4.8	8.28% (95th)	—	9.4.35.v20201120	2020-11-28	9.4.0 → 9.4.35.v20201120
CVE-2016-4800US	critical9.8	6.36% (94th)	—	9.3.9	2017-04-13	9.3.0 → 9.3.9
CVE-2017-7656US	high7.5	6.33% (94th)	—	9.3.24.v20180605	2018-06-26	2 versions
CVE-2019-10247US	medium5.3	5.94% (93rd)	—	9.4.17.v20190418	2019-04-22	3 versions
CVE-2017-9735US	high7.5	5.79% (93rd)	—	9.2.22.v20170606	2017-06-16	3 versions
CVE-2018-12545US	high7.5	5.12% (92nd)	—	9.4.12.v20180830	2019-03-27	2 versions
CVE-2011-4461US	medium5.3	4.92% (92nd)	—	8.1.0.RC4	2011-12-30	< 8.1.0.RC4
CVE-2018-12536US	medium5.3	4.39% (91st)	—	9.4.11.v20180605	2018-06-27	2 versions
CVE-2019-10246US	medium5.3	4.09% (91st)	—	9.2.28.v20190418	2019-04-22	3 versions
CVE-2018-12538US	high8.8	2.65% (86th)	—	9.4.11.v20180605	2018-06-22	9.4.0 → 9.4.11.v20180605
CVE-2022-2191US	high7.5	2.18% (82nd)	—	10.0.10	2022-07-07	2 versions
CVE-2019-17632US	medium6.1	1.91% (80th)	—	9.4.24.v20191120	2019-11-25	3 versions
CVE-2006-6969US	medium6.8OT elevated	1.61% (76th)	—	4.2.27	2007-02-07	4 versions
CVE-2024-8184US	medium6.5	1.03% (63rd)	—	10.0.24	2024-10-14	4 versions
CVE-2026-1605US	—	0.69% (52nd)	—	12.0.32	2026-03-05	2 versions
CVE-2024-13009US	—	0.55% (45th)	—	9.4.57.v20241219	2025-05-08	9.4.0 → 9.4.57.v20241219
CVE-2024-7708US	—	0.44% (37th)	—	11.0.23	2026-07-14	2 versions
CVE-2026-6790US	—	0.31% (23rd)	—	12.0.35	2026-07-14	5 versions
CVE-2026-10051US	high7.5	0.30% (22nd)	—	12.1.10	2026-07-14	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-200Exposure of Sensitive Information to an Unauthorized Actor7 CVEs
CWE-400Uncontrolled Resource Consumption7 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')3 CVEs
CWE-213Exposure of Sensitive Information Due to Incompatible Policies2 CVEs
CWE-401Missing Release of Memory after Effective Lifetime2 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan