Eclipse Jetty

Name: Eclipse Jetty
Brand: Eclipse

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

critical

by severity

0critical5high4medium0low

updated 2026-10-27

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-28164US	medium5.3OT high	82.4% (100th)	Exploit	9.4.39	2021-04-01	< 9.4.39
CVE-2025-8671US	—	3.62% (89th)	Exploit	11.0.26	2025-08-13	5 versions
CVE-2025-55163US	high7.5	1.10% (66th)	Exploit	9.4.58	2025-08-13	5 versions
CVE-2023-36478US	high7.5	4.83% (92nd)	—	12.0.2	2023-10-10	6 versions
CVE-2025-48989US	—	3.69% (90th)	—	9.4.58	2025-08-13	5 versions
CVE-2025-5115US	high7.5	3.57% (89th)	—	11.0.26	2025-08-20	5 versions
CVE-2022-2191US	high7.5	2.18% (82nd)	—	11.0.11	2022-07-07	3 versions
CVE-2024-8184US	medium6.5	1.03% (64th)	—	12.0.4	2024-10-14	9 versions
CVE-2024-6762US	medium6.5	0.94% (61st)	—	10.0.18	2024-10-14	4 versions
CVE-2024-9823US	high7.5	0.94% (61st)	—	10.0.18	2024-10-14	4 versions
CVE-2025-1948US	—	0.78% (56th)	—	12.0.17	2025-05-08	< 12.0.17
CVE-2024-13009US	—	0.55% (46th)	—	9.4.57	2025-05-08	< 9.4.57
CVE-2026-19203US	—	0.51% (43rd)	—	11.0.32	2026-09-08	5 versions
CVE-2026-77711US	—	0.44% (38th)	—	9.4.65	2026-10-15	5 versions
CVE-2024-7708US	—	0.44% (38th)	—	10.0.23	2026-07-14	2 versions
CVE-2026-18661US	—OT elevated	0.42% (37th)	—	10.0.33	2026-10-15	5 versions
CVE-2026-18659US	—OT elevated	0.41% (35th)	—	10.0.33	2026-10-15	5 versions
CVE-2026-18662US	—OT elevated	0.39% (33rd)	—	12.0.39	2026-10-15	5 versions
CVE-2026-76184US	—	0.39% (33rd)	—	9.4.65	2026-10-15	5 versions
CVE-2026-76182US	—	0.34% (28th)	—	10.0.33	2026-10-15	5 versions
CVE-2026-18660US	—	0.32% (24th)	—	10.0.33	2026-10-15	5 versions
CVE-2025-11143US	medium6.5	0.17% (6th)	—	12.1.5	2026-03-05	2 versions
CVE-2026-19864US	—OT elevated	0.10% (1st)	—	9.4.65	2026-10-15	5 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption7 CVEs
CWE-404Improper Resource Shutdown or Release5 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-178Improper Handling of Case Sensitivity1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan