Eclipse Foundation Jetty
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2025-1948 | 12.0.0 – 12.0.16 | Eclipse Jetty HTTP clients can increase memory allocation | HIGH 7.5 | 0.8 % | ||
| CVE-2024-13009 | 9.4.0 – 9.4.56 | Eclipse Jetty GZIP buffer release | HIGH 7.2 | 0.5 % | ||
| CVE-2024-8184 | 9.3.12 – 9.4.55 ; 10.0.0 – 10.0.23 ; 11.0.0 – 11.0.23 ; … | Jetty ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks | MEDIUM 6.5 | 1.0 % | ||
| CVE-2024-6762 | 10.0.0 – 10.0.17 ; 11.0.0 – 11.0.17 ; 12.0.0 – 12.0.3 | Jetty PushSessionCacheFilter can cause remote DoS attacks | MEDIUM 6.5 | 0.9 % | ||
| CVE-2024-6763 | 7.0.0 – 12.0.11 | Jetty URI parsing of invalid authority | MEDIUM 5.3 | 1.0 % | ||
| CVE-2024-9823 | 9.0.0 – < 9.4.54 ; 10.0.0 – < 10.0.18 ; 11.0.0 – < 11.0.18 | Jetty DOS vulnerability on DosFilter | HIGH 7.5 | 0.9 % |