Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.7.v20170914
purl pkg:maven/org.eclipse.jetty.aggregate/jetty-all@9.4.7.v20170914
Next non-vulnerable version 9.4.11.v20180605
Latest non-vulnerable version 9.4.28.v20200408
Risk score
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
CVE-2017-7656

In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is …
9.2.25.v20180606
Vulnerable
9.2.26.v20180806
Vulnerable
9.2.28.v20190418
Vulnerable
9.4.24.v20191120
Not vulnerable
9.4.27.v20200227
Not vulnerable
9.4.22.v20191022
Not vulnerable
9.4.28.v20200408
Not vulnerable
9.4.11.v20180605
Not vulnerable
9.4.12.v20180830
Not vulnerable
9.4.14.v20181114
Not vulnerable
9.4.18.v20190429
Not vulnerable
9.4.19.v20190610
Not vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
CVE-2017-9735
Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain …
CVE-2015-2080
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via …
CVE-2016-4800
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass …