Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.eclipse.jetty.aggregate/jetty-all@7.6.0.v20120127
purl pkg:maven/org.eclipse.jetty.aggregate/jetty-all@7.6.0.v20120127
Next non-vulnerable version 9.4.11.v20180605
Latest non-vulnerable version 9.4.28.v20200408
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2017-9735

Jetty through 9.4.x is prone to a timing channel in util/security/Password.java, which makes it easier for remote attackers to obtain …
9.2.22.v20170606
Vulnerable
9.2.25.v20180606
Vulnerable
9.2.26.v20180806
Vulnerable
9.2.28.v20190418
Vulnerable
9.4.7.v20170914
Vulnerable
CVE-2019-10241

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS …
9.2.28.v20190418
Vulnerable
9.4.24.v20191120
Not vulnerable
9.4.27.v20200227
Not vulnerable
CVE-2017-7658

In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented …
9.2.25.v20180606
Vulnerable
9.2.26.v20180806
Vulnerable
9.2.28.v20190418
Vulnerable
9.4.24.v20191120
Not vulnerable
9.4.27.v20200227
Not vulnerable
9.4.22.v20191022
Not vulnerable
9.4.28.v20200408
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
CVE-2015-2080
The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via …
CVE-2016-4800
The path normalization mechanism in PathResource class in Eclipse Jetty 9.3.x before 9.3.9 on Windows allows remote attackers to bypass …