GCVE - cpe:2.3:a:jetty:jetty_http_server:4.2.18:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:jetty:jetty_http_server:4.2.18:*:*:*:*:*:*:*

part: a version: 4.2.18 update: *

Vendor	Jetty (`4c10c043-642c-552d-950a-08432c8a8ee6`)
Product	Jetty Http Server (`7d1b6d7e-faf2-54ca-8d3d-b508ce618b27`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-6969`	vulnerable	2026-06-08 04:49:30.092022	Details available Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util.random, which makes it easier for remote attackers to guess a session identifier through brute force attacks, bypass authentication requirements, and possibly conduct cross-site request forgery attacks. Published: 2007-02-07T11:00:00.000Z Updated: 2024-08-07T20:50:04.543Z Open on db.gcve.eu Reference links http://secunia.com/advisories/24070 http://www.vupen.com/english/advisories/2007/0497 https://exchange.xforce.ibmcloud.com/vulnerabilities/32240 http://osvdb.org/33108 http://www.securityfocus.com/bid/22405	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2478`	vulnerable	2026-06-08 04:48:09.860712	Details available Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL. Published: 2005-08-21T04:00:00.000Z Updated: 2024-08-08T01:29:13.893Z Open on db.gcve.eu Reference links http://secunia.com/advisories/12703 http://www.vupen.com/english/advisories/2006/3873 http://www.securityfocus.com/bid/11330 http://www-1.ibm.com/support/docview.wss?uid=swg21178665 http://secunia.com/advisories/22229	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2381`	vulnerable	2026-06-08 04:48:09.500482	Details available HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length. Published: 2005-08-16T04:00:00.000Z Updated: 2024-08-08T01:22:13.739Z Open on db.gcve.eu Reference links http://www.osvdb.org/4387 http://secunia.com/advisories/11166/ http://sourceforge.net/project/shownotes.php?release_id=224743 https://exchange.xforce.ibmcloud.com/vulnerabilities/15537 http://www.securityfocus.com/bid/9917	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.