WaratekVRT Sign in
Reset
More filters (1)
Columns
Product: Jetty✕
Overview 2 matches · 0 CISA KEV · 1 public PoC · 1 EPSS ≥ 0.5
2matches 0CISA KEV0.0% 1public PoC50.0% 1EPSS ≥ 0.550.0%
Protected by Waratek 2 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 2 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / year
Protected by Waratek: 2 Medium: 2 blocked by ARMR today: 2 Exploited: 2
20081 Protected by Waratek1 Medium1 blocked by ARMR today1 Exploited1 20090 20100 20110 20120 20130 20140 20150 20160 20170 20180 20190 20200 20211 Protected by Waratek1 Medium1 blocked by ARMR today1 Exploited1
2009201120132015201720192021
2 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2021-34429 Medium 2021-07-15 Protected by Waratek Exploited For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc5.
CVE-2007-6672 Medium 2008-01-08 Protected by Waratek Exploited Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI.