jetty-minimal (SUSE:Linux Enterprise Real Time 15 SP3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Real Time 15 SP3 package jetty-minimal, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2023-26048 — CVSS 5.3 (medium): Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with…
• CVE-2023-26049 — CVSS 2.4 (low): Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within…