Jetty Jetty Http Server — known CVE vulnerabilities

Every CVE whose affected-product data names Jetty Jetty Http Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2004-2478 — CVSS 7.5 (high): Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services…
• CVE-2006-6969 — CVSS 6.8 (medium): Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using…
• CVE-2002-1178 — CVSS 5.0 (medium): Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary…
• CVE-2004-2381 — CVSS 5.0 (medium): HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash)…