Every CVE whose affected-product data names Mortbay Jetty Jetty, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (4)
CVE-2007-5614 — CVSS 7.5 (high): Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers…
CVE-2007-5615 — CVSS 5.0 (medium): CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP…
CVE-2007-6672 — CVSS 5.0 (medium): Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash)…
CVE-2007-5613 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web…