Severity Critical High Medium Low Informational Vulnerability Categories Broken Link Exploit Issue Tracking Mailing List Mitigation Not Applicable Patch Permissions Required Press Media Coverage Product Release Notes Technical Description Third Party Advisory Tool Signature URL Repurposed US Government Resource VDB Entry Vendor Advisory Vulnerability Name CVE CWE CWE Severity CVE-2007-5613 Vulnerability in maven package org.mortbay.jetty:jetty Critical CVE-2007-5614 Vulnerability in maven package org.mortbay.jetty:jetty Critical CVE-2009-0217 Vulnerability in maven package org.apache.santuario:xmlsec Critical CVE-2009-2625 Vulnerability in maven package xerces:xercesimpl Critical CVE-2011-1498 Vulnerability in maven package org.apache.httpcomponents:httpclient Critical CVE-2011-3389 Vulnerability in npm package faye Critical CVE-2011-4461 Vulnerability in maven package org.eclipse.jetty.aggregate:jetty-all Medium CVE-2011-4461 Vulnerability in maven package org.eclipse.jetty.aggregate:jetty-all-server Medium CVE-2011-4461 Vulnerability in maven package org.eclipse.jetty.aggregate:jetty-plus Medium CVE-2011-4461 Vulnerability in maven package org.eclipse.jetty.aggregate:jetty-servlet Medium CVE-2011-4461 Vulnerability in maven package org.eclipse.jetty.aggregate:jetty-webapp Medium CVE-2011-4461 Vulnerability in maven package org.eclipse.jetty:jetty-server Medium CVE-2011-4461 Vulnerability in maven package org.mortbay.jetty:jetty Medium CVE-2011-4838 Vulnerability in maven package com.sun.grizzly:jruby Critical CVE-2011-4838 Vulnerability in maven package jruby:jruby Critical CVE-2011-4838 Vulnerability in maven package org.jruby:jruby Critical CVE-2011-4838 Vulnerability in maven package org.jruby:jruby-core Critical CVE-2011-4838 Vulnerability in maven package org.jruby:jruby-stdlib Critical CVE-2011-4858 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core Critical CVE-2011-4858 Vulnerability in maven package org.apache.tomcat:catalina Critical CVE-2011-4858 Vulnerability in maven package org.apache.tomcat:tomcat-catalina Critical CVE-2011-4858 Vulnerability in maven package tomcat:catalina Critical CVE-2011-5034 Vulnerability in maven package geronimo:geronimo-tomcat Critical CVE-2011-5034 Vulnerability in maven package org.apache.geronimo.modules:geronimo-tomcat6 Critical CVE-2011-5034 Vulnerability in maven package org.apache.geronimo:geronimo-tomcat Critical CVE-2013-1571 Vulnerability in maven package org.apache.tomcat:catalina Critical CVE-2013-3827 Vulnerability in maven package com.sun.faces:jsf-impl Critical CVE-2014-0107 Vulnerability in maven package xalan:xalan Critical CVE-2014-0363 Vulnerability in maven package org.igniterealtime.smack:smack-core Critical CVE-2014-0364 Vulnerability in maven package org.igniterealtime.smack:smack Critical CVE-2015-2912 Vulnerability in maven package com.orientechnologies:orientdb-core Critical CVE-2015-2912 Vulnerability in maven package com.orientechnologies:orientdb-server Critical CVE-2015-2913 Vulnerability in maven package com.orientechnologies:orientdb-server Medium CVE-2015-2918 Vulnerability in maven package com.orientechnologies:orientdb-studio High CVE-2016-5388 Vulnerability in maven package org.apache.tomcat:tomcat Critical CVE-2016-5388 Vulnerability in maven package org.apache.tomcat:tomcat-catalina Critical CVE-2016-9487 Vulnerability in maven package org.idpf:epubcheck High CVE-2017-3199 Vulnerability in maven package org.graniteds:granite-generator Critical CVE-2017-3200 Vulnerability in maven package org.graniteds:granite-generator Critical CVE-2017-3202 Vulnerability in maven package com.exadel.flamingo.flex:amf-serializer Critical CVE-2017-3203 Vulnerability in maven package org.springframework.flex:spring-flex-core Critical CVE-2017-3208 Vulnerability in maven package com.exadel.flamingo.flex:amf-serializer Critical CVE-2017-5638 Vulnerability in maven package org.apache.struts:struts2-core Critical CVE-2017-5641 Vulnerability in maven package com.adobe.blazeds:flex-messaging-core Critical CVE-2017-5641 Vulnerability in maven package org.apache.flex.blazeds:blazeds Critical CVE-2017-5641 Vulnerability in maven package org.apache.flex.blazeds:flex-messaging-core Critical CVE-2017-9805 Vulnerability in maven package org.apache.struts:struts2-core Critical CVE-2017-11429 Vulnerability in npm package saml2-js Critical CVE-2017-13098 Vulnerability in maven package com.madgag.spongycastle:bctls-jdk15on Medium CVE-2017-13098 Vulnerability in maven package org.bouncycastle:bctls-jdk15on Medium CVE-2017-16197 Vulnerability in npm package qinserve High CVE-2018-5382 Vulnerability in maven package org.bouncycastle:bcprov-jdk14 Medium CVE-2018-5382 Vulnerability in maven package org.bouncycastle:bcprov-jdk15 Medium CVE-2018-5382 Vulnerability in maven package org.bouncycastle:bcprov-jdk15on Medium CVE-2018-5382 Vulnerability in maven package org.bouncycastle:bcprov-jdk16 Medium CVE-2018-11307 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind Critical CVE-2019-9512 Vulnerability in maven package io.netty:netty-codec-http2 High CVE-2019-9514 Vulnerability in maven package io.netty:netty-codec-http2 High CVE-2019-9515 Vulnerability in maven package io.netty:netty-codec-http2 High CVE-2019-9518 Vulnerability in maven package io.netty:netty-codec-http2 High CVE-2021-44228 Vulnerability in maven package org.apache.logging.log4j:log4j-core Critical CVE-2021-45046 Vulnerability in maven package org.apache.logging.log4j:log4j-core Critical CVE-2021-45105 Vulnerability in maven package org.apache.logging.log4j:log4j-core Medium CVE-2023-44487 Vulnerability in maven package io.helidon.http:helidon-http-http2 High CVE-2023-44487 Vulnerability in maven package io.netty:netty-codec-http2 High CVE-2023-44487 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core High CVE-2023-44487 Vulnerability in maven package org.apache.tomcat:tomcat-coyote High CVE-2023-44487 Vulnerability in maven package org.eclipse.jetty.http2:http2-common High
