4.3

CVE-2009-1524

Cross-site scripting (XSS) vulnerability in Mort Bay Jetty before 6.1.17 allows remote attackers to inject arbitrary web script or HTML via a directory listing request containing a ; (semicolon) character.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mortbay ≫ Jetty Version <= 6.1.16
Mortbay ≫ Jetty Version 1.0
Mortbay ≫ Jetty Version 1.0.1
Mortbay ≫ Jetty Version 1.1
Mortbay ≫ Jetty Version 1.1.1
Mortbay ≫ Jetty Version 1.2.0
Mortbay ≫ Jetty Version 1.3.0
Mortbay ≫ Jetty Version 1.3.1
Mortbay ≫ Jetty Version 1.3.2
Mortbay ≫ Jetty Version 1.3.3
Mortbay ≫ Jetty Version 1.3.4
Mortbay ≫ Jetty Version 1.3.5
Mortbay ≫ Jetty Version 2.0 Update alpha1
Mortbay ≫ Jetty Version 2.0 Update alpha2
Mortbay ≫ Jetty Version 2.0 Update beta1
Mortbay ≫ Jetty Version 2.0 Update beta2
Mortbay ≫ Jetty Version 2.0.0
Mortbay ≫ Jetty Version 2.0.1
Mortbay ≫ Jetty Version 2.0.2
Mortbay ≫ Jetty Version 2.0.3
Mortbay ≫ Jetty Version 2.0.4
Mortbay ≫ Jetty Version 2.0.5
Mortbay ≫ Jetty Version 2.1.0
Mortbay ≫ Jetty Version 2.1.1
Mortbay ≫ Jetty Version 2.1.2
Mortbay ≫ Jetty Version 2.1.3
Mortbay ≫ Jetty Version 2.1.4
Mortbay ≫ Jetty Version 2.1.5
Mortbay ≫ Jetty Version 2.1.6
Mortbay ≫ Jetty Version 2.1.7
Mortbay ≫ Jetty Version 2.1.b0
Mortbay ≫ Jetty Version 2.1.b1
Mortbay ≫ Jetty Version 2.2 Update alpha0
Mortbay ≫ Jetty Version 2.2 Update alpha1
Mortbay ≫ Jetty Version 2.2 Update beta0
Mortbay ≫ Jetty Version 2.2 Update beta1
Mortbay ≫ Jetty Version 2.2 Update beta2
Mortbay ≫ Jetty Version 2.2 Update beta3
Mortbay ≫ Jetty Version 2.2 Update beta4
Mortbay ≫ Jetty Version 2.2.0
Mortbay ≫ Jetty Version 2.2.1
Mortbay ≫ Jetty Version 2.2.2
Mortbay ≫ Jetty Version 2.2.3
Mortbay ≫ Jetty Version 2.2.4
Mortbay ≫ Jetty Version 2.2.5
Mortbay ≫ Jetty Version 2.2.6
Mortbay ≫ Jetty Version 2.2.7
Mortbay ≫ Jetty Version 2.2.8
Mortbay ≫ Jetty Version 2.3.0
Mortbay ≫ Jetty Version 2.3.0a
Mortbay ≫ Jetty Version 2.3.1
Mortbay ≫ Jetty Version 2.3.2
Mortbay ≫ Jetty Version 2.3.3
Mortbay ≫ Jetty Version 2.3.4
Mortbay ≫ Jetty Version 2.3.5
Mortbay ≫ Jetty Version 2.4.0
Mortbay ≫ Jetty Version 2.4.1
Mortbay ≫ Jetty Version 2.4.2
Mortbay ≫ Jetty Version 2.4.3
Mortbay ≫ Jetty Version 2.4.4
Mortbay ≫ Jetty Version 2.4.5
Mortbay ≫ Jetty Version 2.4.6
Mortbay ≫ Jetty Version 2.4.7
Mortbay ≫ Jetty Version 2.4.8
Mortbay ≫ Jetty Version 2.4.9
Mortbay ≫ Jetty Version 3.0.0
Mortbay ≫ Jetty Version 3.0.0 Update rc1
Mortbay ≫ Jetty Version 3.0.0 Update rc2
Mortbay ≫ Jetty Version 3.0.0 Update rc3
Mortbay ≫ Jetty Version 3.0.0 Update rc4
Mortbay ≫ Jetty Version 3.0.0 Update rc5
Mortbay ≫ Jetty Version 3.0.0 Update rc6
Mortbay ≫ Jetty Version 3.0.0 Update rc7
Mortbay ≫ Jetty Version 3.0.0 Update rc8
Mortbay ≫ Jetty Version 3.0.1
Mortbay ≫ Jetty Version 3.0.2
Mortbay ≫ Jetty Version 3.0.3
Mortbay ≫ Jetty Version 3.0.4
Mortbay ≫ Jetty Version 3.0.5
Mortbay ≫ Jetty Version 3.0.6
Mortbay ≫ Jetty Version 3.0.a0
Mortbay ≫ Jetty Version 3.0.a1
Mortbay ≫ Jetty Version 3.0.a2
Mortbay ≫ Jetty Version 3.0.a3
Mortbay ≫ Jetty Version 3.0.a4
Mortbay ≫ Jetty Version 3.0.a5
Mortbay ≫ Jetty Version 3.0.a6
Mortbay ≫ Jetty Version 3.0.a7
Mortbay ≫ Jetty Version 3.0.a8
Mortbay ≫ Jetty Version 3.0.a9
Mortbay ≫ Jetty Version 3.0.a90
Mortbay ≫ Jetty Version 3.0.a91
Mortbay ≫ Jetty Version 3.0.a92
Mortbay ≫ Jetty Version 3.0.a93
Mortbay ≫ Jetty Version 3.0.a94
Mortbay ≫ Jetty Version 3.0.a95
Mortbay ≫ Jetty Version 3.0.a96
Mortbay ≫ Jetty Version 3.0.a97
Mortbay ≫ Jetty Version 3.0.a98
Mortbay ≫ Jetty Version 3.0.a99
Mortbay ≫ Jetty Version 3.0.b01
Mortbay ≫ Jetty Version 3.0.b02
Mortbay ≫ Jetty Version 3.0.b03
Mortbay ≫ Jetty Version 3.0.b04
Mortbay ≫ Jetty Version 3.0.b05
Mortbay ≫ Jetty Version 3.1 Update rc0
Mortbay ≫ Jetty Version 3.1 Update rc1
Mortbay ≫ Jetty Version 3.1 Update rc2
Mortbay ≫ Jetty Version 3.1 Update rc3
Mortbay ≫ Jetty Version 3.1 Update rc4
Mortbay ≫ Jetty Version 3.1 Update rc5
Mortbay ≫ Jetty Version 3.1 Update rc6
Mortbay ≫ Jetty Version 3.1 Update rc7
Mortbay ≫ Jetty Version 3.1 Update rc8
Mortbay ≫ Jetty Version 3.1 Update rc9
Mortbay ≫ Jetty Version 3.1.0
Mortbay ≫ Jetty Version 3.1.1
Mortbay ≫ Jetty Version 3.1.2
Mortbay ≫ Jetty Version 3.1.3
Mortbay ≫ Jetty Version 3.1.4
Mortbay ≫ Jetty Version 3.1.5
Mortbay ≫ Jetty Version 3.1.6
Mortbay ≫ Jetty Version 3.1.7
Mortbay ≫ Jetty Version 3.1.8
Mortbay ≫ Jetty Version 3.1.9
Mortbay ≫ Jetty Version 4.0 Update rc1
Mortbay ≫ Jetty Version 4.0 Update rc2
Mortbay ≫ Jetty Version 4.0 Update rc3
Mortbay ≫ Jetty Version 4.0.0
Mortbay ≫ Jetty Version 4.0.1
Mortbay ≫ Jetty Version 4.0.1 Update rc0
Mortbay ≫ Jetty Version 4.0.1 Update rc1
Mortbay ≫ Jetty Version 4.0.1 Update rc2
Mortbay ≫ Jetty Version 4.0.2
Mortbay ≫ Jetty Version 4.0.3
Mortbay ≫ Jetty Version 4.0.4
Mortbay ≫ Jetty Version 4.0.5
Mortbay ≫ Jetty Version 4.0.6
Mortbay ≫ Jetty Version 4.0.b0
Mortbay ≫ Jetty Version 4.0.b1
Mortbay ≫ Jetty Version 4.0.b2
Mortbay ≫ Jetty Version 4.0.d0
Mortbay ≫ Jetty Version 4.0.d1
Mortbay ≫ Jetty Version 4.0.d2
Mortbay ≫ Jetty Version 4.0.d3
Mortbay ≫ Jetty Version 4.0.d4
Mortbay ≫ Jetty Version 4.1.0
Mortbay ≫ Jetty Version 4.1.0 Update rc0
Mortbay ≫ Jetty Version 4.1.0 Update rc1
Mortbay ≫ Jetty Version 4.1.0 Update rc2
Mortbay ≫ Jetty Version 4.1.0 Update rc3
Mortbay ≫ Jetty Version 4.1.0 Update rc4
Mortbay ≫ Jetty Version 4.1.0 Update rc5
Mortbay ≫ Jetty Version 4.1.0 Update rc6
Mortbay ≫ Jetty Version 4.1.1
Mortbay ≫ Jetty Version 4.1.2
Mortbay ≫ Jetty Version 4.1.3
Mortbay ≫ Jetty Version 4.1.4
Mortbay ≫ Jetty Version 4.1.b0
Mortbay ≫ Jetty Version 4.1.b1
Mortbay ≫ Jetty Version 4.1.d0
Mortbay ≫ Jetty Version 4.1.d1
Mortbay ≫ Jetty Version 4.1.d2
Mortbay ≫ Jetty Version 4.2.0
Mortbay ≫ Jetty Version 4.2.0 Update beta0
Mortbay ≫ Jetty Version 4.2.0 Update rc0
Mortbay ≫ Jetty Version 4.2.0 Update rc1
Mortbay ≫ Jetty Version 4.2.1
Mortbay ≫ Jetty Version 4.2.2
Mortbay ≫ Jetty Version 4.2.3
Mortbay ≫ Jetty Version 4.2.4
Mortbay ≫ Jetty Version 4.2.4 Update rc0
Mortbay ≫ Jetty Version 4.2.5
Mortbay ≫ Jetty Version 4.2.6
Mortbay ≫ Jetty Version 4.2.7
Mortbay ≫ Jetty Version 4.2.8_01
Mortbay ≫ Jetty Version 4.2.9
Mortbay ≫ Jetty Version 4.2.9 Update rc1
Mortbay ≫ Jetty Version 4.2.9 Update rc2
Mortbay ≫ Jetty Version 4.2.10
Mortbay ≫ Jetty Version 4.2.10 Update pre0
Mortbay ≫ Jetty Version 4.2.10 Update pre1
Mortbay ≫ Jetty Version 4.2.10 Update pre2
Mortbay ≫ Jetty Version 4.2.12
Mortbay ≫ Jetty Version 4.2.14
Mortbay ≫ Jetty Version 4.2.14 Update rc0
Mortbay ≫ Jetty Version 4.2.14 Update rc1
Mortbay ≫ Jetty Version 4.2.15
Mortbay ≫ Jetty Version 4.2.15 Update rc0
Mortbay ≫ Jetty Version 4.2.16
Mortbay ≫ Jetty Version 4.2.17
Mortbay ≫ Jetty Version 4.2.18
Mortbay ≫ Jetty Version 4.2.19
Mortbay ≫ Jetty Version 4.2.20
Mortbay ≫ Jetty Version 4.2.20 Update rc0
Mortbay ≫ Jetty Version 4.2.21
Mortbay ≫ Jetty Version 4.2.22
Mortbay ≫ Jetty Version 4.2.23
Mortbay ≫ Jetty Version 4.2.23 Update rc0
Mortbay ≫ Jetty Version 4.2.24
Mortbay ≫ Jetty Version 4.2.24 Update rc0
Mortbay ≫ Jetty Version 4.2.24 Update rc1
Mortbay ≫ Jetty Version 4.2.25
Mortbay ≫ Jetty Version 4.2.26
Mortbay ≫ Jetty Version 4.2.27
Mortbay ≫ Jetty Version 5.0 Update alpha0
Mortbay ≫ Jetty Version 5.0 Update alpha1
Mortbay ≫ Jetty Version 5.0 Update alpha2
Mortbay ≫ Jetty Version 5.0 Update alpha3
Mortbay ≫ Jetty Version 5.0 Update beta0
Mortbay ≫ Jetty Version 5.0 Update beta1
Mortbay ≫ Jetty Version 5.0 Update beta2
Mortbay ≫ Jetty Version 5.0 Update rc1
Mortbay ≫ Jetty Version 5.0 Update rc2
Mortbay ≫ Jetty Version 5.0 Update rc3
Mortbay ≫ Jetty Version 5.0 Update rc4
Mortbay ≫ Jetty Version 5.0.0
Mortbay ≫ Jetty Version 5.0.0 Update rc0
Mortbay ≫ Jetty Version 5.1 Update rc0
Mortbay ≫ Jetty Version 5.1 Update rc1
Mortbay ≫ Jetty Version 5.1.0
Mortbay ≫ Jetty Version 5.1.1
Mortbay ≫ Jetty Version 5.1.1 Update rc0
Mortbay ≫ Jetty Version 5.1.1 Update rc1
Mortbay ≫ Jetty Version 5.1.2
Mortbay ≫ Jetty Version 5.1.2 Update pre0
Mortbay ≫ Jetty Version 5.1.3
Mortbay ≫ Jetty Version 5.1.3 Update rc0
Mortbay ≫ Jetty Version 5.1.3 Update rc1
Mortbay ≫ Jetty Version 5.1.3 Update rc2
Mortbay ≫ Jetty Version 5.1.3 Update rc3
Mortbay ≫ Jetty Version 5.1.3 Update rc4
Mortbay ≫ Jetty Version 5.1.4
Mortbay ≫ Jetty Version 5.1.4 Update rc0
Mortbay ≫ Jetty Version 5.1.5
Mortbay ≫ Jetty Version 5.1.5 Update rc0
Mortbay ≫ Jetty Version 5.1.5 Update rc1
Mortbay ≫ Jetty Version 5.1.5 Update rc2
Mortbay ≫ Jetty Version 5.1.6
Mortbay ≫ Jetty Version 5.1.7
Mortbay ≫ Jetty Version 5.1.7 Update rc0
Mortbay ≫ Jetty Version 5.1.8
Mortbay ≫ Jetty Version 5.1.9
Mortbay ≫ Jetty Version 5.1.10
Mortbay ≫ Jetty Version 5.1.11
Mortbay ≫ Jetty Version 5.1.11 Update rc0
Mortbay ≫ Jetty Version 5.1.12
Mortbay ≫ Jetty Version 5.1.13
Mortbay ≫ Jetty Version 5.1.14
Mortbay ≫ Jetty Version 6.0.0
Mortbay ≫ Jetty Version 6.0.0 Update alpha0
Mortbay ≫ Jetty Version 6.0.0 Update alpha1
Mortbay ≫ Jetty Version 6.0.0 Update alpha2
Mortbay ≫ Jetty Version 6.0.0 Update alpha3
Mortbay ≫ Jetty Version 6.0.0 Update beta0
Mortbay ≫ Jetty Version 6.0.0 Update beta1
Mortbay ≫ Jetty Version 6.0.0 Update beta10
Mortbay ≫ Jetty Version 6.0.0 Update beta11
Mortbay ≫ Jetty Version 6.0.0 Update beta12
Mortbay ≫ Jetty Version 6.0.0 Update beta14
Mortbay ≫ Jetty Version 6.0.0 Update beta15
Mortbay ≫ Jetty Version 6.0.0 Update beta16
Mortbay ≫ Jetty Version 6.0.0 Update beta17
Mortbay ≫ Jetty Version 6.0.0 Update beta2
Mortbay ≫ Jetty Version 6.0.0 Update beta3
Mortbay ≫ Jetty Version 6.0.0 Update beta4
Mortbay ≫ Jetty Version 6.0.0 Update beta5
Mortbay ≫ Jetty Version 6.0.0 Update beta6
Mortbay ≫ Jetty Version 6.0.0 Update beta7
Mortbay ≫ Jetty Version 6.0.0 Update beta8
Mortbay ≫ Jetty Version 6.0.0 Update beta9
Mortbay ≫ Jetty Version 6.0.0 Update betax
Mortbay ≫ Jetty Version 6.0.0 Update rc0
Mortbay ≫ Jetty Version 6.0.0 Update rc1
Mortbay ≫ Jetty Version 6.0.0 Update rc2
Mortbay ≫ Jetty Version 6.0.0 Update rc3
Mortbay ≫ Jetty Version 6.0.0 Update rc4
Mortbay ≫ Jetty Version 6.0.1
Mortbay ≫ Jetty Version 6.0.2
Mortbay ≫ Jetty Version 6.1.0
Mortbay ≫ Jetty Version 6.1.0 Update pre0
Mortbay ≫ Jetty Version 6.1.0 Update pre1
Mortbay ≫ Jetty Version 6.1.0 Update pre2
Mortbay ≫ Jetty Version 6.1.0 Update pre3
Mortbay ≫ Jetty Version 6.1.0 Update rc0
Mortbay ≫ Jetty Version 6.1.0 Update rc1
Mortbay ≫ Jetty Version 6.1.0 Update rc2
Mortbay ≫ Jetty Version 6.1.0 Update rc3
Mortbay ≫ Jetty Version 6.1.1
Mortbay ≫ Jetty Version 6.1.1 Update rc0
Mortbay ≫ Jetty Version 6.1.2
Mortbay ≫ Jetty Version 6.1.2 Update pre0
Mortbay ≫ Jetty Version 6.1.2 Update pre1
Mortbay ≫ Jetty Version 6.1.2 Update rc0
Mortbay ≫ Jetty Version 6.1.2 Update rc1
Mortbay ≫ Jetty Version 6.1.2 Update rc2
Mortbay ≫ Jetty Version 6.1.2 Update rc3
Mortbay ≫ Jetty Version 6.1.2 Update rc4
Mortbay ≫ Jetty Version 6.1.2 Update rc5
Mortbay ≫ Jetty Version 6.1.3
Mortbay ≫ Jetty Version 6.1.4
Mortbay ≫ Jetty Version 6.1.4 Update rc0
Mortbay ≫ Jetty Version 6.1.4 Update rc1
Mortbay ≫ Jetty Version 6.1.5
Mortbay ≫ Jetty Version 6.1.5 Update rc0
Mortbay ≫ Jetty Version 6.1.6
Mortbay ≫ Jetty Version 6.1.6 Update rc0
Mortbay ≫ Jetty Version 6.1.6 Update rc1
Mortbay ≫ Jetty Version 6.1.7
Mortbay ≫ Jetty Version 6.1.8
Mortbay ≫ Jetty Version 6.1.9
Mortbay ≫ Jetty Version 6.1.10
Mortbay ≫ Jetty Version 6.1.11
Mortbay ≫ Jetty Version 6.1.12
Mortbay ≫ Jetty Version 6.1.12 Update rc1
Mortbay ≫ Jetty Version 6.1.12 Update rc2
Mortbay ≫ Jetty Version 6.1.12 Update rc3
Mortbay ≫ Jetty Version 6.1.12 Update rc4
Mortbay ≫ Jetty Version 6.1.12 Update rc5
Mortbay ≫ Jetty Version 6.1.14
Mortbay ≫ Jetty Version 6.1.15
Mortbay ≫ Jetty Version 6.1.15 Update pre0
Mortbay ≫ Jetty Version 6.1.15 Update rc2
Mortbay ≫ Jetty Version 6.1.15 Update rc3
Mortbay ≫ Jetty Version 6.1.15 Update rc4
Mortbay ≫ Jetty Version 6.1.15 Update rc5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.59% 0.833
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02282388
http://secunia.com/advisories/34975
Vendor Advisory
http://secunia.com/advisories/40553
http://www.securityfocus.com/bid/34800
http://www.vupen.com/english/advisories/2010/1792
https://bugzilla.redhat.com/show_bug.cgi?id=499867
http://jira.codehaus.org/browse/JETTY-980
Patch