CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10241

In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.242

EPSS Ranking 95.8%

CVSS Severity

CVSS v3 Score 6.1

CVSS v2 Score 4.3

References

Products affected by CVE-2019-10241

Apache » Activemq » Version: 5.15.9

cpe:2.3:a:apache:activemq:5.15.9
Apache » Drill » Version: 1.16.0

cpe:2.3:a:apache:drill:1.16.0
Eclipse » Jetty » Version: 9.2.0

cpe:2.3:a:eclipse:jetty:9.2.0
Eclipse » Jetty » Version: 9.2.1

cpe:2.3:a:eclipse:jetty:9.2.1
Eclipse » Jetty » Version: 9.2.10

cpe:2.3:a:eclipse:jetty:9.2.10
Eclipse » Jetty » Version: 9.2.11

cpe:2.3:a:eclipse:jetty:9.2.11
Eclipse » Jetty » Version: 9.2.12

cpe:2.3:a:eclipse:jetty:9.2.12
Eclipse » Jetty » Version: 9.2.13

cpe:2.3:a:eclipse:jetty:9.2.13
Eclipse » Jetty » Version: 9.2.14

cpe:2.3:a:eclipse:jetty:9.2.14
Eclipse » Jetty » Version: 9.2.15

cpe:2.3:a:eclipse:jetty:9.2.15
Eclipse » Jetty » Version: 9.2.16

cpe:2.3:a:eclipse:jetty:9.2.16
Eclipse » Jetty » Version: 9.2.17

cpe:2.3:a:eclipse:jetty:9.2.17
Eclipse » Jetty » Version: 9.2.18

cpe:2.3:a:eclipse:jetty:9.2.18
Eclipse » Jetty » Version: 9.2.19

cpe:2.3:a:eclipse:jetty:9.2.19
Eclipse » Jetty » Version: 9.2.2

cpe:2.3:a:eclipse:jetty:9.2.2
Eclipse » Jetty » Version: 9.2.20

cpe:2.3:a:eclipse:jetty:9.2.20
Eclipse » Jetty » Version: 9.2.21

cpe:2.3:a:eclipse:jetty:9.2.21
Eclipse » Jetty » Version: 9.2.22

cpe:2.3:a:eclipse:jetty:9.2.22
Eclipse » Jetty » Version: 9.2.23

cpe:2.3:a:eclipse:jetty:9.2.23
Eclipse » Jetty » Version: 9.2.24

cpe:2.3:a:eclipse:jetty:9.2.24
Eclipse » Jetty » Version: 9.2.25

cpe:2.3:a:eclipse:jetty:9.2.25
Eclipse » Jetty » Version: 9.2.26

cpe:2.3:a:eclipse:jetty:9.2.26
Eclipse » Jetty » Version: 9.2.3

cpe:2.3:a:eclipse:jetty:9.2.3
Eclipse » Jetty » Version: 9.2.4

cpe:2.3:a:eclipse:jetty:9.2.4
Eclipse » Jetty » Version: 9.2.5

cpe:2.3:a:eclipse:jetty:9.2.5
Eclipse » Jetty » Version: 9.2.6

cpe:2.3:a:eclipse:jetty:9.2.6
Eclipse » Jetty » Version: 9.2.7

cpe:2.3:a:eclipse:jetty:9.2.7
Eclipse » Jetty » Version: 9.2.8

cpe:2.3:a:eclipse:jetty:9.2.8
Eclipse » Jetty » Version: 9.2.9

cpe:2.3:a:eclipse:jetty:9.2.9
Eclipse » Jetty » Version: 9.3.0

cpe:2.3:a:eclipse:jetty:9.3.0
Eclipse » Jetty » Version: 9.3.1

cpe:2.3:a:eclipse:jetty:9.3.1
Eclipse » Jetty » Version: 9.3.10

cpe:2.3:a:eclipse:jetty:9.3.10
Eclipse » Jetty » Version: 9.3.11

cpe:2.3:a:eclipse:jetty:9.3.11
Eclipse » Jetty » Version: 9.3.12

cpe:2.3:a:eclipse:jetty:9.3.12
Eclipse » Jetty » Version: 9.3.13

cpe:2.3:a:eclipse:jetty:9.3.13
Eclipse » Jetty » Version: 9.3.14

cpe:2.3:a:eclipse:jetty:9.3.14
Eclipse » Jetty » Version: 9.3.15

cpe:2.3:a:eclipse:jetty:9.3.15
Eclipse » Jetty » Version: 9.3.16

cpe:2.3:a:eclipse:jetty:9.3.16
Eclipse » Jetty » Version: 9.3.17

cpe:2.3:a:eclipse:jetty:9.3.17
Eclipse » Jetty » Version: 9.3.18

cpe:2.3:a:eclipse:jetty:9.3.18
Eclipse » Jetty » Version: 9.3.19

cpe:2.3:a:eclipse:jetty:9.3.19
Eclipse » Jetty » Version: 9.3.2

cpe:2.3:a:eclipse:jetty:9.3.2
Eclipse » Jetty » Version: 9.3.20

cpe:2.3:a:eclipse:jetty:9.3.20
Eclipse » Jetty » Version: 9.3.21

cpe:2.3:a:eclipse:jetty:9.3.21
Eclipse » Jetty » Version: 9.3.22

cpe:2.3:a:eclipse:jetty:9.3.22
Eclipse » Jetty » Version: 9.3.23

cpe:2.3:a:eclipse:jetty:9.3.23
Eclipse » Jetty » Version: 9.3.24

cpe:2.3:a:eclipse:jetty:9.3.24
Eclipse » Jetty » Version: 9.3.25

cpe:2.3:a:eclipse:jetty:9.3.25
Eclipse » Jetty » Version: 9.3.3

cpe:2.3:a:eclipse:jetty:9.3.3
Eclipse » Jetty » Version: 9.3.4

cpe:2.3:a:eclipse:jetty:9.3.4
Eclipse » Jetty » Version: 9.3.5

cpe:2.3:a:eclipse:jetty:9.3.5
Eclipse » Jetty » Version: 9.3.6

cpe:2.3:a:eclipse:jetty:9.3.6
Eclipse » Jetty » Version: 9.3.7

cpe:2.3:a:eclipse:jetty:9.3.7
Eclipse » Jetty » Version: 9.3.8

cpe:2.3:a:eclipse:jetty:9.3.8
Eclipse » Jetty » Version: 9.3.9

cpe:2.3:a:eclipse:jetty:9.3.9
Eclipse » Jetty » Version: 9.4.0

cpe:2.3:a:eclipse:jetty:9.4.0
Eclipse » Jetty » Version: 9.4.1

cpe:2.3:a:eclipse:jetty:9.4.1
Eclipse » Jetty » Version: 9.4.10

cpe:2.3:a:eclipse:jetty:9.4.10
Eclipse » Jetty » Version: 9.4.11

cpe:2.3:a:eclipse:jetty:9.4.11
Eclipse » Jetty » Version: 9.4.12

cpe:2.3:a:eclipse:jetty:9.4.12
Eclipse » Jetty » Version: 9.4.13

cpe:2.3:a:eclipse:jetty:9.4.13
Eclipse » Jetty » Version: 9.4.14

cpe:2.3:a:eclipse:jetty:9.4.14
Eclipse » Jetty » Version: 9.4.15

cpe:2.3:a:eclipse:jetty:9.4.15
Eclipse » Jetty » Version: 9.4.2

cpe:2.3:a:eclipse:jetty:9.4.2
Eclipse » Jetty » Version: 9.4.3

cpe:2.3:a:eclipse:jetty:9.4.3
Eclipse » Jetty » Version: 9.4.4

cpe:2.3:a:eclipse:jetty:9.4.4
Eclipse » Jetty » Version: 9.4.5

cpe:2.3:a:eclipse:jetty:9.4.5
Eclipse » Jetty » Version: 9.4.6

cpe:2.3:a:eclipse:jetty:9.4.6
Eclipse » Jetty » Version: 9.4.7

cpe:2.3:a:eclipse:jetty:9.4.7
Eclipse » Jetty » Version: 9.4.8

cpe:2.3:a:eclipse:jetty:9.4.8
Eclipse » Jetty » Version: 9.4.9

cpe:2.3:a:eclipse:jetty:9.4.9
Oracle » Flexcube Core Banking » Version: 11.5.0

cpe:2.3:a:oracle:flexcube_core_banking:11.5.0
Oracle » Flexcube Core Banking » Version: 11.6.0

cpe:2.3:a:oracle:flexcube_core_banking:11.6.0
Oracle » Flexcube Core Banking » Version: 11.7.0

cpe:2.3:a:oracle:flexcube_core_banking:11.7.0
Oracle » Flexcube Core Banking » Version: 5.2.0

cpe:2.3:a:oracle:flexcube_core_banking:5.2.0
Oracle » Rest Data Services » Version: 11.2.0.4

cpe:2.3:a:oracle:rest_data_services:11.2.0.4
Oracle » Rest Data Services » Version: 12.1.0.2

cpe:2.3:a:oracle:rest_data_services:12.1.0.2
Oracle » Rest Data Services » Version: 12.2.0.1

cpe:2.3:a:oracle:rest_data_services:12.2.0.1
Oracle » Rest Data Services » Version: 18c

cpe:2.3:a:oracle:rest_data_services:18c
Oracle » Retail Xstore Point Of Service » Version: 15.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0
Oracle » Retail Xstore Point Of Service » Version: 16.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0
Oracle » Retail Xstore Point Of Service » Version: 17.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0
Oracle » Retail Xstore Point Of Service » Version: 7.1

cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10241

Products

Pricing

Contact Us