CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10246

In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.017

EPSS Ranking 81.3%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2019-10246

Eclipse » Jetty » Version: 9.2.27

cpe:2.3:a:eclipse:jetty:9.2.27
Eclipse » Jetty » Version: 9.3.26

cpe:2.3:a:eclipse:jetty:9.3.26
Eclipse » Jetty » Version: 9.4.16

cpe:2.3:a:eclipse:jetty:9.4.16
Netapp » Oncommand System Manager » Version: 3.0

cpe:2.3:a:netapp:oncommand_system_manager:3.0
Netapp » Oncommand System Manager » Version: 3.0.0

cpe:2.3:a:netapp:oncommand_system_manager:3.0.0
Netapp » Oncommand System Manager » Version: 3.1

cpe:2.3:a:netapp:oncommand_system_manager:3.1
Netapp » Oncommand System Manager » Version: 3.1.1

cpe:2.3:a:netapp:oncommand_system_manager:3.1.1
Netapp » Oncommand System Manager » Version: 3.1.2

cpe:2.3:a:netapp:oncommand_system_manager:3.1.2
Netapp » Oncommand System Manager » Version: 3.1.3

cpe:2.3:a:netapp:oncommand_system_manager:3.1.3
Netapp » Snap Creator Framework » Version: N/A

cpe:2.3:a:netapp:snap_creator_framework:-
Netapp » Snapcenter » Version: N/A

cpe:2.3:a:netapp:snapcenter:-
Netapp » Snapmanager » Version: N/A

cpe:2.3:a:netapp:snapmanager:-
Netapp » Storage Replication Adapter For Clustered Data Ontap » Version: 9.6

cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6
Netapp » Storage Replication Adapter For Clustered Data Ontap » Version: 9.7

cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.7
Netapp » Storage Services Connector » Version: N/A

cpe:2.3:a:netapp:storage_services_connector:-
Netapp » Vasa Provider For Clustered Data Ontap » Version: N/A

cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:-
Netapp » Vasa Provider For Clustered Data Ontap » Version: 9.6

cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:9.6
Netapp » Vasa Provider For Clustered Data Ontap » Version: 9.7

cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:9.7
Netapp » Virtual Storage Console » Version: 9.6

cpe:2.3:a:netapp:virtual_storage_console:9.6
Netapp » Virtual Storage Console » Version: 9.7

cpe:2.3:a:netapp:virtual_storage_console:9.7
Oracle » Autovue » Version: 21.0.2

cpe:2.3:a:oracle:autovue:21.0.2
Oracle » Communications Analytics » Version: 12.1.1

cpe:2.3:a:oracle:communications_analytics:12.1.1
Oracle » Communications Element Manager » Version: 8.0.0

cpe:2.3:a:oracle:communications_element_manager:8.0.0
Oracle » Communications Element Manager » Version: 8.1.0

cpe:2.3:a:oracle:communications_element_manager:8.1.0
Oracle » Communications Element Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_element_manager:8.1.1
Oracle » Communications Element Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_element_manager:8.2.0
Oracle » Communications Services Gatekeeper » Version: 6.0

cpe:2.3:a:oracle:communications_services_gatekeeper:6.0
Oracle » Communications Services Gatekeeper » Version: 6.1

cpe:2.3:a:oracle:communications_services_gatekeeper:6.1
Oracle » Communications Services Gatekeeper » Version: 7.0

cpe:2.3:a:oracle:communications_services_gatekeeper:7.0
Oracle » Communications Session Report Manager » Version: 8.0.0

cpe:2.3:a:oracle:communications_session_report_manager:8.0.0
Oracle » Communications Session Report Manager » Version: 8.1.0

cpe:2.3:a:oracle:communications_session_report_manager:8.1.0
Oracle » Communications Session Report Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_session_report_manager:8.1.1
Oracle » Communications Session Report Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_report_manager:8.2.0
Oracle » Communications Session Route Manager » Version: 8.0.0

cpe:2.3:a:oracle:communications_session_route_manager:8.0.0
Oracle » Communications Session Route Manager » Version: 8.1.0

cpe:2.3:a:oracle:communications_session_route_manager:8.1.0
Oracle » Communications Session Route Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_session_route_manager:8.1.1
Oracle » Communications Session Route Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_route_manager:8.2.0
Oracle » Data Integrator » Version: 12.2.1.3.0

cpe:2.3:a:oracle:data_integrator:12.2.1.3.0
Oracle » Data Integrator » Version: 12.2.1.4.0

cpe:2.3:a:oracle:data_integrator:12.2.1.4.0
Oracle » Endeca Information Discovery Integrator » Version: 3.2.0

cpe:2.3:a:oracle:endeca_information_discovery_integrator:3.2.0
Oracle » Enterprise Manager Base Platform » Version: 13.2

cpe:2.3:a:oracle:enterprise_manager_base_platform:13.2
Oracle » Enterprise Manager Base Platform » Version: 13.3

cpe:2.3:a:oracle:enterprise_manager_base_platform:13.3
Oracle » Flexcube Core Banking » Version: 11.5.0

cpe:2.3:a:oracle:flexcube_core_banking:11.5.0
Oracle » Flexcube Core Banking » Version: 11.6.0

cpe:2.3:a:oracle:flexcube_core_banking:11.6.0
Oracle » Flexcube Core Banking » Version: 11.7.0

cpe:2.3:a:oracle:flexcube_core_banking:11.7.0
Oracle » Flexcube Core Banking » Version: 5.2.0

cpe:2.3:a:oracle:flexcube_core_banking:5.2.0
Oracle » Flexcube Private Banking » Version: 12.0.0

cpe:2.3:a:oracle:flexcube_private_banking:12.0.0
Oracle » Flexcube Private Banking » Version: 12.1.0

cpe:2.3:a:oracle:flexcube_private_banking:12.1.0
Oracle » Hospitality Guest Access » Version: 4.2.0

cpe:2.3:a:oracle:hospitality_guest_access:4.2.0
Oracle » Hospitality Guest Access » Version: 4.2.1

cpe:2.3:a:oracle:hospitality_guest_access:4.2.1
Oracle » Rest Data Services » Version: 11.2.0.4

cpe:2.3:a:oracle:rest_data_services:11.2.0.4
Oracle » Rest Data Services » Version: 12.1.0.2

cpe:2.3:a:oracle:rest_data_services:12.1.0.2
Oracle » Rest Data Services » Version: 12.2.0.1

cpe:2.3:a:oracle:rest_data_services:12.2.0.1
Oracle » Rest Data Services » Version: 18c

cpe:2.3:a:oracle:rest_data_services:18c
Oracle » Retail Xstore Point Of Service » Version: 15.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:15.0
Oracle » Retail Xstore Point Of Service » Version: 16.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0
Oracle » Retail Xstore Point Of Service » Version: 17.0

cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0
Oracle » Retail Xstore Point Of Service » Version: 7.1

cpe:2.3:a:oracle:retail_xstore_point_of_service:7.1
Oracle » Unified Directory » Version: 12.2.1.3.0

cpe:2.3:a:oracle:unified_directory:12.2.1.3.0
Oracle » Unified Directory » Version: 12.2.1.4.0

cpe:2.3:a:oracle:unified_directory:12.2.1.4.0
Microsoft » Windows » Version: N/A

cpe:2.3:o:microsoft:windows:-
Netapp » Element » Version: N/A

cpe:2.3:o:netapp:element:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-10246

Products

Pricing

Contact Us