CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-27223

In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.337

EPSS Ranking 96.7%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 4.3

References

Products affected by CVE-2020-27223

Apache » Nifi » Version: 1.13.0

cpe:2.3:a:apache:nifi:1.13.0
Apache » Solr » Version: 8.8.1

cpe:2.3:a:apache:solr:8.8.1
Apache » Spark » Version: 3.1.1

cpe:2.3:a:apache:spark:3.1.1
Eclipse » Jetty » Version: 10.0.0

cpe:2.3:a:eclipse:jetty:10.0.0
Eclipse » Jetty » Version: 11.0.0

cpe:2.3:a:eclipse:jetty:11.0.0
Eclipse » Jetty » Version: 9.4.10

cpe:2.3:a:eclipse:jetty:9.4.10
Eclipse » Jetty » Version: 9.4.11

cpe:2.3:a:eclipse:jetty:9.4.11
Eclipse » Jetty » Version: 9.4.12

cpe:2.3:a:eclipse:jetty:9.4.12
Eclipse » Jetty » Version: 9.4.13

cpe:2.3:a:eclipse:jetty:9.4.13
Eclipse » Jetty » Version: 9.4.14

cpe:2.3:a:eclipse:jetty:9.4.14
Eclipse » Jetty » Version: 9.4.15

cpe:2.3:a:eclipse:jetty:9.4.15
Eclipse » Jetty » Version: 9.4.16

cpe:2.3:a:eclipse:jetty:9.4.16
Eclipse » Jetty » Version: 9.4.17

cpe:2.3:a:eclipse:jetty:9.4.17
Eclipse » Jetty » Version: 9.4.18

cpe:2.3:a:eclipse:jetty:9.4.18
Eclipse » Jetty » Version: 9.4.19

cpe:2.3:a:eclipse:jetty:9.4.19
Eclipse » Jetty » Version: 9.4.20

cpe:2.3:a:eclipse:jetty:9.4.20
Eclipse » Jetty » Version: 9.4.21

cpe:2.3:a:eclipse:jetty:9.4.21
Eclipse » Jetty » Version: 9.4.22

cpe:2.3:a:eclipse:jetty:9.4.22
Eclipse » Jetty » Version: 9.4.23

cpe:2.3:a:eclipse:jetty:9.4.23
Eclipse » Jetty » Version: 9.4.24

cpe:2.3:a:eclipse:jetty:9.4.24
Eclipse » Jetty » Version: 9.4.25

cpe:2.3:a:eclipse:jetty:9.4.25
Eclipse » Jetty » Version: 9.4.26

cpe:2.3:a:eclipse:jetty:9.4.26
Eclipse » Jetty » Version: 9.4.27

cpe:2.3:a:eclipse:jetty:9.4.27
Eclipse » Jetty » Version: 9.4.28

cpe:2.3:a:eclipse:jetty:9.4.28
Eclipse » Jetty » Version: 9.4.29

cpe:2.3:a:eclipse:jetty:9.4.29
Eclipse » Jetty » Version: 9.4.30

cpe:2.3:a:eclipse:jetty:9.4.30
Eclipse » Jetty » Version: 9.4.31

cpe:2.3:a:eclipse:jetty:9.4.31
Eclipse » Jetty » Version: 9.4.32

cpe:2.3:a:eclipse:jetty:9.4.32
Eclipse » Jetty » Version: 9.4.33

cpe:2.3:a:eclipse:jetty:9.4.33
Eclipse » Jetty » Version: 9.4.34

cpe:2.3:a:eclipse:jetty:9.4.34
Eclipse » Jetty » Version: 9.4.35

cpe:2.3:a:eclipse:jetty:9.4.35
Eclipse » Jetty » Version: 9.4.36

cpe:2.3:a:eclipse:jetty:9.4.36
Eclipse » Jetty » Version: 9.4.6

cpe:2.3:a:eclipse:jetty:9.4.6
Eclipse » Jetty » Version: 9.4.7

cpe:2.3:a:eclipse:jetty:9.4.7
Eclipse » Jetty » Version: 9.4.8

cpe:2.3:a:eclipse:jetty:9.4.8
Eclipse » Jetty » Version: 9.4.9

cpe:2.3:a:eclipse:jetty:9.4.9
Netapp » E-Series Santricity Os Controller » Version: 11.0.0

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0.0
Netapp » E-Series Santricity Os Controller » Version: 11.20

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.20
Netapp » E-Series Santricity Os Controller » Version: 11.25

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.25
Netapp » E-Series Santricity Os Controller » Version: 11.30

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30
Netapp » E-Series Santricity Os Controller » Version: 11.30.5r3

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30.5r3
Netapp » E-Series Santricity Os Controller » Version: 11.40

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40
Netapp » E-Series Santricity Os Controller » Version: 11.40.3r2

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.3r2
Netapp » E-Series Santricity Os Controller » Version: 11.40.5

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.5
Netapp » E-Series Santricity Os Controller » Version: 11.50.1

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.1
Netapp » E-Series Santricity Os Controller » Version: 11.50.2

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2
Netapp » E-Series Santricity Os Controller » Version: 11.60

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60
Netapp » E-Series Santricity Os Controller » Version: 11.60.0

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.0
Netapp » E-Series Santricity Os Controller » Version: 11.60.1

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.1
Netapp » E-Series Santricity Os Controller » Version: 11.60.3

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.3
Netapp » E-Series Santricity Os Controller » Version: 11.70.1

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.1
Netapp » E-Series Santricity Web Services » Version: N/A

cpe:2.3:a:netapp:e-series_santricity_web_services:-
Netapp » Element Plug-In For Vcenter Server » Version: N/A

cpe:2.3:a:netapp:element_plug-in_for_vcenter_server:-
Netapp » Hci » Version: N/A

cpe:2.3:a:netapp:hci:-
Netapp » Hci Management Node » Version: N/A

cpe:2.3:a:netapp:hci_management_node:-
Netapp » Management Services For Element Software » Version: N/A

cpe:2.3:a:netapp:management_services_for_element_software:-
Netapp » Snap Creator Framework » Version: N/A

cpe:2.3:a:netapp:snap_creator_framework:-
Netapp » Snapcenter » Version: N/A

cpe:2.3:a:netapp:snapcenter:-
Netapp » Snapmanager » Version: N/A

cpe:2.3:a:netapp:snapmanager:-
Netapp » Solidfire » Version: N/A

cpe:2.3:a:netapp:solidfire:-
Oracle » Rest Data Services » Version: 11.2.0.4

cpe:2.3:a:oracle:rest_data_services:11.2.0.4
Oracle » Rest Data Services » Version: 12.1.0.2

cpe:2.3:a:oracle:rest_data_services:12.1.0.2
Oracle » Rest Data Services » Version: 12.2.0.1

cpe:2.3:a:oracle:rest_data_services:12.2.0.1
Oracle » Rest Data Services » Version: 18c

cpe:2.3:a:oracle:rest_data_services:18c
Oracle » Rest Data Services » Version: 19c

cpe:2.3:a:oracle:rest_data_services:19c
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-27223

Products

Pricing

Contact Us