CVEDB API

Vulnerability Details CVE-2021-28163

In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that might be in that directory.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 40.7%

CVSS Severity

CVSS v3 Score 2.7

CVSS v2 Score 4.0

References

Products affected by CVE-2021-28163

Apache » Ignite » Version: 1.0.0

cpe:2.3:a:apache:ignite:1.0.0
Apache » Ignite » Version: 1.0.1

cpe:2.3:a:apache:ignite:1.0.1
Apache » Ignite » Version: 1.0.2

cpe:2.3:a:apache:ignite:1.0.2
Apache » Ignite » Version: 1.1.0

cpe:2.3:a:apache:ignite:1.1.0
Apache » Ignite » Version: 1.1.3

cpe:2.3:a:apache:ignite:1.1.3
Apache » Ignite » Version: 1.1.4

cpe:2.3:a:apache:ignite:1.1.4
Apache » Ignite » Version: 1.2.0

cpe:2.3:a:apache:ignite:1.2.0
Apache » Ignite » Version: 1.3.0

cpe:2.3:a:apache:ignite:1.3.0
Apache » Ignite » Version: 1.3.1

cpe:2.3:a:apache:ignite:1.3.1
Apache » Ignite » Version: 1.3.2

cpe:2.3:a:apache:ignite:1.3.2
Apache » Ignite » Version: 1.3.3

cpe:2.3:a:apache:ignite:1.3.3
Apache » Ignite » Version: 1.4.0

cpe:2.3:a:apache:ignite:1.4.0
Apache » Ignite » Version: 1.4.1

cpe:2.3:a:apache:ignite:1.4.1
Apache » Ignite » Version: 1.5.0

cpe:2.3:a:apache:ignite:1.5.0
Apache » Ignite » Version: 1.6.0

cpe:2.3:a:apache:ignite:1.6.0
Apache » Ignite » Version: 1.6.4

cpe:2.3:a:apache:ignite:1.6.4
Apache » Ignite » Version: 1.7.0

cpe:2.3:a:apache:ignite:1.7.0
Apache » Ignite » Version: 1.7.10

cpe:2.3:a:apache:ignite:1.7.10
Apache » Ignite » Version: 1.8.0

cpe:2.3:a:apache:ignite:1.8.0
Apache » Ignite » Version: 1.9.0

cpe:2.3:a:apache:ignite:1.9.0
Apache » Ignite » Version: 2.0.0

cpe:2.3:a:apache:ignite:2.0.0
Apache » Ignite » Version: 2.1.0

cpe:2.3:a:apache:ignite:2.1.0
Apache » Solr » Version: 8.8.1

cpe:2.3:a:apache:solr:8.8.1
Eclipse » Jetty » Version: 10.0.0

cpe:2.3:a:eclipse:jetty:10.0.0
Eclipse » Jetty » Version: 10.0.1

cpe:2.3:a:eclipse:jetty:10.0.1
Eclipse » Jetty » Version: 11.0.0

cpe:2.3:a:eclipse:jetty:11.0.0
Eclipse » Jetty » Version: 11.0.1

cpe:2.3:a:eclipse:jetty:11.0.1
Eclipse » Jetty » Version: 9.4.32

cpe:2.3:a:eclipse:jetty:9.4.32
Eclipse » Jetty » Version: 9.4.33

cpe:2.3:a:eclipse:jetty:9.4.33
Eclipse » Jetty » Version: 9.4.34

cpe:2.3:a:eclipse:jetty:9.4.34
Eclipse » Jetty » Version: 9.4.35

cpe:2.3:a:eclipse:jetty:9.4.35
Eclipse » Jetty » Version: 9.4.36

cpe:2.3:a:eclipse:jetty:9.4.36
Eclipse » Jetty » Version: 9.4.37

cpe:2.3:a:eclipse:jetty:9.4.37
Eclipse » Jetty » Version: 9.4.38

cpe:2.3:a:eclipse:jetty:9.4.38
Netapp » Cloud Manager » Version: N/A

cpe:2.3:a:netapp:cloud_manager:-
Netapp » E-Series Performance Analyzer » Version: N/A

cpe:2.3:a:netapp:e-series_performance_analyzer:-
Netapp » E-Series Santricity Os Controller » Version: 11.0.0

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0.0
Netapp » E-Series Santricity Os Controller » Version: 11.20

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.20
Netapp » E-Series Santricity Os Controller » Version: 11.25

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.25
Netapp » E-Series Santricity Os Controller » Version: 11.30

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30
Netapp » E-Series Santricity Os Controller » Version: 11.30.5r3

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30.5r3
Netapp » E-Series Santricity Os Controller » Version: 11.40

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40
Netapp » E-Series Santricity Os Controller » Version: 11.40.3r2

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.3r2
Netapp » E-Series Santricity Os Controller » Version: 11.40.5

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.5
Netapp » E-Series Santricity Os Controller » Version: 11.50.1

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.1
Netapp » E-Series Santricity Os Controller » Version: 11.50.2

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2
Netapp » E-Series Santricity Os Controller » Version: 11.60

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60
Netapp » E-Series Santricity Os Controller » Version: 11.60.0

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.0
Netapp » E-Series Santricity Os Controller » Version: 11.60.1

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.1
Netapp » E-Series Santricity Os Controller » Version: 11.60.3

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.3
Netapp » E-Series Santricity Os Controller » Version: 11.70.1

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.1
Netapp » E-Series Santricity Web Services » Version: N/A

cpe:2.3:a:netapp:e-series_santricity_web_services:-
Netapp » Element Plug-In For Vcenter Server » Version: N/A

cpe:2.3:a:netapp:element_plug-in_for_vcenter_server:-
Netapp » Santricity Cloud Connector » Version: N/A

cpe:2.3:a:netapp:santricity_cloud_connector:-
Netapp » Snapcenter » Version: N/A

cpe:2.3:a:netapp:snapcenter:-
Netapp » Snapcenter Plug-In » Version: N/A

cpe:2.3:a:netapp:snapcenter_plug-in:-
Netapp » Storage Replication Adapter For Clustered Data Ontap » Version: 9.6

cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.6
Netapp » Storage Replication Adapter For Clustered Data Ontap » Version: 9.7

cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:9.7
Netapp » Vasa Provider For Clustered Data Ontap » Version: 9.6

cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:9.6
Netapp » Vasa Provider For Clustered Data Ontap » Version: 9.7

cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:9.7
Netapp » Virtual Storage Console » Version: 9.6

cpe:2.3:a:netapp:virtual_storage_console:9.6
Netapp » Virtual Storage Console » Version: 9.7

cpe:2.3:a:netapp:virtual_storage_console:9.7
Oracle » Autovue For Agile Product Lifecycle Management » Version: 21.0.2

cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2
Oracle » Banking Apis » Version: 20.1

cpe:2.3:a:oracle:banking_apis:20.1
Oracle » Banking Apis » Version: 21.1

cpe:2.3:a:oracle:banking_apis:21.1
Oracle » Banking Digital Experience » Version: 20.1

cpe:2.3:a:oracle:banking_digital_experience:20.1
Oracle » Banking Digital Experience » Version: 21.1

cpe:2.3:a:oracle:banking_digital_experience:21.1
Oracle » Communications Element Manager » Version: 8.2.2

cpe:2.3:a:oracle:communications_element_manager:8.2.2
Oracle » Communications Services Gatekeeper » Version: 7.0

cpe:2.3:a:oracle:communications_services_gatekeeper:7.0
Oracle » Communications Session Report Manager » Version: 8.0.0

cpe:2.3:a:oracle:communications_session_report_manager:8.0.0
Oracle » Communications Session Report Manager » Version: 8.0.0.0

cpe:2.3:a:oracle:communications_session_report_manager:8.0.0.0
Oracle » Communications Session Report Manager » Version: 8.1.0

cpe:2.3:a:oracle:communications_session_report_manager:8.1.0
Oracle » Communications Session Report Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_session_report_manager:8.1.1
Oracle » Communications Session Report Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_report_manager:8.2.0
Oracle » Communications Session Report Manager » Version: 8.2.1

cpe:2.3:a:oracle:communications_session_report_manager:8.2.1
Oracle » Communications Session Report Manager » Version: 8.2.2

cpe:2.3:a:oracle:communications_session_report_manager:8.2.2
Oracle » Communications Session Report Manager » Version: 8.2.2.1

cpe:2.3:a:oracle:communications_session_report_manager:8.2.2.1
Oracle » Communications Session Report Manager » Version: 8.2.4.0

cpe:2.3:a:oracle:communications_session_report_manager:8.2.4.0
Oracle » Communications Session Route Manager » Version: 8.0.0

cpe:2.3:a:oracle:communications_session_route_manager:8.0.0
Oracle » Communications Session Route Manager » Version: 8.1.0

cpe:2.3:a:oracle:communications_session_route_manager:8.1.0
Oracle » Communications Session Route Manager » Version: 8.1.1

cpe:2.3:a:oracle:communications_session_route_manager:8.1.1
Oracle » Communications Session Route Manager » Version: 8.2.0

cpe:2.3:a:oracle:communications_session_route_manager:8.2.0
Oracle » Communications Session Route Manager » Version: 8.2.0.0

cpe:2.3:a:oracle:communications_session_route_manager:8.2.0.0
Oracle » Communications Session Route Manager » Version: 8.2.1

cpe:2.3:a:oracle:communications_session_route_manager:8.2.1
Oracle » Communications Session Route Manager » Version: 8.2.2

cpe:2.3:a:oracle:communications_session_route_manager:8.2.2
Oracle » Communications Session Route Manager » Version: 8.2.2.1

cpe:2.3:a:oracle:communications_session_route_manager:8.2.2.1
Oracle » Communications Session Route Manager » Version: 8.2.4

cpe:2.3:a:oracle:communications_session_route_manager:8.2.4
Oracle » Communications Session Route Manager » Version: 8.2.4.0

cpe:2.3:a:oracle:communications_session_route_manager:8.2.4.0
Oracle » Siebel Core - Automation » Version: N/A

cpe:2.3:a:oracle:siebel_core_-_automation:-
Oracle » Siebel Core - Automation » Version: 21.5

cpe:2.3:a:oracle:siebel_core_-_automation:21.5
Oracle » Siebel Core - Automation » Version: 21.9

cpe:2.3:a:oracle:siebel_core_-_automation:21.9
Fedoraproject » Fedora » Version: 32

cpe:2.3:o:fedoraproject:fedora:32
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-28163

Products

Pricing

Contact Us