CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-34429

For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc5.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.937

EPSS Ranking 99.8%

CVSS Severity

CVSS v3 Score 5.3

CVSS v2 Score 5.0

References

Products affected by CVE-2021-34429

Eclipse » Jetty » Version: 10.0.1

cpe:2.3:a:eclipse:jetty:10.0.1
Eclipse » Jetty » Version: 10.0.2

cpe:2.3:a:eclipse:jetty:10.0.2
Eclipse » Jetty » Version: 10.0.3

cpe:2.3:a:eclipse:jetty:10.0.3
Eclipse » Jetty » Version: 10.0.4

cpe:2.3:a:eclipse:jetty:10.0.4
Eclipse » Jetty » Version: 10.0.5

cpe:2.3:a:eclipse:jetty:10.0.5
Eclipse » Jetty » Version: 11.0.1

cpe:2.3:a:eclipse:jetty:11.0.1
Eclipse » Jetty » Version: 11.0.2

cpe:2.3:a:eclipse:jetty:11.0.2
Eclipse » Jetty » Version: 11.0.3

cpe:2.3:a:eclipse:jetty:11.0.3
Eclipse » Jetty » Version: 11.0.4

cpe:2.3:a:eclipse:jetty:11.0.4
Eclipse » Jetty » Version: 11.0.5

cpe:2.3:a:eclipse:jetty:11.0.5
Eclipse » Jetty » Version: 9.4.37

cpe:2.3:a:eclipse:jetty:9.4.37
Eclipse » Jetty » Version: 9.4.38

cpe:2.3:a:eclipse:jetty:9.4.38
Eclipse » Jetty » Version: 9.4.39

cpe:2.3:a:eclipse:jetty:9.4.39
Eclipse » Jetty » Version: 9.4.40

cpe:2.3:a:eclipse:jetty:9.4.40
Eclipse » Jetty » Version: 9.4.41

cpe:2.3:a:eclipse:jetty:9.4.41
Eclipse » Jetty » Version: 9.4.42

cpe:2.3:a:eclipse:jetty:9.4.42
Netapp » E-Series Santricity Os Controller » Version: 11.0

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0
Netapp » E-Series Santricity Os Controller » Version: 11.0.0

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.0.0
Netapp » E-Series Santricity Os Controller » Version: 11.20

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.20
Netapp » E-Series Santricity Os Controller » Version: 11.25

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.25
Netapp » E-Series Santricity Os Controller » Version: 11.30

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30
Netapp » E-Series Santricity Os Controller » Version: 11.30.5r3

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.30.5r3
Netapp » E-Series Santricity Os Controller » Version: 11.40

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40
Netapp » E-Series Santricity Os Controller » Version: 11.40.3r2

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.3r2
Netapp » E-Series Santricity Os Controller » Version: 11.40.5

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.40.5
Netapp » E-Series Santricity Os Controller » Version: 11.50.1

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.1
Netapp » E-Series Santricity Os Controller » Version: 11.50.2

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.50.2
Netapp » E-Series Santricity Os Controller » Version: 11.60

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60
Netapp » E-Series Santricity Os Controller » Version: 11.60.0

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.0
Netapp » E-Series Santricity Os Controller » Version: 11.60.1

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.1
Netapp » E-Series Santricity Os Controller » Version: 11.60.3

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.60.3
Netapp » E-Series Santricity Os Controller » Version: 11.70.1

cpe:2.3:a:netapp:e-series_santricity_os_controller:11.70.1
Netapp » E-Series Santricity Web Services » Version: N/A

cpe:2.3:a:netapp:e-series_santricity_web_services:-
Netapp » Element Plug-In For Vcenter Server » Version: N/A

cpe:2.3:a:netapp:element_plug-in_for_vcenter_server:-
Netapp » Hci Management Node » Version: N/A

cpe:2.3:a:netapp:hci_management_node:-
Netapp » Snap Creator Framework » Version: N/A

cpe:2.3:a:netapp:snap_creator_framework:-
Netapp » Snapcenter Plug-In » Version: N/A

cpe:2.3:a:netapp:snapcenter_plug-in:-
Netapp » Solidfire » Version: N/A

cpe:2.3:a:netapp:solidfire:-
Oracle » Autovue For Agile Product Lifecycle Management » Version: 21.0.2

cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2
Oracle » Communications Cloud Native Core Binding Support Function » Version: 1.10.0

cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.10.0
Oracle » Communications Cloud Native Core Security Edge Protection Proxy » Version: 1.5.0

cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.5.0
Oracle » Communications Cloud Native Core Service Communication Proxy » Version: 1.14.0

cpe:2.3:a:oracle:communications_cloud_native_core_service_communication_proxy:1.14.0
Oracle » Communications Cloud Native Core Unified Data Repository » Version: 1.14.0

cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.14.0
Oracle » Communications Diameter Signaling Router » Version: 8.0.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.1

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1
Oracle » Communications Diameter Signaling Router » Version: 8.2

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2
Oracle » Communications Diameter Signaling Router » Version: 8.2.1

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1
Oracle » Communications Diameter Signaling Router » Version: 8.2.2

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.2
Oracle » Communications Diameter Signaling Router » Version: 8.3

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3
Oracle » Communications Diameter Signaling Router » Version: 8.3.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.3.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.4

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4
Oracle » Communications Diameter Signaling Router » Version: 8.4.0.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4.0.0
Oracle » Communications Diameter Signaling Router » Version: 8.4.0.5

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.4.0.5
Oracle » Communications Diameter Signaling Router » Version: 8.5.0

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.5.0
Oracle » Communications Diameter Signaling Router » Version: 8.5.0.2

cpe:2.3:a:oracle:communications_diameter_signaling_router:8.5.0.2
Oracle » Financial Services Crime And Compliance Management Studio » Version: 8.0.8.2.0

cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0
Oracle » Financial Services Crime And Compliance Management Studio » Version: 8.0.8.3.0

cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.3.0
Oracle » Rest Data Services » Version: 11.2.0.4

cpe:2.3:a:oracle:rest_data_services:11.2.0.4
Oracle » Rest Data Services » Version: 12.1.0.2

cpe:2.3:a:oracle:rest_data_services:12.1.0.2
Oracle » Rest Data Services » Version: 12.2.0.1

cpe:2.3:a:oracle:rest_data_services:12.2.0.1
Oracle » Rest Data Services » Version: 18c

cpe:2.3:a:oracle:rest_data_services:18c
Oracle » Rest Data Services » Version: 19c

cpe:2.3:a:oracle:rest_data_services:19c
Oracle » Rest Data Services » Version: 20.4.3.050.1904

cpe:2.3:a:oracle:rest_data_services:20.4.3.050.1904
Oracle » Rest Data Services » Version: 21.2

cpe:2.3:a:oracle:rest_data_services:21.2
Oracle » Rest Data Services » Version: 21.2.4

cpe:2.3:a:oracle:rest_data_services:21.2.4
Oracle » Rest Data Services » Version: 21.3

cpe:2.3:a:oracle:rest_data_services:21.3
Oracle » Retail Eftlink » Version: 20.0.1

cpe:2.3:a:oracle:retail_eftlink:20.0.1
Oracle » Stream Analytics » Version: N/A

cpe:2.3:a:oracle:stream_analytics:-
Oracle » Stream Analytics » Version: 19c

cpe:2.3:a:oracle:stream_analytics:19c

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-34429

Products

Pricing

Contact Us