Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-4610
cve-2009-4610
xss
mort bay jetty
cross-site scripting
vulnerabilities
security
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
45.9%
Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to jsp/dump.jsp in the JSP Dump feature, or the (2) Name or (3) Value parameter to the default URI for the Session Dump Servlet under session/.
Affected configurations
Node
mortbayjettyMatch6.0.0
ORmortbayjettyMatch6.0.0alpha0
ORmortbayjettyMatch6.0.0alpha1
ORmortbayjettyMatch6.0.0alpha2
ORmortbayjettyMatch6.0.0alpha3
ORmortbayjettyMatch6.0.0beta0
ORmortbayjettyMatch6.0.0beta1
ORmortbayjettyMatch6.0.0beta10
ORmortbayjettyMatch6.0.0beta11
ORmortbayjettyMatch6.0.0beta12
ORmortbayjettyMatch6.0.0beta14
ORmortbayjettyMatch6.0.0beta15
ORmortbayjettyMatch6.0.0beta16
ORmortbayjettyMatch6.0.0beta17
ORmortbayjettyMatch6.0.0beta2
ORmortbayjettyMatch6.0.0beta3
ORmortbayjettyMatch6.0.0beta4
ORmortbayjettyMatch6.0.0beta5
ORmortbayjettyMatch6.0.0beta6
ORmortbayjettyMatch6.0.0beta7
ORmortbayjettyMatch6.0.0beta8
ORmortbayjettyMatch6.0.0beta9
ORmortbayjettyMatch6.0.0betax
ORmortbayjettyMatch6.0.0rc0
ORmortbayjettyMatch6.0.0rc1
ORmortbayjettyMatch6.0.0rc2
ORmortbayjettyMatch6.0.0rc3
ORmortbayjettyMatch6.0.0rc4
ORmortbayjettyMatch6.0.1
ORmortbayjettyMatch6.0.2
ORmortbayjettyMatch6.1.0
ORmortbayjettyMatch6.1.0pre0
ORmortbayjettyMatch6.1.0pre1
ORmortbayjettyMatch6.1.0pre2
ORmortbayjettyMatch6.1.0pre3
ORmortbayjettyMatch6.1.0rc0
ORmortbayjettyMatch6.1.0rc1
ORmortbayjettyMatch6.1.0rc2
ORmortbayjettyMatch6.1.0rc3
ORmortbayjettyMatch6.1.1
ORmortbayjettyMatch6.1.1rc0
ORmortbayjettyMatch6.1.2
ORmortbayjettyMatch6.1.2pre0
ORmortbayjettyMatch6.1.2pre1
ORmortbayjettyMatch6.1.2rc0
ORmortbayjettyMatch6.1.2rc1
ORmortbayjettyMatch6.1.2rc2
ORmortbayjettyMatch6.1.2rc3
ORmortbayjettyMatch6.1.2rc4
ORmortbayjettyMatch6.1.2rc5
ORmortbayjettyMatch6.1.3
ORmortbayjettyMatch6.1.4
ORmortbayjettyMatch6.1.4rc0
ORmortbayjettyMatch6.1.4rc1
ORmortbayjettyMatch6.1.5
ORmortbayjettyMatch6.1.5rc0
ORmortbayjettyMatch6.1.6
ORmortbayjettyMatch6.1.6rc0
ORmortbayjettyMatch6.1.6rc1
ORmortbayjettyMatch6.1.7
ORmortbayjettyMatch6.1.8
ORmortbayjettyMatch6.1.9
ORmortbayjettyMatch6.1.10
ORmortbayjettyMatch6.1.11
ORmortbayjettyMatch6.1.12
ORmortbayjettyMatch6.1.12rc1
ORmortbayjettyMatch6.1.12rc2
ORmortbayjettyMatch6.1.12rc3
ORmortbayjettyMatch6.1.12rc4
ORmortbayjettyMatch6.1.12rc5
ORmortbayjettyMatch6.1.14
ORmortbayjettyMatch6.1.15
ORmortbayjettyMatch6.1.15pre0
ORmortbayjettyMatch6.1.15rc2
ORmortbayjettyMatch6.1.15rc3
ORmortbayjettyMatch6.1.15rc4
ORmortbayjettyMatch6.1.15rc5
ORmortbayjettyMatch6.1.16
ORmortbayjettyMatch6.1.19
ORmortbayjettyMatch6.1.20
ORmortbayjettyMatch7.0.0
Related
ubuntucve
ubuntucve
CVE-2009-4610
2010-01-13 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2019-03-25 08:40:43
nvd
nvd
CVE-2009-4610
2010-01-13 20:30:00
prion
prion
Cross site scripting
2010-01-13 20:30:00
cvelist
cvelist
CVE-2009-4610
2022-10-03 16:24:04
openvas
openvas
Mort Bay Jetty 6.0.0 - 7.0.0 Multiple Vulnerabilities - Active Check
2010-02-02 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
45.9%
Related for CVE-2009-4610