Lucene search

K
cvelistMitreCVELIST:CVE-2009-4612
HistoryOct 03, 2022 - 4:24 p.m.

CVE-2009-4612

2022-10-0316:24:05
mitre
www.cve.org
1
cross-site scripting
webapp
mort bay jetty

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.9%

Multiple cross-site scripting (XSS) vulnerabilities in the WebApp JSP Snoop page in Mort Bay Jetty 6.1.x through 6.1.21 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) jspsnoop/, (2) jspsnoop/ERROR/, and (3) jspsnoop/IOException/, and possibly the PATH_INFO to (4) snoop.jsp.

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.9%