Skip to main content

Eclipse

181 CVEs vendor

Monthly

CVE-2015-2080 Oct 07, 14:59 Maven HIGH POC PATCH THREAT Act Now

The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 92.4%.

Information Disclosure Fedora Jetty Eclipse Fedoraproject
NVD GitHub Exploit-DB
CVSS 3.0
7.5
EPSS
92.4%
Threat
5.8
EPSS 92% 5.8 CVSS 7.5
HIGH POC PATCH THREAT Act Now

The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 92.4%.

Information Disclosure Fedora Jetty +2
NVD GitHub Exploit-DB
Prev Page 3 of 3

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy