Jersey

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-12383 Nov 18, 16:15 Maven CRITICAL PATCH Act Now

In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and other security. Rated critical severity (CVSS 9.4), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Authentication Bypass Race Condition Jersey Eclipse

NVD

CVSS 4.0

9.4

EPSS

0.1%

CVE-2021-28168 Apr 22, 18:15 Maven MEDIUM PATCH This Month

Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Oracle Jersey Communications Cloud Native Core Unified Data Repository Communications Cloud Native Core Policy +1

NVD GitHub

CVSS 3.1

5.5

EPSS

0.9%

CVE-2025-12383 Maven

EPSS 0% CVSS 9.4

CRITICAL PATCH Act Now

Authentication Bypass Race Condition Jersey +1

NVD

CVE-2021-28168 Maven

EPSS 1% CVSS 5.5

MEDIUM PATCH This Month

Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

Information Disclosure Oracle Jersey +3

NVD GitHub