CVE-2015-2080

The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal…

published October 7, 2016

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
75%
Percentile
99.5
In the wild
Unconfirmed
What it is

The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.75441 · 99.5th percentile
Published
2016-10-07T14:00Z
EPSS history
Timeline
  • 22 SEP 03:11Z
    EPSS moved 75% → 63%
    epss
  • 06 SEP 03:08Z
    EPSS moved 75% → 62%
    epss
  • 30 AUG 15:29Z
    EPSS moved 62% → 75%
    epss
  • 29 AUG 04:02Z
    EPSS moved 75% → 62%
    epss
  • 07 OCT 14:00Z
    The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal…
    cvelistv5