CVE Feed

    Dashboard / CVE / CVE-2020-27223

    CVE-2020-27223

    In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values.

    Published:Feb 26, 2021
    Last Modified:Aug 20, 2025
    EPS:Feb 26, 2021
    EPSS Score:0.28074
    CVSS Score:5.2

    Affected Products

    Vendor
    Apache
    Product
    Nifi
    Vendor
    Apache
    Product
    Solr
    Vendor
    Apache
    Product
    Spark
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Eclipse
    Product
    Jetty
    Vendor
    Netapp
    Product
    E-series Santricity Os Controller
    Vendor
    Netapp
    Product
    E-series Santricity Web Services
    Vendor
    Netapp
    Product
    Element Plug-in For Vcenter Server
    Vendor
    Netapp
    Product
    Hci
    Vendor
    Netapp
    Product
    Hci Management Node
    Vendor
    Netapp
    Product
    Management Services For Element Software
    Vendor
    Netapp
    Product
    Snap Creator Framework
    Vendor
    Netapp
    Product
    Snapcenter
    Vendor
    Netapp
    Product
    Snapmanager
    Vendor
    Netapp
    Product
    Solidfire
    Vendor
    Oracle
    Product
    Rest Data Services
    Vendor
    Redhat
    Product
    Amq Broker
    Vendor
    Redhat
    Product
    Camel Quarkus
    Vendor
    Redhat
    Product
    Integration
    Vendor
    Redhat
    Product
    Jboss Fuse
    Vendor
    Redhat
    Product
    Openshift
    Vendor
    Redhat
    Product
    Rhmt

    Related CVEs

    References

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High