CVE-2021-28165
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
Published:Apr 1, 2021
Last Modified:Aug 27, 2025
EPS:Apr 1, 2021
EPSS Score:0.10227
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Eclipse
Product
Jetty
Eclipse
Jetty
Vendor
Jenkins
Product
Jenkins
Jenkins
Jenkins
Vendor
Netapp
Product
Cloud Manager
Netapp
Cloud Manager
Vendor
Netapp
Product
E-series Performance Analyzer
Netapp
E-series Performance Analyzer
Vendor
Netapp
Product
E-series Santricity Os Controller
Netapp
E-series Santricity Os Controller
Vendor
Netapp
Product
E-series Santricity Storage
Netapp
E-series Santricity Storage
Vendor
Netapp
Product
E-series Santricity Web Services
Netapp
E-series Santricity Web Services
Vendor
Netapp
Product
Ontap Tools
Netapp
Ontap Tools
Vendor
Netapp
Product
Santricity Cloud Connector
Netapp
Santricity Cloud Connector
Vendor
Netapp
Product
Santricity Web Services Proxy
Netapp
Santricity Web Services Proxy
Vendor
Netapp
Product
Snapcenter
Netapp
Snapcenter
Vendor
Netapp
Product
Storage Replication Adapter For Clustered Data Ontap
Netapp
Storage Replication Adapter For Clustered Data Ontap
Vendor
Netapp
Product
Vasa Provider For Clustered Data Ontap
Netapp
Vasa Provider For Clustered Data Ontap
Vendor
Oracle
Product
Autovue For Agile Product Lifecycle Management
Oracle
Autovue For Agile Product Lifecycle Management
Vendor
Oracle
Product
Communications Cloud Native Core Policy
Oracle
Communications Cloud Native Core Policy
Vendor
Oracle
Product
Communications Element Manager
Oracle
Communications Element Manager
Vendor
Oracle
Product
Communications Services Gatekeeper
Oracle
Communications Services Gatekeeper
Vendor
Oracle
Product
Communications Session Report Manager
Oracle
Communications Session Report Manager
Vendor
Oracle
Product
Communications Session Route Manager
Oracle
Communications Session Route Manager
Vendor
Oracle
Product
Rest Data Services
Oracle
Rest Data Services
Vendor
Oracle
Product
Siebel Core - Automation
Oracle
Siebel Core - Automation
Vendor
Redhat
Product
Amq Broker
Redhat
Amq Broker
Vendor
Redhat
Product
Amq Streams
Redhat
Amq Streams
Vendor
Redhat
Product
Camel Quarkus
Redhat
Camel Quarkus
Vendor
Redhat
Product
Devtools
Redhat
Devtools
Vendor
Redhat
Product
Integration
Redhat
Integration
Vendor
Redhat
Product
Jboss Fuse
Redhat
Jboss Fuse
Vendor
Redhat
Product
Openshift
Redhat
Openshift
Exploits
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
