CVE Feed

    Dashboard / CVE / CVE-2021-28165

    CVE-2021-28165

    In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.

    Published:Apr 1, 2021
    Last Modified:Aug 27, 2025
    EPS:Apr 1, 2021
    EPSS Score:0.10227
    CVSS Score:7.5

    Affected Products

    Vendor
    Eclipse
    Product
    Jetty
    Vendor
    Jenkins
    Product
    Jenkins
    Vendor
    Netapp
    Product
    Cloud Manager
    Vendor
    Netapp
    Product
    E-series Performance Analyzer
    Vendor
    Netapp
    Product
    E-series Santricity Os Controller
    Vendor
    Netapp
    Product
    E-series Santricity Storage
    Vendor
    Netapp
    Product
    E-series Santricity Web Services
    Vendor
    Netapp
    Product
    Ontap Tools
    Vendor
    Netapp
    Product
    Santricity Cloud Connector
    Vendor
    Netapp
    Product
    Santricity Web Services Proxy
    Vendor
    Netapp
    Product
    Snapcenter
    Vendor
    Netapp
    Product
    Storage Replication Adapter For Clustered Data Ontap
    Vendor
    Netapp
    Product
    Vasa Provider For Clustered Data Ontap
    Vendor
    Oracle
    Product
    Autovue For Agile Product Lifecycle Management
    Vendor
    Oracle
    Product
    Communications Cloud Native Core Policy
    Vendor
    Oracle
    Product
    Communications Element Manager
    Vendor
    Oracle
    Product
    Communications Services Gatekeeper
    Vendor
    Oracle
    Product
    Communications Session Report Manager
    Vendor
    Oracle
    Product
    Communications Session Route Manager
    Vendor
    Oracle
    Product
    Rest Data Services
    Vendor
    Oracle
    Product
    Siebel Core - Automation
    Vendor
    Redhat
    Product
    Amq Broker
    Vendor
    Redhat
    Product
    Amq Streams
    Vendor
    Redhat
    Product
    Camel Quarkus
    Vendor
    Redhat
    Product
    Devtools
    Vendor
    Redhat
    Product
    Integration
    Vendor
    Redhat
    Product
    Jboss Fuse
    Vendor
    Redhat
    Product
    Openshift

    Related CVEs

    References

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High