CVE-2009-5049: Debian LinuxMedium severity, CVSS 6.1. EPSS: 1.6% chance of exploitation in the next 30 days.WebApp JSP Snoop page XSS in jetty though 6.1.21.Affected productsDebian Debian Linux: version 8.0 onlyMortbay Jetty: up to and including 6.1.21Published 2019-11-06. Last modified 2026-06-16.