The vulnerability of Eclipse Jetty servlet containers, related to uncontrolled resource consumption, allows attackers to cause service failures.

🗓️ 27 Mar 2025 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Jetty servlet containers face resource exhaustion in ThreadLimitHandler with remote service failure risk.

Reporter	Title	Published	Views	Family All 125
IBM Security Bulletins	Security Bulletin: IBM Sterling Secure Proxy is vulnerable to denial-of-service due to Jetty	1 May 202607:38	–	ibm
IBM Security Bulletins	Security Bulletin: Due to the use of jetty IBM webMethods BPM is vulnerable to multiple vulnerabilities	27 Mar 202608:06	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Eclipse Jetty, IBM Sterling Connect:Direct Web Services is affected by denial-of-service (DoS) attack.	8 Jan 202611:13	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Performance Tester contains vulnerabilities which could affect Eclipse Jetty	15 Dec 202515:11	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in jetty-server-9.4.53.v20231009.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2024-6763)	1 Apr 202510:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM EntireX through the use of webMethods Integration Server.	6 Jan 202612:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability with Eclipse Jetty, e2fsprogs, dnsjava , Apache Commons IO, Apache HTTP Server and Java SE affect IBM Cloud Object Storage Systems (Dec 2024)	4 Feb 202501:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for April 2025 - Multiple CVEs addressed	7 May 202520:48	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities exists in IBM Netezza Performance Server	21 Jul 202514:03	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities reported in Jetty server (CVE-2024-8184, CVE-2024-6763)	10 Apr 202514:14	–	ibm

Vulners

Node

red_hat red_hat_amq_brokerMatch7

red_hat red_hat_build_of_apache_camel_for_spring_bootMatch3

red_hat red_hat_build_of_apache_camel_for_spring_bootMatch4

eclipse jettyRange9.312–9.4.56

eclipse jettyRange12.0.0–12.0.9

eclipse jettyRange11.0.0–11.0.24

eclipse jettyRange10.0.0–10.0.24

red_hat red_hat_build_of_apicurio_registryMatch2

red_hat red_hat_build_of_debeziumMatch2

google android_studioMatch2025.2.3.9

gradle gradleMatch8.14.3

novell opensuse_leapMatch15.5

novell opensuse_leapMatch15.6

Source	Link
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-jetty-cve-2024-13009-cve-2024-8184-cve-2024-6762-cve-2024-6763/
github	www.github.com/jetty/jetty.project/pull/11723
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-8184
access	www.access.redhat.com/security/cve/cve-2024-8184
suse	www.suse.com/security/cve/CVE-2024-8184.html
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.13/
web	www.web.nvd.nist.gov/view/vuln/detail

10 Feb 2026 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 36.5

CVSS 26.8

EPSS0.01037