Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to issues in Jetty

🗓️ 03 Jun 2026 15:30:44Reported by IBMType

ibm🔗 www.ibm.com👁 1 Views

Security bulletin: IBM Sterling Connect:Direct for Windows has Jetty vulnerabilities CVE-2025-11143 and CVE-2026-2332 affecting 6.3.0.0–6.3.0.6_iFix050.

Reporter	Title	Published	Views	Family All 205
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Unix is impacted by Improper Input Validation vulnerability due to jetty-http.	29 May 202614:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Rational Developer for i (CVE-2026-1605, CVE-2026-29063, CVE-2025-11143, CVE-2026-2332, CVE-2025-15599, CVE-2026-0540)	27 Apr 202615:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in jetty-http (CVE-2025-11143)	28 Apr 202614:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operations Analytics - Log Analysis is affected by denial of service (DoS), server-side request forgery (SSRF) protections, leak or corrupt request data, and security by-pass due to the use of Eclipse Jetty	6 Apr 202617:40	–	ibm
IBM Security Bulletins	Security Bulletin:Jetty URI Parser Differences and Potential Security Implications	4 May 202612:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Control Center is affected by vulnerabilities in jetty-http (CVE-2026-2332)	4 May 202616:07	–	ibm
ATTACKERKB	CVE-2026-2332	14 Apr 202610:59	–	attackerkb
ATTACKERKB	CVE-2025-11143	5 Mar 202609:26	–	attackerkb
Chainguard	CVE-2025-11143 vulnerabilities	10 Mar 202607:17	–	cgr
Chainguard	CVE-2026-2332 vulnerabilities	17 Apr 202601:17	–	cgr