PT-2024-28235

🗓️ 17 Nov 2024 00:00:00Reported by Positive TechnologiesType

Spring MVC DoS in controller methods using an @RequestBody byte[] parameter; affected versions are unspecified and no fix information is available.

Reporter	Title	Published	Views	Family All 719
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM DevOps Solution Workbench	30 Oct 202520:15	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerability in Spring MVC affects IBM Sterling B2B Integrator and IBM Sterling File Gateway (CVE-2024-38828)	27 Aug 202622:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in spring-webmvc-5.3.27.jar	10 Jul 202508:59	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale and the HDFS layer are now addressed in 5.2.3.8 or higher and 6.0.1.1 or higher	13 Aug 202616:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager - Multiple CVEs addressed related to SOLR and its dependencies (such as Jetty) affecting ODM-9.0.0 and older versions	19 Jun 202620:46	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	3 Jun 202511:35	–	ibm
IBM Security Bulletins	Security Bulletin: MongoDB Enterprised Advanced affected by: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') (CVE-2026-2332)	16 Jun 202614:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilites in IBM Rational Build Forge.	2 Mar 202608:30	–	ibm
IBM Security Bulletins	Security Bulletin: Rational Test Virtualization Server and Rational Test Workbench are vulnerable to denial of service due to Spring MVC (CVE-2024-38828)	21 Mar 202518:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Sterling Connect:Direct for Microsoft Windows is vulnerable to issues in Jetty	3 Jun 202615:30	–	ibm

Source	Link
osv	www.osv.dev/vulnerability/ROOT-APP-MAVEN-CVE-2024-38828
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-34477
t	www.t.me/cvenotify/101948
osv	www.osv.dev/vulnerability/ghsa-3pxv-7cmr-fjr4
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-6763
osv	www.osv.dev/vulnerability/CVE-2025-11143
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-11143
osv	www.osv.dev/vulnerability/GHSA-w3c8-7r8f-9jp8
osv	www.osv.dev/vulnerability/UBUNTU-CVE-2024-38828
osv	www.osv.dev/vulnerability/ghsa-x96m-rh44-vgv8

01 Oct 2026 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.15.3 - 9.1

EPSS0.01305

SSVC