CyberSecBulletin

Eclipse Jetty vulnerabilities

We track 2 vulnerabilities in Eclipse Jetty products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2025.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Eclipse Jetty vulnerabilities

  • 7.5 High severity

    Eclipse Jetty: Uncontrolled Resource Consumption

    CVE-2025-5115Eclipse JettyEPSS 3.69%

    In Eclipse Jetty, versions <=9.4.57, <=10.0.25, <=11.0.25, <=12.0.21, <=12.1.0.alpha2, an HTTP/2 client may trigger the server to send RST_STREAM frames, for example by sending frames that are malformed or that should not be sent in a particular stream state,

  • 7.5 High severity

    Jetty: Uncontrolled Resource Consumption

    CVE-2024-9823Eclipse Foundation

    There exists a security vulnerability in Jetty's DosFilter which can be exploited by unauthorized users to cause remote denial-of-service (DoS) attack on the server using DosFilter. By repeatedly sending crafted requests, attackers can trigger OutofMemory erro