Known vulnerabilities in Undertow 2.0.7

Software: Undertow
Version: 2.0.7
Software CPE: cpe:2.3:a:red_hat:undertow:*:*:*:*:*:wildfly_core:*:*
Total vulnerabilities: 25
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Undertow version 2.0.7 Undertow 2.0.7 is affected by 25 vulnerabilities: 1 high, 21 medium, 3 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112160 - Allocation of Resources Without Limits or Throttling
CVE-2023-5379
CWE-770 Medium
No
No
2.2.31 03.07.2025 SB20231212125
SB2025070404
SB20241108113
#VU101669 - Resource Management Errors
CVE-2024-4109
CWE-399 Medium
No
No
2.2.38, 2.3.19 11.12.2024 SB2024121157
SB2024122040
#VU96900 - Exposure of sensitive information to an unauthorized actor
CVE-2024-7885
CWE-200 Medium
No
No
2.3.17 05.09.2024 SB2024090598
SB2024090599
SB2024092018
and 16 more
#VU93103 - Resource exhaustion
CVE-2023-5685
CWE-400 Medium
No
No
2.2.33, 2.3.14 24.06.2024 SB2024062414
SB2024062415
SB2024062425
and 14 more
#VU93102 - Improper input validation
CVE-2024-6162
CWE-20 Medium
No
No
2.2.33, 2.3.14 24.06.2024 SB2024062415
SB2024071878
SB2024071881
and 6 more
#VU88156 - Resource exhaustion
CVE-2023-1973
CWE-400 Medium
No
No
2.2.31, 2.3.12 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 5 more
#VU88155 - Improper input validation
CVE-2023-4639
CWE-20 Medium
No
No
2.2.31, 2.3.12 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 5 more
#VU88154 - Resource exhaustion
CVE-2024-1635
CWE-400 Medium
No
No
2.2.31, 2.3.12 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 8 more
#VU88153 - Resource exhaustion
CVE-2024-27316
CWE-400 Medium
Public exploit available
No
2.2.33, 2.3.14 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU73219 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-1108
CWE-835 Medium
No
No
- 10.03.2023 SB2023031005
SB2023031008
SB2023031009
and 15 more
#VU69919 - Resource Management Errors
CVE-2022-2764
CWE-399 Medium
No
No
2.2.21, 2.3.0 06.12.2022 SB2022120605
SB2022120615
SB2022120616
and 7 more
#VU67947 - Resource exhaustion
CVE-2022-1259
CWE-400 Medium
No
No
- 05.10.2022 SB2022100552
SB2022100557
SB2022100558
and 4 more
#VU58177 - Resource exhaustion
CVE-2021-3629
CWE-400 Medium
No
No
2.0.40, 2.2.11 16.11.2021 SB2021111607
SB2021111715
SB2022090932
and 5 more
#VU56025 - Missing release of memory after effective lifetime
CVE-2021-3690
CWE-401 Medium
No
No
2.2.10 22.08.2021 SB2021082203
SB2022042263
SB2021121542
and 1 more
#VU51518 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-20220
CWE-444 Medium
No
No
2.0.34, 2.1.6, 2.2.0 17.03.2021 SB2021031703
SB2021031707
SB2021032323
#VU51517 - Resource exhaustion
CVE-2020-27782
CWE-400 Medium
No
No
2.0.34, 2.1.6, 2.2.4 17.03.2021 SB2021031702
SB2021121542
#VU51516 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10687
CWE-444 Medium
No
No
2.2.0 17.03.2021 SB2020092345
SB2021031707
SB2021032323
#VU28497 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10719
CWE-444 Medium
No
No
2.1.1 02.06.2020 SB2020060201
SB2021110530
#VU27296 - Improper input validation
CVE-2020-1757
CWE-20 Medium
No
No
2.1.0 23.04.2020 SB2020042376
#VU26052 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-1745
CWE-22 High
No
No
2.0.30 13.03.2020 SB2020031301
SB2020031302
SB2020032334


Showing elements 1 - 20 out of 25