Known vulnerabilities in Undertow

Software: Undertow
Software CPE: cpe:2.3:a:red_hat:undertow:*:*:*:*:*:wildfly_core:*:*
Total vulnerabilities: 40
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Undertow Undertow is affected by 40 known vulnerabilities: 1 high, 35 medium, 4 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122827 - Resource exhaustion
CVE-2024-4027
CWE-400 Medium
No
No
2.3.21 13.02.2026 SB20260213132
SB20260213134
SB20260213135
and 5 more
#VU121145 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2025-12543
CWE-644 Medium
No
No
- 10.01.2026 SB2026011002
SB2026021723
SB2026021724
and 9 more
#VU119260 - Resource exhaustion
CVE-2024-3884
CWE-400 Medium
No
No
- 08.12.2025 SB2025120817
SB2025120926
SB2025120927
and 13 more
#VU118734 - Resource exhaustion
CVE-2025-9784
CWE-400 Medium
No
No
2.2.38, 2.3.20 24.11.2025 SB2024121157
SB2025121162
SB2026021723
and 3 more
#VU112160 - Allocation of Resources Without Limits or Throttling
CVE-2023-5379
CWE-770 Medium
No
No
2.2.31 03.07.2025 SB20231212125
SB2025070404
SB20241108113
#VU101669 - Resource Management Errors
CVE-2024-4109
CWE-399 Medium
No
No
2.2.38, 2.3.19 11.12.2024 SB2024121157
SB2024122040
#VU96900 - Exposure of sensitive information to an unauthorized actor
CVE-2024-7885
CWE-200 Medium
No
No
2.3.17 05.09.2024 SB2024090598
SB2024090599
SB2024092018
and 16 more
#VU96052 - Resource exhaustion
CVE-2024-5971
CWE-400 Medium
No
No
2.2.34 15.08.2024 SB2024081548
SB2024082312
SB2024082313
and 11 more
#VU96051 - Resource exhaustion
CVE-2024-3653
CWE-400 Medium
No
No
2.2.34 15.08.2024 SB2024081548
SB2024082312
SB2024082313
and 4 more
#VU93103 - Resource exhaustion
CVE-2023-5685
CWE-400 Medium
No
No
2.2.33, 2.3.14 24.06.2024 SB2024062414
SB2024062415
SB2024062425
and 14 more
#VU93102 - Improper input validation
CVE-2024-6162
CWE-20 Medium
No
No
2.2.33, 2.3.14 24.06.2024 SB2024062415
SB2024071878
SB2024071881
and 6 more
#VU92202 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-1459
CWE-22 Medium
No
No
2.3.12 18.06.2024 SB2024040460
SB20240618107
SB2024100832
and 1 more
#VU88156 - Resource exhaustion
CVE-2023-1973
CWE-400 Medium
No
No
2.2.31, 2.3.12 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 5 more
#VU88155 - Improper input validation
CVE-2023-4639
CWE-20 Medium
No
No
2.2.31, 2.3.12 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 5 more
#VU88154 - Resource exhaustion
CVE-2024-1635
CWE-400 Medium
No
No
2.2.31, 2.3.12 04.04.2024 SB2024040460
SB2024040537
SB2024040538
and 8 more
#VU88153 - Resource exhaustion
CVE-2024-27316
CWE-400 Medium
Available
No
2.2.33, 2.3.14 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU79114 - Resource exhaustion
CVE-2023-3223
CWE-400 Medium
No
No
- 08.08.2023 SB2023080810
SB2023080815
SB2023080816
and 12 more
#VU73219 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-1108
CWE-835 Medium
No
No
- 10.03.2023 SB2023031005
SB2023031008
SB2023031009
and 15 more
#VU69919 - Resource Management Errors
CVE-2022-2764
CWE-399 Medium
No
No
2.2.21, 2.3.0 06.12.2022 SB2022120605
SB2022120615
SB2022120616
and 7 more
#VU67947 - Resource exhaustion
CVE-2022-1259
CWE-400 Medium
No
No
- 05.10.2022 SB2022100552
SB2022100557
SB2022100558
and 4 more


Showing elements 1 - 20 out of 40