Known vulnerabilities in Undertow - page 2

Software: Undertow
Software CPE: cpe:2.3:a:red_hat:undertow:*:*:*:*:*:wildfly_core:*:*
Total vulnerabilities: 40
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Undertow Undertow is affected by 40 known vulnerabilities: 1 high, 35 medium, 4 low Critical High Medium Low

Vulnerabilities (40)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66672 - Resource exhaustion
CVE-2022-2053
CWE-400 Medium
No
No
2.2.19, 2.3.0 Alpha2 22.08.2022 SB2022082204
SB2022082205
SB2022100557
and 7 more
#VU60243 - Resource Management Errors
CVE-2021-3859
CWE-399 Medium
No
No
2.2.14 02.02.2022 SB2022020210
SB2022020326
SB2022020327
and 4 more
#VU58177 - Resource exhaustion
CVE-2021-3629
CWE-400 Medium
No
No
2.0.40, 2.2.11 16.11.2021 SB2021111607
SB2021111715
SB2022090932
and 5 more
#VU56025 - Missing release of memory after effective lifetime
CVE-2021-3690
CWE-401 Medium
No
No
2.2.10 22.08.2021 SB2021082203
SB2022042263
SB2021121542
and 1 more
#VU51519 - Missing release of memory after effective lifetime
CVE-2020-10705
CWE-401 Medium
No
No
2.1.1 17.03.2021 SB2020061075
SB2021110530
#VU51518 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-20220
CWE-444 Medium
No
No
2.0.34, 2.1.6, 2.2.0 17.03.2021 SB2021031703
SB2021031707
SB2021032323
#VU51517 - Resource exhaustion
CVE-2020-27782
CWE-400 Medium
No
No
2.0.34, 2.1.6, 2.2.4 17.03.2021 SB2021031702
SB2021121542
#VU51516 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10687
CWE-444 Medium
No
No
2.2.0 17.03.2021 SB2020092345
SB2021031707
SB2021032323
#VU28497 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10719
CWE-444 Medium
No
No
2.1.1 02.06.2020 SB2020060201
SB2021110530
#VU27296 - Improper input validation
CVE-2020-1757
CWE-20 Medium
No
No
2.1.0 23.04.2020 SB2020042376
#VU26052 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-1745
CWE-22 High
No
No
2.0.30 13.03.2020 SB2020031301
SB2020031302
SB2020032334
#VU25486 - Resource Management Errors
CVE-2019-14888
CWE-399 Medium
No
No
2.0.29 20.02.2020 SB2020012312
SB2020030521
#VU21469 - Information Exposure Through Log Files
CVE-2019-10212
CWE-532 Low
No
No
2.0.21 01.10.2019 SB2019100116
SB2019100117
SB2019100118
and 4 more
#VU20070 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2014-7816
CWE-22 Low
Available
No
1.0.17 13.08.2019 SB2014120101
#VU20069 - Missing release of memory after effective lifetime
CVE-2018-1114
CWE-401 Medium
No
No
2.0.5 13.08.2019 SB2018091111
SB2018091126
#VU20068 - Exposure of sensitive information to an unauthorized actor
CVE-2018-14642
CWE-200 Medium
No
No
2.0.19 13.08.2019 SB2018091807
SB2019050926
#VU20067 - Exposure of sensitive information to an unauthorized actor
CVE-2019-10184
CWE-200 Low
No
No
2.0.23 13.08.2019 SB2019100116
SB2019100117
SB2019100118
and 4 more
#VU20066 - Cleartext Storage of Sensitive Information
CVE-2019-3888
CWE-312 Low
No
No
2.0.21 13.08.2019 SB2019081308
SB2019101007
SB2020032701
and 1 more
#VU7548 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2017-2666
CWE-113 Medium
No
No
- 17.07.2017 SB2017071216
SB2017060813
SB2018050312
and 1 more
#VU7547 - Resource Management Errors
CVE-2017-2670
CWE-399 Medium
No
No
- 12.07.2017 SB2017071216
SB2017060813
SB2017060710


Showing elements 21 - 40 out of 40