Skip to content

Vulnerabilities of n/a Undertow

Is your version affected?

CVE Summary Score Published
CVE-2022-4492 The undertow client is not checking the server identity presented by the server certificate in https connections Not rated Feb 23, 2023
CVE-2022-2764 A flaw was found in Undertow Not rated Sep 1, 2022
CVE-2022-1259 A flaw was found in Undertow Not rated Aug 31, 2022
CVE-2022-1319 A flaw was found in Undertow Not rated Aug 31, 2022
CVE-2021-3859 A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2 Not rated Aug 26, 2022
CVE-2021-3690 A flaw was found in Undertow Not rated Aug 23, 2022
CVE-2022-2053 When a POST request comes through AJP and the request exceeds the max-post-size limit (maxEntitySize), Undertow's… Not rated Aug 5, 2022
CVE-2021-3597 A flaw was found in undertow Not rated May 24, 2022
CVE-2021-3629 A flaw was found in Undertow Not rated May 24, 2022
CVE-2019-19343 A flaw was found in Undertow when using Remoting as shipped in Red Hat Jboss EAP before version 7.2.4 Not rated Mar 23, 2021
CVE-2020-27782 A flaw was found in the Undertow AJP connector Not rated Feb 23, 2021
CVE-2021-20220 A flaw was found in Undertow Not rated Feb 23, 2021
CVE-2020-10687 A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to… Not rated Sep 23, 2020
CVE-2020-10705 A flaw was discovered in Undertow in versions before Undertow 2.1.1.Final where certain requests to the "Expect:… Not rated Jun 10, 2020

Other n/a products