CVE-2022-1259
A flaw was found in Undertow. A potential security issue in flow control handling by the browser...
7.5 High
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
1.39%Up 0.5 points since Sep 1, 2022
What each source reports
NVD Score used
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
- Record
CVE-2022-1259- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
CVE List No score
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
- Record
CVE-2022-1259- Weakness
- CWE-400
- Updated
- 2026-11-02
EUVDEUVD-2022-24592 No score
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
- Record
EUVD-2022-24592- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5837-3xvj-5g8r
A flaw was found in Undertow. A potential security issue in flow control handling by the browser...
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
- Record
GHSA-5837-3xvj-5g8r- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-400
- Updated
- 2026-11-02
OSVRHSA-2022:6821
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update
- Record
RHSA-2022:6821- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2022:6822
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update
- Record
RHSA-2022:6822- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 5 moreShow less
OSVRHSA-2022:6823
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update
- Record
RHSA-2022:6823- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:9582
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.11 on RHEL 7 security update
- Record
RHSA-2025:9582- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
OSVRHSA-2025:9583
Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.14 Security update
- Record
RHSA-2025:9583- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-1259
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
- Record
UBUNTU-CVE-2022-1259- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSV No score
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
- Record
CVE-2022-1259- Weakness
- CWE-400
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 3 CVEs |
before 0:2.2.19-1.SP2_redhat_00001.1.el7eap | 0:2.2.19-1.SP2_redhat_00001.1.el7eap |
eap7-snakeyamlRed Hat:jboss_enterprise_application_platform:7.4::el7 From an advisory covering 3 CVEs |
before 0:1.31.0-1.redhat_00001.1.el7eap | 0:1.31.0-1.redhat_00001.1.el7eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:2.2.19-1.SP2_redhat_00001.1.el8eap | 0:2.2.19-1.SP2_redhat_00001.1.el8eap |
eap7-snakeyamlRed Hat:jboss_enterprise_application_platform:7.4::el8 From an advisory covering 3 CVEs |
before 0:1.31.0-1.redhat_00001.1.el8eap | 0:1.31.0-1.redhat_00001.1.el8eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:2.2.19-1.SP2_redhat_00001.1.el9eap | 0:2.2.19-1.SP2_redhat_00001.1.el9eap |
eap7-snakeyamlRed Hat:jboss_enterprise_application_platform:7.4::el9 From an advisory covering 3 CVEs |
before 0:1.31.0-1.redhat_00001.1.el9eap | 0:1.31.0-1.redhat_00001.1.el9eap |
eap7-glassfish-elRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:3.0.1-4.b08_redhat_00005.1.ep7.el7 | 0:3.0.1-4.b08_redhat_00005.1.ep7.el7 |
eap7-glassfish-el-implRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:3.0.1-4.b08_redhat_00005.1.ep7.el7 | 0:3.0.1-4.b08_redhat_00005.1.ep7.el7 |
eap7-hibernateRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 | 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 |
eap7-hibernate-coreRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 | 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 |
Show 73 moreShow less
| Package | Affected | Fixed |
|---|---|---|
eap7-hibernate-entitymanagerRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 | 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 |
eap7-hibernate-enversRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 | 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 |
eap7-hibernate-infinispanRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 | 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 |
eap7-hibernate-java8Red Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 | 0:5.1.17-3.Final_redhat_00004.1.ep7.el7 |
eap7-jackson-databindRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:2.8.11.6-3.SP1_redhat_00003.1.ep7.el7 | 0:2.8.11.6-3.SP1_redhat_00003.1.ep7.el7 |
eap7-jboss-ejb-clientRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:4.0.12-1.Final_redhat_00002.1.ep7.el7 | 0:4.0.12-1.Final_redhat_00002.1.ep7.el7 |
eap7-nettyRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:4.1.63-2.Final_redhat_00003.1.ep7.el7 | 0:4.1.63-2.Final_redhat_00003.1.ep7.el7 |
eap7-netty-allRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:4.1.63-2.Final_redhat_00003.1.ep7.el7 | 0:4.1.63-2.Final_redhat_00003.1.ep7.el7 |
eap7-undertowRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:1.4.18-16.SP14_redhat_00001.1.ep7.el7 | 0:1.4.18-16.SP14_redhat_00001.1.ep7.el7 |
eap7-wildflyRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:7.1.11-4.GA_redhat_00002.1.ep7.el7 | 0:7.1.11-4.GA_redhat_00002.1.ep7.el7 |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:1.1.14-1.Final_redhat_00001.1.ep7.el7 | 0:1.1.14-1.Final_redhat_00001.1.ep7.el7 |
eap7-wildfly-http-clientRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 | 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 |
eap7-wildfly-http-client-commonRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 | 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 |
eap7-wildfly-http-ejb-clientRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 | 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 |
eap7-wildfly-http-naming-clientRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 | 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 |
eap7-wildfly-http-transaction-clientRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 | 0:1.0.21-1.Final_redhat_00001.1.ep7.el7 |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:7.1.11-4.GA_redhat_00002.1.ep7.el7 | 0:7.1.11-4.GA_redhat_00002.1.ep7.el7 |
eap7-wildfly-naming-clientRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:1.0.13-1.Final_redhat_00001.1.ep7.el7 | 0:1.0.13-1.Final_redhat_00001.1.ep7.el7 |
eap7-wildfly-opensslRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:1.0.12-1.Final_redhat_00001.1.ep7.el7 | 0:1.0.12-1.Final_redhat_00001.1.ep7.el7 |
eap7-wildfly-openssl-javaRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:1.0.12-1.Final_redhat_00001.1.ep7.el7 | 0:1.0.12-1.Final_redhat_00001.1.ep7.el7 |
eap7-wildfly-openssl-linuxRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:1.0.12-6.Final_redhat_00001.1.ep7.el7 | 0:1.0.12-6.Final_redhat_00001.1.ep7.el7 |
eap7-wildfly-openssl-linux-debuginfoRed Hat:jboss_enterprise_application_platform_eus:7.1::el7 From an advisory covering 14 CVEs |
before 0:1.0.12-6.Final_redhat_00001.1.ep7.el7 | 0:1.0.12-6.Final_redhat_00001.1.ep7.el7 |
eap7-jackson-annotationsRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:2.10.4-3.redhat_00006.1.el7eap | 0:2.10.4-3.redhat_00006.1.el7eap |
eap7-jackson-coreRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:2.10.4-3.redhat_00006.1.el7eap | 0:2.10.4-3.redhat_00006.1.el7eap |
eap7-jackson-databindRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:2.10.4-5.redhat_00006.1.el7eap | 0:2.10.4-5.redhat_00006.1.el7eap |
eap7-jackson-datatype-jdk8Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:2.10.4-2.redhat_00006.1.el7eap | 0:2.10.4-2.redhat_00006.1.el7eap |
eap7-jackson-datatype-jsr310Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:2.10.4-2.redhat_00006.1.el7eap | 0:2.10.4-2.redhat_00006.1.el7eap |
eap7-jackson-jaxrs-baseRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:2.10.4-3.redhat_00006.1.el7eap | 0:2.10.4-3.redhat_00006.1.el7eap |
eap7-jackson-jaxrs-json-providerRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:2.10.4-3.redhat_00006.1.el7eap | 0:2.10.4-3.redhat_00006.1.el7eap |
eap7-jackson-jaxrs-providersRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:2.10.4-3.redhat_00006.1.el7eap | 0:2.10.4-3.redhat_00006.1.el7eap |
eap7-jackson-module-jaxb-annotationsRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:2.10.4-5.redhat_00006.1.el7eap | 0:2.10.4-5.redhat_00006.1.el7eap |
eap7-jackson-modules-baseRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:2.10.4-5.redhat_00006.1.el7eap | 0:2.10.4-5.redhat_00006.1.el7eap |
eap7-jackson-modules-java8Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:2.10.4-2.redhat_00006.1.el7eap | 0:2.10.4-2.redhat_00006.1.el7eap |
eap7-jboss-server-migrationRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-cliRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-coreRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-eap6.4Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-eap6.4-to-eap7.3Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-eap7.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-eap7.1Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-eap7.2Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-eap7.2-to-eap7.3Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-eap7.3-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-wildfly10.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-wildfly10.1Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-wildfly11.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-wildfly12.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-wildfly13.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-wildfly14.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-wildfly15.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-wildfly16.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-wildfly17.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-wildfly18.0-serverRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-wildfly8.2Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-jboss-server-migration-wildfly9.0Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.7.2-16.Final_redhat_00017.1.el7eap | 0:1.7.2-16.Final_redhat_00017.1.el7eap |
eap7-nettyRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:4.1.63-5.Final_redhat_00003.1.el7eap | 0:4.1.63-5.Final_redhat_00003.1.el7eap |
eap7-netty-allRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:4.1.63-5.Final_redhat_00003.1.el7eap | 0:4.1.63-5.Final_redhat_00003.1.el7eap |
eap7-undertowRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:2.0.41-4.SP5_redhat_00001.1.el7eap | 0:2.0.41-4.SP5_redhat_00001.1.el7eap |
eap7-wildflyRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:7.3.14-3.GA_redhat_00002.1.el7eap | 0:7.3.14-3.GA_redhat_00002.1.el7eap |
eap7-wildfly-elytronRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.10.17-1.Final_redhat_00001.1.el7eap | 0:1.10.17-1.Final_redhat_00001.1.el7eap |
eap7-wildfly-elytron-toolRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:1.10.17-1.Final_redhat_00001.1.el7eap | 0:1.10.17-1.Final_redhat_00001.1.el7eap |
eap7-wildfly-java-jdk11Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:7.3.14-3.GA_redhat_00002.1.el7eap | 0:7.3.14-3.GA_redhat_00002.1.el7eap |
eap7-wildfly-java-jdk8Red Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:7.3.14-3.GA_redhat_00002.1.el7eap | 0:7.3.14-3.GA_redhat_00002.1.el7eap |
eap7-wildfly-javadocsRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:7.3.14-3.GA_redhat_00002.1.el7eap | 0:7.3.14-3.GA_redhat_00002.1.el7eap |
eap7-wildfly-modulesRed Hat:jboss_enterprise_application_platform_eus:7.3::el7 From an advisory covering 14 CVEs |
before 0:7.3.14-3.GA_redhat_00002.1.el7eap | 0:7.3.14-3.GA_redhat_00002.1.el7eap |
undertowUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.3.4-11.3.5-11.3.7-11.3.11-11.3.16-11.3.16-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.4.20-11.4.21-11.4.22-11.4.23-11.4.23-2build11.4.23-31.4.23-3ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2.0.23-12.0.27-12.0.28-12.0.29-12.0.29-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 2.2.8-12.2.12-12.2.13-12.2.14-12.2.16-12.2.16-1ubuntu0.1~esm1 |
None known |
undertowUbuntu:Pro:24.04:LTS |
All versions, plus listed versions 2.3.8-22.3.8-2ubuntu0.1~esm1 |
None known |
undertowUbuntu:25.10 |
All versions, plus listed versions 2.3.18-12.3.18-2 |
None known |
undertowUbuntu:26.10 |
All versions, plus listed versions 2.3.20-1ubuntu1 |
None known |
undertowUbuntu:26.04:LTS |
All versions, plus listed versions 2.3.18-22.3.20-12.3.20-1ubuntu1 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases, products | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-1259 is a high vulnerability (CVSS 7.5) in Red Hat Undertow, published August 31, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. No source names a fixed version.
References
bugzilla.redhat.com/show_bug.cgi?id=2072339
access.redhat.com/security/cve/CVE-2022-1259
security.netapp.com/advisory/ntap-20221014-0006
nvd.nist.gov/vuln/detail/CVE-2022-1259
github.com/advisories/GHSA-5837-3xvj-5g8r
Show 128 moreShow less
issues.redhat.com/browse/JBEAP-23618
security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6821.json
cve.org/CVERecord?id=CVE-2022-1259
bitbucket.org/snakeyaml/snakeyaml/issues/525
docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1
securitylab.github.com/advisories/GHSL-2020-021-jakarta-el
ubuntu.com/security/CVE-2022-1259