CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2022-1259
High (7.5). EPSS 1.4% chance of exploitation in the next 30 days.
A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
- CWE
- CWE-400
- Published
- Modified
- Record from
- the NVD, synced
Affected
- netapp:active_iq_unified_manager
- netapp:cloud_secure_agent
- netapp:oncommand_insight
- netapp:oncommand_workflow_automation
- redhat:build_of_quarkus
- redhat:integration_camel_k
- redhat:jboss_enterprise_application_platform
- redhat:openshift_application_runtimes
- redhat:single_sign-on
- redhat:undertow