Maven io.undertow:undertow-core

Name: Maven io.undertow:undertow-core
Brand: Maven

productUS

pkg:maven/io.undertow/undertow-core

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

4critical12high13medium0low

updated 2026-10-28

vulnerabilities (40)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2014-7816US	medium5.0	25.1% (98th)	Exploit	1.1.0.CR5	2014-12-01	3 versions
CVE-2017-2666US	medium6.5	3.09% (88th)	Exploit	1.3.31	2018-07-27	2 versions
CVE-2025-9784US	—	2.33% (83rd)	Exploit	2.2.38.Final	2025-09-02	2 versions
CVE-2025-12543US	critical9.6	1.33% (71st)	Exploit	2.2.39.Final	2026-01-07	3 versions
CVE-2020-1745US	critical9.8	4.96% (92nd)	—	2.0.30	2020-04-28	< 2.0.30
CVE-2024-1635US	—	4.57% (92nd)	—	2.3.12.Final	2024-02-19	2 versions
CVE-2017-2670US	high7.5	3.62% (89th)	—	1.3.28	2018-07-27	< 1.3.28
CVE-2019-3888US	critical9.8	3.03% (87th)	—	2.0.21	2019-06-12	< 2.0.21
CVE-2024-5971US	—	2.92% (87th)	—	2.3.15.Final	2024-07-08	2 versions
CVE-2024-7885US	high7.5	2.64% (86th)	—	2.2.36.Final	2024-08-21	2 versions
CVE-2016-7046US	medium5.9	2.48% (85th)	—	1.3.25.Final	2016-10-03	2 versions
CVE-2018-1114US	medium6.5	2.33% (83rd)	—	1.4.25.Final	2018-09-11	2 versions
CVE-2019-14888US	high7.5	2.18% (82nd)	—	2.0.29.Final	2020-01-23	< 2.0.29.Final
CVE-2018-14642US	medium5.3	2.11% (82nd)	—	2.0.19.FINAL	2018-09-18	< 2.0.19.FINAL
CVE-2017-12196US	medium5.9OT elevated	2.01% (81st)	—	1.4.24.Final	2018-04-18	2 versions
CVE-2017-7559US	medium6.1	1.91% (80th)	—	1.4.17.Final	2018-01-10	3 versions
CVE-2019-10212US	critical9.8	1.89% (80th)	—	2.0.20	2019-10-02	< 2.0.20
CVE-2024-3653US	—	1.87% (79th)	—	2.2.34.Final	2024-07-08	2 versions
CVE-2017-12165US	high7.5	1.86% (79th)	—	1.4.17	2018-07-27	3 versions
CVE-2021-3690US	high7.5	1.77% (78th)	—	2.2.10	2022-08-23	2 versions
CVE-2023-1108US	high7.5	1.77% (78th)	—	2.2.24.Final	2023-09-14	2 versions
CVE-2021-3859US	high7.5	1.74% (78th)	—	2.2.15	2022-08-26	< 2.2.15
CVE-2024-1459US	medium5.3	1.71% (77th)	—	2.3.12.Final	2024-02-12	2 versions
CVE-2024-6162US	—	1.70% (77th)	—	2.2.33.Final	2024-06-20	2 versions
CVE-2020-1757US	high8.1	1.62% (76th)	—	2.1.0	2020-04-21	< 2.1.0
CVE-2020-27782US	high7.5	1.38% (72nd)	—	2.0.33	2021-02-23	2 versions
CVE-2024-3884US	—	1.36% (72nd)	—	2.4.0.Beta1	2025-12-03	3 versions
CVE-2021-3629US	medium5.9	1.32% (71st)	—	2.0.40.Final	2022-05-24	2 versions
CVE-2023-1973US	—	1.28% (70th)	—	2.2.32.Final	2024-11-07	2 versions
CVE-2020-10687US	medium4.8	1.23% (69th)	—	2.2.0.Final	2020-09-23	< 2.2.0.Final
CVE-2020-10705US	high7.5	1.22% (69th)	—	2.1.1.Final	2020-06-10	< 2.1.1.Final
CVE-2021-20220US	medium4.8	1.20% (68th)	—	2.0.34	2021-02-23	2 versions
CVE-2021-3597US	medium5.9	1.16% (67th)	—	2.0.39.Final	2022-05-24	2 versions
CVE-2022-2053US	high7.5	1.09% (65th)	—	2.3.0.Alpha2	2022-08-05	2 versions
CVE-2023-4639US	—	1.09% (65th)	—	2.2.30.Final	2024-11-17	2 versions
CVE-2020-10719US	medium6.5	1.00% (63rd)	—	2.1.1.Final	2020-05-26	< 2.1.1.Final
CVE-2022-4492US	high7.5	0.60% (48th)	—	2.3.5.Final	2023-02-23	2 versions
CVE-2024-4027US	—	0.40% (34th)	—	2.2.39.Final	2026-01-30	3 versions
CVE-2026-3260US	—	—	—	no fix	2026-03-24	—
CVE-2024-4109US	—	—	—	no fix	2024-12-12	≤ 2.3.18.Final

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-400Uncontrolled Resource Consumption10 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')7 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-770Allocation of Resources Without Limits or Throttling4 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')3 CVEs
CWE-401Missing Release of Memory after Effective Lifetime2 CVEs
CWE-404Improper Resource Shutdown or Release2 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev40 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan