CVE-2022-2764

mediumpriority · track · 20EPSS 0.009 · 59 %ileDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.88% (59th) EPSS

CVSS 4.9 · medium

Is it mine?

13 products

Who says so?

4 sources

cnnvd · enisa_euvd · cert_bund · nvd

EPSS · scored 2026-10-23

A flaw was found in Undertow. Denial of service can be achieved as Undertow server waits for the LAST_CHUNK forever for EJB invocations.

cvss

Technical severity, 0–10. One row per scoring source.

4.9

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.14.9mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USexploitability 1.2 · impact 3.6

v3.14.5mediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

The CWE weakness classes this flaw belongs to.

Products and version ranges known to be affected.

Dell Data Protection Advisor <19.12 SP 1all versionscert_bundDE
Dell Data Protection Advisor< 19.12 SP 1cert_bundDE
n/a undertow≤ undertow 2.xenisa_euvdEU
netapp active iq unified managerall versionsnvdUScpe:2.3:a:netapp:active_iq_unified_manager:*:*:*:*:*:*:*:*
netapp cloud secure agentall versionsnvdUScpe:2.3:a:netapp:cloud_secure_agent:*:*:*:*:*:*:*:*
netapp oncommand insightall versionsnvdUScpe:2.3:a:netapp:oncommand_insight:*:*:*:*:*:*:*:*
netapp oncommand workflow automationall versionsnvdUScpe:2.3:a:netapp:oncommand_workflow_automation:*:*:*:*:*:*:*:*
redhat integration camel kall versionsnvdUScpe:2.3:a:redhat:integration_camel_k:*:*:*:*:*:*:*:*
redhat jboss enterprise application platform= 7.0.0nvdUScpe:2.3:a:redhat:jboss_enterprise_application_platform:*:*:*:*:*:*:*:*
redhat jboss fuse= 7.0.0nvdUScpe:2.3:a:redhat:jboss_fuse:*:*:*:*:*:*:*:*
redhat single sign-on= 7.0nvdUScpe:2.3:a:redhat:single_sign-on:*:*:*:*:*:*:*:*
redhat undertow2.0.0 → 2.2.19nvdUScpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*
redhat undertow= 2.3.0nvdUScpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*

Vendor and ecosystem advisories describing this.

WID-SEC-W-2022-2229Red Hat JBoss Enterprise Application Platform: Schwachstelle ermöglicht Denial of ServiceDeutsch2022-12-05csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat JBoss Enterprise Application Platform und Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.
WID-SEC-W-2025-1459Dell Data Protection Advisor: Mehrere SchwachstellenDeutsch2025-07-03csaf · cert_bundDE
Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Angriff durchzuführen, und um weitere nicht näher spezifizierte Angriffe durchzuführen.

Other names and identifiers for this entity.

Which sources assert this record, and when.

published 2022-09-01modified 2026-06-17

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.