undertow-io vulnerabilities

2 published CVEs name undertow-io among the affected products.

All 2 in the list Atom feed of new CVEs

Published CVEs: 2
Last 12 months: 0
Critical: 0
Known exploited: 0

Critical 0High 1Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

20191
20201

Newest CVEs

CVE-2020-1745
A file inclusion vulnerability was found in the AJP connector enabled with a default AJP configuration port of 8009 in Undertow version 2.0.29.Final and before…
undertow-io · undertow
High8.6
CVE-2019-10184
undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests…
undertow-io · undertow
Medium5.3

Products with the most CVEs

undertow2

Most common weaknesses