CVE security advisories and vulnerability history for undertow by undertow-io.
30
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
2
Public exploits
PoC or exploit code
7.3
Avg CVSS
2018–2026
Last updated
Overview
undertow-io undertow has 30 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 2 have a known public exploit. The average CVSS base score across scored CVEs is 7.3.
This page aggregates every publicly disclosed vulnerability (CVE) affecting undertow-io undertow, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of undertow-io undertow's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical4
High17
Medium9
Low0
In CISA’s Known Exploited Vulnerabilities catalog
0
None of undertow-io undertow's CVEs are currently listed in CISA's KEV catalog.
Public exploits
2
2 of undertow-io undertow's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every undertow-io undertow version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about undertow-io undertow vulnerabilities.
How many CVEs does undertow-io undertow have?
undertow-io undertow has 30 published CVE records since 2018.
How many undertow-io undertow CVEs are in CISA KEV?
None of undertow-io undertow's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for undertow-io undertow vulnerabilities?
Yes — 2 of undertow-io undertow's CVEs have a known public exploit.
Which versions of undertow-io undertow are affected?
544 distinct undertow-io undertow versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in undertow-io undertow CVEs?
undertow-io undertow's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-532 (Insertion of Sensitive Information into Log File), CWE-20 (Improper Input Validation).
How many critical undertow-io undertow vulnerabilities are there?
undertow-io undertow has 4 critical and 17 high-severity CVEs.
What is the average severity of undertow-io undertow CVEs?
The average CVSS base score across undertow-io undertow's scored CVEs is 7.3.
