CVE-2019-14888

Published: Jan 23, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.

Affected (10)

Products: Redhat: Undertow, Jboss Data Grid, Jboss Enterprise Application Platform, Jboss Fuse, Single Sign On · Netapp: Active Iq Unified Manager

Redhat

5 products

Undertow

Jboss Data Grid

Jboss Enterprise Application Platform

Jboss Fuse

Single Sign On

Netapp

1 product

Active Iq Unified Manager

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Redhat Undertow	Up to 2.0.28

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Redhat Jboss Data Grid	All versions
Redhat Jboss Data Grid	Version 7.0.0
Redhat Jboss Enterprise Application Platform	Version 7.0.0
Redhat Jboss Fuse	Version 6.0.0
Redhat Jboss Fuse	Version 7.0.0
Redhat Single Sign On	Version 7.0