CVE-2019-14888

—

CVSS 3.1

7.5 high

EPSS

2%p81

Published

Jan 23, 2020 (Jan 23, 2020)

Modified

Jun 17, 2026

Description

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.

Vendors: redhat netapp
Products: undertow, jboss data grid, jboss enterprise application platform, jboss fuse, single sign-on, active iq unified manager
Weakness: CWE-400
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.1%)

In the news0 stories

No ingested article mentions this CVE yet.