CVE-2021-3597: Netapp Active Iq Unified Manager

Medium severity, CVSS 5.9. EPSS: 1.1% chance of exploitation in the next 30 days.

A flaw was found in undertow. The HTTP2SourceChannel fails to write the final frame under some circumstances, resulting in a denial of service. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.35.SP1, prior to 2.2.6.SP1, prior to 2.2.7.SP1, prior to 2.0.36.SP1, prior to 2.2.9.Final and prior to 2.0.39.Final.

Affected products

• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Oncommand Insight: affected versions not specified
• Netapp Oncommand Workflow Automation: affected versions not specified
• Red Hat Fuse: version 1.0 only
• Red Hat JBoss Enterprise Application Platform: affected versions not specified; version 7.3 only; version 7.4 only
• Red Hat Openshift Application Runtimes: affected versions not specified
• Red Hat Single Sign-On: affected versions not specified
• Red Hat Undertow: before 2.0.35 (fixed in 2.0.35); from 2.2.0, before 2.2.6 (fixed in 2.2.6); version 2.0.35 only; version 2.0.36 only; version 2.0.39 only; version 2.2.6 only; …

Published 2022-05-24. Last modified 2026-06-17.