CVE-2021-3629: Netapp Active Iq Unified Manager

Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days.

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over http/2 may potentially cause overhead or a denial of service in the server. The highest threat from this vulnerability is availability. This flaw affects Undertow versions prior to 2.0.40.Final and prior to 2.2.11.Final.

Affected products

• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Oncommand Insight: affected versions not specified
• Netapp Oncommand Workflow Automation: affected versions not specified
• Red Hat Integration: affected versions not specified
• Red Hat JBoss Enterprise Application Platform: affected versions not specified; version 7.4 only; version 7.3 only
• Red Hat Single Sign-On: affected versions not specified
• Red Hat Undertow: before 2.0.40 (fixed in 2.0.40); from 2.2.0, before 2.2.11 (fixed in 2.2.11)
• Red Hat Wildfly Core: before 17.0 (fixed in 17.0)

Published 2022-05-24. Last modified 2026-06-17.