CVE-2021-3859: Netapp Cloud Secure Agent

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

A flaw was found in Undertow that tripped the client-side invocation timeout with certain calls made over HTTP2. This flaw allows an attacker to carry out denial of service attacks.

Affected products

• Netapp Cloud Secure Agent: affected versions not specified
• Netapp Oncommand Insight: affected versions not specified
• Netapp Oncommand Workflow Automation: affected versions not specified
• Red Hat JBoss Enterprise Application Platform: version 7.3 only; version 7.4 only
• Red Hat Single Sign-On: version 7.4.10 only; version 7.5.1 only
• Red Hat Undertow: before 2.2.15 (fixed in 2.2.15)

Published 2022-08-26. Last modified 2026-06-17.