CVE-2022-1259: Netapp Active Iq Unified Manager

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

A flaw was found in Undertow. A potential security issue in flow control handling by the browser over HTTP/2 may cause overhead or a denial of service in the server. This flaw exists because of an incomplete fix for CVE-2021-3629.

Affected products

• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Cloud Secure Agent: affected versions not specified
• Netapp Oncommand Insight: affected versions not specified
• Netapp Oncommand Workflow Automation: affected versions not specified
• Red Hat Build Of Quarkus: affected versions not specified
• Red Hat Integration Camel K: affected versions not specified
• Red Hat JBoss Enterprise Application Platform: version 7.0.0 only
• Red Hat Openshift Application Runtimes: affected versions not specified
• Red Hat Single Sign-On: version 7.0 only
• Red Hat Undertow: up to and including 2.2.17; version 2.2.18 only; version 2.2.19 only

Published 2022-08-31. Last modified 2026-06-17.