CVE-2022-1319: Netapp Active Iq Unified Manager

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

A flaw was found in Undertow. For an AJP 400 response, EAP 7 is improperly sending two response packets, and those packets have the reuse flag set even though JBoss EAP closes the connection. A failure occurs when the connection is reused after a 400 by CPING since it reads in the second SEND_HEADERS response packet instead of a CPONG.

Affected products

• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Cloud Secure Agent: affected versions not specified
• Netapp Oncommand Insight: affected versions not specified
• Netapp Oncommand Workflow Automation: affected versions not specified
• Red Hat Openshift Application Runtimes: affected versions not specified
• Red Hat Single Sign-On: version 7.0 only
• Red Hat Undertow: before 2.2.17 (fixed in 2.2.17); version 2.2.17 only; version 2.2.19 only; version 2.3.0 only

Published 2022-08-31. Last modified 2026-06-17.