Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2022-1319

26
FAUCET Score

CVE-2022-1319 is a high-severity vulnerability in Undertow, affecting NetApp and Red Hat products, specifically JBoss EAP 7. The flaw causes EAP 7 to improperly send duplicate response packets with a reuse flag after an AJP 400 response, leading to connection failures when reused by CPING. With a CVSS score of 7.5, this vulnerability allows unauthenticated remote attackers to cause a denial of service (availability impact) with low attack complexity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
Range not provided by sourceCPE matchmatch criteria
cpe:2.3:a:redhat:openshift_application_runtimes:-:*:*:*:*:*:*:*
7.0CPE matchmatch criteria
cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*
< 2.2.17CPE matchmatch criteria
cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*
2.2.17CPE matchmatch criteria
cpe:2.3:a:redhat:undertow:2.2.17:-:*:*:*:*:*:*
2.2.17CPE matchmatch criteria
cpe:2.3:a:redhat:undertow:2.2.17:sp1:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
1.26%
Probability of exploitation in next 30 days
EPSS Percentile
66.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0126 is in the 46th percentile among its peer group of 51,506 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (33)

github_advisorypatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Fuse 7.11Fixed in: undertow
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7Fixed in: undertow
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-activemq-artemis-0:1.5.5.016-1.redhat_00001.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-artemis-native-1:1.5.5.016-1.redhat_00001.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-jboss-xnio-base-0:3.5.11-1.Final_redhat_00001.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-jsoup-0:1.14.2-1.redhat_00002.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-undertow-0:1.4.18-14.SP13_redhat_00001.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-wildfly-0:7.1.10-2.GA_redhat_00002.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-woodstox-core-0:5.0.3-2.redhat_00002.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.1 EUS for RHEL 7Fixed in: eap7-xml-security-0:2.0.10-2.redhat_00002.1.ep7.el7
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jackson-annotations-0:2.10.4-3.redhat_00006.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jackson-core-0:2.10.4-3.redhat_00006.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jackson-databind-0:2.10.4-5.redhat_00006.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jackson-jaxrs-providers-0:2.10.4-3.redhat_00006.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jackson-modules-base-0:2.10.4-5.redhat_00006.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 9Fixed in: rh-sso7-keycloak-0:18.0.3-1.redhat_00001.1.el9sso
View patch
redhatpatch availablevia redhat_api
Product: Text-Only RHOARFixed in: undertow
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jackson-modules-java8-0:2.10.4-2.redhat_00006.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-jboss-server-migration-0:1.7.2-16.Final_redhat_00017.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-netty-0:4.1.63-5.Final_redhat_00003.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-undertow-0:2.0.41-4.SP5_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-wildfly-0:7.3.14-3.GA_redhat_00002.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.3 EUS for RHEL 7Fixed in: eap7-wildfly-elytron-0:1.10.17-1.Final_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8Fixed in: eap7-undertow-0:2.2.17-2.SP4_redhat_00001.1.el8eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform 7.4 on RHEL 7Fixed in: eap7-undertow-0:2.2.17-2.SP4_redhat_00001.1.el7eap
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6.1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 7Fixed in: rh-sso7-keycloak-0:18.0.3-1.redhat_00001.1.el7sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 8Fixed in: rh-sso7-keycloak-0:18.0.3-1.redhat_00001.1.el8sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 9Fixed in: rh-sso7-0:1-5.el9sso
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Single Sign-On 7.6 for RHEL 9Fixed in: rh-sso7-javapackages-tools-0:6.0.0-7.el9sso
View patch
redhatvendor investigatingvia nvd_reference
View patch
redhatend of lifevia redhat_api
Product: Red Hat JBoss Enterprise Application Platform Expansion PackFixed in: undertow

Vendor Advisories (1)

redhatCVE-2022-1319Moderate

undertow: Double AJP response for 400 from EAP 7 results in CPING failures

Apr 11, 2022

References

access.redhat.com / security/cve/CVE-2022-1319
Vendor Advisory
bugzilla.redhat.com / show_bug.cgi
Issue TrackingVendor Advisory
github.com / undertow-io/undertow/commit/1443a1a2bbb8e32e56788109d8285db250d55c8b
PatchThird Party Advisory
github.com / undertow-io/undertow/commit/7c5b3ab885b5638fd3f1e8a935d5063d68aa2df3
PatchThird Party Advisory
issues.redhat.com / browse/UNDERTOW-2060
Issue TrackingVendor Advisory
security.netapp.com / advisory/ntap-20221014-0006
Third Party Advisory