CVE-2019-14888

A vulnerability was found in the Undertow HTTP server in versions before 2.0.28.SP1 when listening on HTTPS. An attacker can target the HTTPS port to carry out a Denial Of Service (DOS) to make the service unavailable on SSL.

• CWE-400

• https://access.redhat.com/errata/RHSA-2020:0729Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14888Issue Tracking, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220211-0001/Third Party Advisory
• https://access.redhat.com/errata/RHSA-2020:0729Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14888Issue Tracking, Vendor Advisory
• https://security.netapp.com/advisory/ntap-20220211-0001/Third Party Advisory

Published

Jan 23, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-14882A vulnerability was found in Moodle 3.7 to 3.7.3, 3.6 to 3.6…6.1
• CVE-2019-14883A vulnerability was found in Moodle 3.6 before 3.6.7 and 3.7…5.3
• CVE-2019-14884A vulnerability was found in Moodle 3.7 before 3.73, 3.6 bef…6.1
• CVE-2019-14885A flaw was found in the JBoss EAP Vault system in all versio…4.3
• CVE-2019-14886A vulnerability was found in business-central, as shipped in…6.5
• CVE-2019-14887A flaw was found when an OpenSSL security provider is used w…9.1
• CVE-2019-14889A flaw was found with the libssh API function ssh_scp_new() …8.8
• CVE-2019-1489An information disclosure vulnerability exists when the Wind…7.5
• CVE-2019-14890A vulnerability was found in Ansible Tower before 3.6.1 wher…8.4
• CVE-2019-14891A flaw was found in cri-o, as a result of all pod-related pr…5
• CVE-2019-14892A flaw was discovered in jackson-databind in versions before…9.8
• CVE-2019-14893A flaw was discovered in FasterXML jackson-databind in all v…9.8