Medium severity6.5NVD Advisory· Published Feb 19, 2018· Updated Jun 16, 2026

CVE-2009-4267

Description

The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the numRows parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apache/Juddillm-fuzzy2 versions
= 3.0.0+ 1 more
- (no CPE)range: = 3.0.0
- (no CPE)range: 3.0.0 fixed in 3.0.1

Patches

Vulnerability mechanics

References

juddi.apache.org/security.htmlnvdVendor Advisory
mail-archives.apache.org/mod_mbox/juddi-user/201802.mbox/raw/%3C0F272EE1-E2B4-4016-8C5D-F76ABDD12D18%40gmail.com%3EnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000