CVE-2009-1594: Armorlogic Profense Web Application Firewall

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Armorlogic Profense Web Application Firewall before 2.2.22, and 2.4.x before 2.4.4, does not properly implement the "positive model," which allows remote attackers to bypass certain protection mechanisms via a %0A (encoded newline), as demonstrated by a %0A in a cross-site scripting (XSS) attack URL.

Affected products

• Armorlogic Profense Web Application Firewall: up to and including 2.2.21; version 2.4 only

Published 2009-05-21. Last modified 2026-06-16.