CVE-2009-2301: Radware Appwall

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

The radware AppWall Web Application Firewall (WAF) 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to (1) funcs.inc, (2) defines.inc, or (3) msg.inc in Management/.

Affected products

• Radware Appwall
• Radware Gateway: version 4.6.0.2 only

Published 2009-07-02. Last modified 2026-06-16.