CVE-2009-4267: Apache Juddi

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the numRows parameter.

Affected products

• Apache Juddi: version 3.0.0 only

Published 2018-02-19. Last modified 2026-06-16.