What’s Vulnerable › Vulnerabilities

CVE-2009-1197

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-10-30 · updated 2026-06-16
• Weakness: CWE-20

Description

Apache jUDDI before 2.0 allows attackers to spoof entries in log files via vectors related to error logging of keys from uddiget.jsp.

Affected products

• Apache Software Foundation Apache jUDDI: 0.9-rc1, 0.9-rc2, 0.9-rc3, 0.9-rc4, 2.0-rc5, 2.0-rc6

References

• http://issues.apache.org/jira/browse/JUDDI-220
• http://marc.info/?l=juddi-dev&m=125000625404010&w=2
• http://www.securityfocus.com/bid/101625
• http://issues.apache.org/jira/browse/JUDDI-220
• http://marc.info/?l=juddi-dev&m=125000625404010&w=2
• http://www.securityfocus.com/bid/101625

Get alerted when CVE-2009-1197 or the next vulnerability affects your stack