Unscored severity · published Mar 10, 2009
CVE-2009-0868
CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response…
–
CVSS
1.9%
EPSS
No
On KEV
Description
CRLF injection vulnerability in the WebLink template in Fujitsu Jasmine2000 Enterprise Edition allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JA
Jasmine2000 · Fujitsu
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-0868
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-0868
Vendor Advisory
http://secunia.com/advisories/33971
Vendor Advisory
http://www.fujitsu.com/global/support/software/security/products-f/jasmine-200901e.html
www.securityfocus.com
http://www.securityfocus.com/bid/33832
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/48818