FKIE_CVE-2009-1849
Vulnerability from fkie_nvd - Published: 2009-06-01 19:30 - Updated: 2026-06-16 23:08
Severity
Summary
Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
Impacted products
{
"affected": [
{
"affectedData": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"source": "cve@mitre.org"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7EB46CD8-7E79-48E6-ACA8-58646CD5DFD7",
"versionEndIncluding": "6.2.977",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.0.7.139:*:*:*:*:*:*:*",
"matchCriteriaId": "EF160BB3-D13E-46A6-8223-524440C3F993",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.0.8.154:*:*:*:*:*:*:*",
"matchCriteriaId": "858DE93A-F8D5-421F-9A9A-407F0FC60890",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.256:*:*:*:*:*:*:*",
"matchCriteriaId": "1FBE495A-FAAD-4DE8-913D-CAC6F8B5F29A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.257:*:*:*:*:*:*:*",
"matchCriteriaId": "E9FCC4E3-BB37-4BC9-9046-06952FC2571A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.265:*:*:*:*:*:*:*",
"matchCriteriaId": "7510E041-535F-4925-B7DA-3E34C59EC1CB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.266:*:*:*:*:*:*:*",
"matchCriteriaId": "42B8D289-3CC2-49C3-82ED-20A80CCD824E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.356:*:*:*:*:*:*:*",
"matchCriteriaId": "FA086843-99C5-489F-8036-3DCCE7046A94",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.357:*:*:*:*:*:*:*",
"matchCriteriaId": "9E35BEC0-4FEE-48D9-9748-72C76B2330DD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.363:*:*:*:*:*:*:*",
"matchCriteriaId": "E1103E40-44D6-47CB-AA49-69454FB5AA8E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.364:*:*:*:*:*:*:*",
"matchCriteriaId": "E733A72C-C955-43A0-82FA-018859620751",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.1.385:*:*:*:*:*:*:*",
"matchCriteriaId": "DB0961E2-BDEA-4F4E-BF99-91E468CD5E4A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.1.386:*:*:*:*:*:*:*",
"matchCriteriaId": "737308B8-F130-4C5E-A7E8-11BB93EF1FEF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.0.470:*:*:*:*:*:*:*",
"matchCriteriaId": "42EAD7DC-3EE5-4CA2-BC65-CC3AEA65DC78",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.0.471:*:*:*:*:*:*:*",
"matchCriteriaId": "D464FD9D-EBC7-44CE-85FA-02F78CA98ECE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.498:*:*:*:*:*:*:*",
"matchCriteriaId": "D05A59D2-BA10-4165-93FC-43B8C204871D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.505:*:*:*:*:*:*:*",
"matchCriteriaId": "3975137E-8EE2-4190-92EA-13A40DD01454",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.510:*:*:*:*:*:*:*",
"matchCriteriaId": "7F3BFEC7-FD2F-40EE-B9FF-BF386E5A803E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.522:*:*:*:*:*:*:*",
"matchCriteriaId": "687C3053-7089-475F-A276-01A01A17ACFC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.534:*:*:*:*:*:*:*",
"matchCriteriaId": "C0C3C6AB-CBEC-4F19-9AC7-858DDF2B5DC5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.562:*:*:*:*:*:*:*",
"matchCriteriaId": "0B95DF35-45CE-497E-8602-061E1C84DD0A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.566:*:*:*:*:*:*:*",
"matchCriteriaId": "480EB1A5-54EC-4089-9D96-62D39C58BFFD",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.1.300:*:*:*:*:*:*:*",
"matchCriteriaId": "8DE4A952-49D7-4D56-A7F6-C18641BBFA38",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.1.310:*:*:*:*:*:*:*",
"matchCriteriaId": "9C8D0B8B-DB77-498D-AEDC-566A0A87DC26",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.1.356:*:*:*:*:*:*:*",
"matchCriteriaId": "31119ED0-80F5-41DE-B8AF-AC443791B58C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.3.379:*:*:*:*:*:*:*",
"matchCriteriaId": "AC55092F-F428-48ED-8345-DCD620B2BFE0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.3.398:*:*:*:*:*:*:*",
"matchCriteriaId": "86A62E3B-2727-4B5F-BF8C-52099F901C41",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.1.0.452:*:*:*:*:*:*:*",
"matchCriteriaId": "61DB3915-E534-44E4-87F5-63D614B7899A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.1.1.474:*:*:*:*:*:*:*",
"matchCriteriaId": "C4539CCB-6727-4068-93AA-601EF54818BB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.548:*:*:*:*:*:*:*",
"matchCriteriaId": "79AD54E2-8F65-47E5-805E-EE249D44A148",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.549:*:*:*:*:*:*:*",
"matchCriteriaId": "1A40DC9A-6AFB-47F3-BD83-CB046F3EB73D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.559:*:*:*:*:*:*:*",
"matchCriteriaId": "8EC50905-5919-4F54-94DD-081FAF99DCCF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.560:*:*:*:*:*:*:*",
"matchCriteriaId": "060873E0-FECA-49AD-A116-78F8979853E2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.565:*:*:*:*:*:*:*",
"matchCriteriaId": "CD1A2C75-B4C8-42C7-B28A-E82BAFC893C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.566:*:*:*:*:*:*:*",
"matchCriteriaId": "EF5742D1-8BA7-4FBC-8F8F-E62D5551F9C8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.574:*:*:*:*:*:*:*",
"matchCriteriaId": "DAF7EF38-CD51-4A73-AFC2-1F3669C6276A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.575:*:*:*:*:*:*:*",
"matchCriteriaId": "F9B65DA1-587C-497F-9950-9D809C5AAE2A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.581:*:*:*:*:*:*:*",
"matchCriteriaId": "DECA3D57-6886-49AD-AA8C-1BFC2B95AC9D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.582:*:*:*:*:*:*:*",
"matchCriteriaId": "04789BF9-8D3B-4DBB-A5D1-EE1422FF5609",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.687:*:*:*:*:*:*:*",
"matchCriteriaId": "8EEDDEEA-0DB1-4F70-B92D-B08CA65E7893",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.738:*:*:*:*:*:*:*",
"matchCriteriaId": "89C9927F-9723-4BA8-8AEE-09C1835D33EA",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.739:*:*:*:*:*:*:*",
"matchCriteriaId": "D5A56729-2F74-43F7-A9B6-33E765C581A0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.758:*:*:*:*:*:*:*",
"matchCriteriaId": "BCB7985A-0484-4741-9A39-78105AE1B690",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.759:*:*:*:*:*:*:*",
"matchCriteriaId": "BE5D7BD1-9F60-4C85-9E23-7DB1D6F14F82",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.812:*:*:*:*:*:*:*",
"matchCriteriaId": "A296F328-B1B4-4B95-AEA9-DC7A899852EC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.813:*:*:*:*:*:*:*",
"matchCriteriaId": "8D933F67-548C-438A-96F5-42706125123E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.833:*:*:*:*:*:*:*",
"matchCriteriaId": "985A84B5-1EA8-4939-AE5A-DDF3BF24530E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.834:*:*:*:*:*:*:*",
"matchCriteriaId": "F19FDECF-1D4C-41A6-828F-933E47E21419",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.862:*:*:*:*:*:*:*",
"matchCriteriaId": "D0E9B0D4-D408-4383-9B0E-D931B350A035",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.863:*:*:*:*:*:*:*",
"matchCriteriaId": "EB6222BC-C31B-4168-AC89-DB34F85115C2",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.2.255:*:*:*:*:*:*:*",
"matchCriteriaId": "523BA24F-AEF3-401B-A4C8-4AE2A6F1FA77",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.2.256:*:*:*:*:*:*:*",
"matchCriteriaId": "AF35DFBC-ABFE-4776-A9FE-4ED1FD4DA7CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.258:*:*:*:*:*:*:*",
"matchCriteriaId": "3AE82434-3D52-4DD6-860B-A259F55CB86C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.259:*:*:*:*:*:*:*",
"matchCriteriaId": "C4DE8E48-D315-42F1-933D-4048F8C868CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.261:*:*:*:*:*:*:*",
"matchCriteriaId": "F75EDE82-5D59-462A-8792-FE7585F03673",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.262:*:*:*:*:*:*:*",
"matchCriteriaId": "9F7B8FF0-5E19-4527-947D-124B6E4BDF29",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.284:*:*:*:*:*:*:*",
"matchCriteriaId": "628D9547-8661-4FB5-A5D7-593B93CDF666",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.285:*:*:*:*:*:*:*",
"matchCriteriaId": "E23AAC1E-6081-46D4-9B91-DBA79656642F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.332:*:*:*:*:*:*:*",
"matchCriteriaId": "2BED3603-BD98-4C6D-AD86-C0E8FDAF530E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.333:*:*:*:*:*:*:*",
"matchCriteriaId": "BEC7F90A-0DE4-4D70-8CC7-2313DDA5791A",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.335:*:*:*:*:*:*:*",
"matchCriteriaId": "27FE080A-B2EF-415C-A6A6-762C8DDBF959",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.336:*:*:*:*:*:*:*",
"matchCriteriaId": "593B0A84-0DFC-414F-8A34-6C8790876EE9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.393:*:*:*:*:*:*:*",
"matchCriteriaId": "0456E733-F112-4B54-AECC-32EC933F5920",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.394:*:*:*:*:*:*:*",
"matchCriteriaId": "3E53FD0B-DD3F-4C66-97C1-04609556286F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.417:*:*:*:*:*:*:*",
"matchCriteriaId": "BFFCC4D4-682E-480C-B1F8-83DB43B6B9D8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.441:*:*:*:*:*:*:*",
"matchCriteriaId": "8786AC61-7441-4E3E-AE9F-E985D737BD20",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.442:*:*:*:*:*:*:*",
"matchCriteriaId": "678CAD17-2B48-4C29-B025-AF0D3A51DA10",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.450:*:*:*:*:*:*:*",
"matchCriteriaId": "199E6F79-1EAE-458A-A6FB-A60C3D211751",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.451:*:*:*:*:*:*:*",
"matchCriteriaId": "3D11D880-AC3B-433B-82E2-88E6F11ACD4F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.585:*:*:*:*:*:*:*",
"matchCriteriaId": "0557C778-CE93-4494-96A4-F5FCD30C1009",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.586:*:*:*:*:*:*:*",
"matchCriteriaId": "9657EEAB-9901-4AFA-B136-84AF9394242E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.601:*:*:*:*:*:*:*",
"matchCriteriaId": "0EB7DDF4-6E0B-41E7-8853-6A92E5557768",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.602:*:*:*:*:*:*:*",
"matchCriteriaId": "4871FE92-DF4D-44B6-9A36-6F3B04F46A24",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.625:*:*:*:*:*:*:*",
"matchCriteriaId": "D673D1D0-174A-4C89-85B4-14674DE2DF2E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.626:*:*:*:*:*:*:*",
"matchCriteriaId": "34AC3B6A-F9AE-4E9F-9FEC-A2CB8519F774",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.675:*:*:*:*:*:*:*",
"matchCriteriaId": "97DE6BC8-9C96-4484-A316-6DF8D14D5973",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.676:*:*:*:*:*:*:*",
"matchCriteriaId": "D7649A66-3DA0-4B8E-9600-55F973015887",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.683_beta:*:*:*:*:*:*:*",
"matchCriteriaId": "236A9603-3512-4E2F-9219-B2A7618BC9C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.750:*:*:*:*:*:*:*",
"matchCriteriaId": "DC47944B-1875-4E78-BD04-9A5B42B946DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.751:*:*:*:*:*:*:*",
"matchCriteriaId": "7BDACFEB-6371-4410-B1CC-73444DABD7C0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.753:*:*:*:*:*:*:*",
"matchCriteriaId": "92F4B6B4-3929-4615-BB24-B7A9162D39FC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.754:*:*:*:*:*:*:*",
"matchCriteriaId": "758DBBC9-840F-449A-92B2-CF57618C2D76",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.756:*:*:*:*:*:*:*",
"matchCriteriaId": "A0BBBDC5-2E05-418B-B304-50A13EB7DDF0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.757:*:*:*:*:*:*:*",
"matchCriteriaId": "670477DE-6EA7-40F6-95CB-890F5AE95EEE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.1.854:*:*:*:*:*:*:*",
"matchCriteriaId": "CA10F36E-8CB5-47CB-966B-A8EA437582E8",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.1.855:*:*:*:*:*:*:*",
"matchCriteriaId": "52209A39-851A-4EED-9F82-336A5289BD7F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.0.907:*:*:*:*:*:*:*",
"matchCriteriaId": "88F1D13B-DEA2-4FAC-BDE3-CC5BDBDCF314",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.0.908:*:*:*:*:*:*:*",
"matchCriteriaId": "468F35D5-9E88-40FB-B59B-0FCC65D561FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.950:*:*:*:*:*:*:*",
"matchCriteriaId": "97A41779-9099-40FB-840B-77CA6E0EC3FF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.951:*:*:*:*:*:*:*",
"matchCriteriaId": "F03F66F5-5964-4D6E-9FA8-9A16A7E925CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.957:*:*:*:*:*:*:*",
"matchCriteriaId": "2EC3282B-7F9D-4733-9885-A62EF09BC4DB",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.958:*:*:*:*:*:*:*",
"matchCriteriaId": "A54E0D31-6FC6-40D9-AD6E-3E1A04188627",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.963:*:*:*:*:*:*:*",
"matchCriteriaId": "FCFF0A3D-E902-4337-B934-C04F481C78FE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.964:*:*:*:*:*:*:*",
"matchCriteriaId": "98DAB8C9-8DBD-4BD5-A165-DEC63206C3E9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher6.0.5.416:*:*:*:*:*:*:*:*",
"matchCriteriaId": "34B19C37-5393-432D-98BF-4261528C92B0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."
},
{
"lang": "es",
"value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en funci\u00f3n Monitor_Bandwidth en PRTG Traffic Grapher v6.2.2.977 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elecci\u00f3n mediante vectores no especificados."
}
],
"id": "CVE-2009-1849",
"lastModified": "2026-06-16T23:08:11.537",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"version": "2.0"
},
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
]
},
"published": "2009-06-01T19:30:00.313",
"references": [
{
"source": "cve@mitre.org",
"url": "http://blog.bkis.com/?p=704"
},
{
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35249"
},
{
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.paessler.com/support/kb/questions/prtg6history"
},
{
"source": "cve@mitre.org",
"url": "http://www.securityfocus.com/bid/35128"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://blog.bkis.com/?p=704"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "http://secunia.com/advisories/35249"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
],
"url": "http://www.paessler.com/support/kb/questions/prtg6history"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://www.securityfocus.com/bid/35128"
}
],
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-79"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…