CVE-2009-1849 : Detail

CVE-2009-1849

0.31%V4
2009-06-01
19h00 +00:00
Cross-site Scripting
A03-Injection
Network
2024-09-17
02h15 +00:00
CVE.org
NVD
Notifikasi untuk CVE tertentu
Tetap terinformasi tentang perubahan untuk CVE tertentu.
Kelola notifikasi

Deskripsi CVE

Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Informasi CVE

Kelemahan Terkait

CWE-ID Nama Kelemahan Sumber
CWE-79 Improper Neutralization of Input During Web Page Generation
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Metrik

Metrik Skor Tingkat keparahan CVSS Vektor Sumber
V2 4.3 AV:N/AC:M/Au:N/C:N/I:P/A:N nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.
EPSS First.org

Produk yang Disebutkan

Konfigurasi 0

Paessler>>Prtg_traffic_grapher >> Version Hingga (termasuk) 6.2.977

Paessler>>Prtg_traffic_grapher >> Version 4.0.7.139

Paessler>>Prtg_traffic_grapher >> Version 4.0.8.154

Paessler>>Prtg_traffic_grapher >> Version 4.1.0.256

Paessler>>Prtg_traffic_grapher >> Version 4.1.0.257

Paessler>>Prtg_traffic_grapher >> Version 4.1.0.265

Paessler>>Prtg_traffic_grapher >> Version 4.1.0.266

Paessler>>Prtg_traffic_grapher >> Version 4.2.0.356

Paessler>>Prtg_traffic_grapher >> Version 4.2.0.357

Paessler>>Prtg_traffic_grapher >> Version 4.2.0.363

Paessler>>Prtg_traffic_grapher >> Version 4.2.0.364

Paessler>>Prtg_traffic_grapher >> Version 4.2.1.385

Paessler>>Prtg_traffic_grapher >> Version 4.2.1.386

Paessler>>Prtg_traffic_grapher >> Version 4.3.0.470

Paessler>>Prtg_traffic_grapher >> Version 4.3.0.471

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.498

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.505

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.510

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.522

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.534

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.562

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.566

Paessler>>Prtg_traffic_grapher >> Version 5.0.1.300

Paessler>>Prtg_traffic_grapher >> Version 5.0.1.310

Paessler>>Prtg_traffic_grapher >> Version 5.0.1.356

Paessler>>Prtg_traffic_grapher >> Version 5.0.3.379

Paessler>>Prtg_traffic_grapher >> Version 5.0.3.398

Paessler>>Prtg_traffic_grapher >> Version 5.1.0.452

Paessler>>Prtg_traffic_grapher >> Version 5.1.1.474

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.548

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.549

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.559

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.560

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.565

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.566

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.574

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.575

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.581

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.582

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.687

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.738

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.739

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.758

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.759

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.812

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.813

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.833

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.834

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.862

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.863

Paessler>>Prtg_traffic_grapher >> Version 6.0.2.255

Paessler>>Prtg_traffic_grapher >> Version 6.0.2.256

Paessler>>Prtg_traffic_grapher >> Version 6.0.3.258

Paessler>>Prtg_traffic_grapher >> Version 6.0.3.259

Paessler>>Prtg_traffic_grapher >> Version 6.0.3.261

Paessler>>Prtg_traffic_grapher >> Version 6.0.3.262

Paessler>>Prtg_traffic_grapher >> Version 6.0.3.284

Paessler>>Prtg_traffic_grapher >> Version 6.0.3.285

Paessler>>Prtg_traffic_grapher >> Version 6.0.4.332

Paessler>>Prtg_traffic_grapher >> Version 6.0.4.333

Paessler>>Prtg_traffic_grapher >> Version 6.0.4.335

Paessler>>Prtg_traffic_grapher >> Version 6.0.4.336

Paessler>>Prtg_traffic_grapher >> Version 6.0.4.393

Paessler>>Prtg_traffic_grapher >> Version 6.0.4.394

Paessler>>Prtg_traffic_grapher >> Version 6.0.5.417

Paessler>>Prtg_traffic_grapher >> Version 6.0.5.441

Paessler>>Prtg_traffic_grapher >> Version 6.0.5.442

Paessler>>Prtg_traffic_grapher >> Version 6.0.5.450

Paessler>>Prtg_traffic_grapher >> Version 6.0.5.451

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.585

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.586

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.601

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.602

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.625

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.626

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.675

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.676

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.683_beta

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.750

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.751

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.753

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.754

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.756

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.757

Paessler>>Prtg_traffic_grapher >> Version 6.1.1.854

Paessler>>Prtg_traffic_grapher >> Version 6.1.1.855

Paessler>>Prtg_traffic_grapher >> Version 6.2.0.907

Paessler>>Prtg_traffic_grapher >> Version 6.2.0.908

Paessler>>Prtg_traffic_grapher >> Version 6.2.1.950

Paessler>>Prtg_traffic_grapher >> Version 6.2.1.951

Paessler>>Prtg_traffic_grapher >> Version 6.2.1.957

Paessler>>Prtg_traffic_grapher >> Version 6.2.1.958

Paessler>>Prtg_traffic_grapher >> Version 6.2.1.963

Paessler>>Prtg_traffic_grapher >> Version 6.2.1.964

Paessler>>Prtg_traffic_grapher6.0.5.416 >> Version *

Referensi

http://secunia.com/advisories/35249
Tags : third-party-advisory, x_refsource_SECUNIA
http://blog.bkis.com/?p=704
Tags : x_refsource_MISC
http://www.securityfocus.com/bid/35128
Tags : vdb-entry, x_refsource_BID
Informasi yang disajikan di CVE Find berasal dari beberapa sumber referensi yang dipilih dengan cermat. Data CVE disediakan oleh MITRE Corporation dan National Vulnerability Database (NVD). Katalog Known Exploited Vulnerabilities (KEV) bersumber dari Cybersecurity and Infrastructure Security Agency (CISA), sementara skor EPSS berasal dari FIRST.org. Selain itu, data mengenai kelemahan perangkat lunak (CWE) dan pola serangan umum (CAPEC) dikelola oleh MITRE Corporation, dan informasi tentang konfigurasi perangkat keras dan perangkat lunak (CPE) disediakan oleh NVD.