Mô tả CVE

Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Thông tin CVE

Điểm yếu liên quan

CWE-ID	Tên điểm yếu	Nguồn
CWE-79	Improper Neutralization of Input During Web Page Generation The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

Số liệu

Số liệu	Điểm	Mức độ nghiêm trọng	CVSS Vector	Nguồn
V2	4.3		AV:N/AC:M/Au:N/C:N/I:P/A:N	nvd@nist.gov

EPSS

EPSS là mô hình tính điểm dự đoán khả năng một lỗ hổng bị khai thác.

Điểm EPSS

Mô hình EPSS tạo ra điểm xác suất từ 0 đến 1 (0 đến 100%). Điểm càng cao, xác suất một lỗ hổng bị khai thác càng lớn.

Phân vị EPSS

Phân vị được dùng để xếp hạng CVE theo điểm EPSS. Ví dụ, một CVE ở phân vị thứ 95 theo điểm EPSS có nhiều khả năng bị khai thác hơn 95% CVE khác. Do đó, phân vị được dùng để so sánh điểm EPSS của một CVE với các CVE khác.

EPSS First.org

Sản phẩm được đề cập

Cấu hình 0

Paessler>>Prtg_traffic_grapher >> Version Đến (bao gồm) 6.2.977

Paessler>>Prtg_traffic_grapher >> Version 4.0.7.139

Paessler>>Prtg_traffic_grapher >> Version 4.0.8.154

Paessler>>Prtg_traffic_grapher >> Version 4.1.0.256

Paessler>>Prtg_traffic_grapher >> Version 4.1.0.257

Paessler>>Prtg_traffic_grapher >> Version 4.1.0.265

Paessler>>Prtg_traffic_grapher >> Version 4.1.0.266

Paessler>>Prtg_traffic_grapher >> Version 4.2.0.356

Paessler>>Prtg_traffic_grapher >> Version 4.2.0.357

Paessler>>Prtg_traffic_grapher >> Version 4.2.0.363

Paessler>>Prtg_traffic_grapher >> Version 4.2.0.364

Paessler>>Prtg_traffic_grapher >> Version 4.2.1.385

Paessler>>Prtg_traffic_grapher >> Version 4.2.1.386

Paessler>>Prtg_traffic_grapher >> Version 4.3.0.470

Paessler>>Prtg_traffic_grapher >> Version 4.3.0.471

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.498

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.505

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.510

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.522

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.534

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.562

Paessler>>Prtg_traffic_grapher >> Version 4.3.1.566

Paessler>>Prtg_traffic_grapher >> Version 5.0.1.300

Paessler>>Prtg_traffic_grapher >> Version 5.0.1.310

Paessler>>Prtg_traffic_grapher >> Version 5.0.1.356

Paessler>>Prtg_traffic_grapher >> Version 5.0.3.379

Paessler>>Prtg_traffic_grapher >> Version 5.0.3.398

Paessler>>Prtg_traffic_grapher >> Version 5.1.0.452

Paessler>>Prtg_traffic_grapher >> Version 5.1.1.474

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.548

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.549

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.559

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.560

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.565

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.566

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.574

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.575

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.581

Paessler>>Prtg_traffic_grapher >> Version 5.2.0.582

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.687

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.738

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.739

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.758

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.759

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.812

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.813

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.833

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.834

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.862

Paessler>>Prtg_traffic_grapher >> Version 5.3.0.863

Paessler>>Prtg_traffic_grapher >> Version 6.0.2.255

Paessler>>Prtg_traffic_grapher >> Version 6.0.2.256

Paessler>>Prtg_traffic_grapher >> Version 6.0.3.258

Paessler>>Prtg_traffic_grapher >> Version 6.0.3.259

Paessler>>Prtg_traffic_grapher >> Version 6.0.3.261

Paessler>>Prtg_traffic_grapher >> Version 6.0.3.262

Paessler>>Prtg_traffic_grapher >> Version 6.0.3.284

Paessler>>Prtg_traffic_grapher >> Version 6.0.3.285

Paessler>>Prtg_traffic_grapher >> Version 6.0.4.332

Paessler>>Prtg_traffic_grapher >> Version 6.0.4.333

Paessler>>Prtg_traffic_grapher >> Version 6.0.4.335

Paessler>>Prtg_traffic_grapher >> Version 6.0.4.336

Paessler>>Prtg_traffic_grapher >> Version 6.0.4.393

Paessler>>Prtg_traffic_grapher >> Version 6.0.4.394

Paessler>>Prtg_traffic_grapher >> Version 6.0.5.417

Paessler>>Prtg_traffic_grapher >> Version 6.0.5.441

Paessler>>Prtg_traffic_grapher >> Version 6.0.5.442

Paessler>>Prtg_traffic_grapher >> Version 6.0.5.450

Paessler>>Prtg_traffic_grapher >> Version 6.0.5.451

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.585

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.586

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.601

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.602

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.625

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.626

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.675

Paessler>>Prtg_traffic_grapher >> Version 6.0.6.676

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.683_beta

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.750

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.751

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.753

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.754

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.756

Paessler>>Prtg_traffic_grapher >> Version 6.1.0.757

Paessler>>Prtg_traffic_grapher >> Version 6.1.1.854

Paessler>>Prtg_traffic_grapher >> Version 6.1.1.855

Paessler>>Prtg_traffic_grapher >> Version 6.2.0.907

Paessler>>Prtg_traffic_grapher >> Version 6.2.0.908

Paessler>>Prtg_traffic_grapher >> Version 6.2.1.950

Paessler>>Prtg_traffic_grapher >> Version 6.2.1.951

Paessler>>Prtg_traffic_grapher >> Version 6.2.1.957

Paessler>>Prtg_traffic_grapher >> Version 6.2.1.958

Paessler>>Prtg_traffic_grapher >> Version 6.2.1.963

Paessler>>Prtg_traffic_grapher >> Version 6.2.1.964

Paessler>>Prtg_traffic_grapher6.0.5.416 >> Version *

Tài liệu tham khảo

http://secunia.com/advisories/35249
Tags : third-party-advisory, x_refsource_SECUNIA

http://blog.bkis.com/?p=704
Tags : x_refsource_MISC

http://www.securityfocus.com/bid/35128
Tags : vdb-entry, x_refsource_BID

http://www.paessler.com/support/kb/questions/prtg6history
Tags : x_refsource_CONFIRM

Ngày	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.21%	–	–
2022-03-27	–	–	1.21%	–	–
2022-04-03	–	–	1.21%	–	–
2022-05-08	–	–	1.21%	–	–
2022-08-28	–	–	1.21%	–	–
2023-02-26	–	–	1.21%	–	–
2023-03-12	–	–	–	0.22%	–
2023-04-09	–	–	–	0.22%	–
2023-09-17	–	–	–	0.22%	–
2024-02-11	–	–	–	0.13%	–
2024-03-17	–	–	–	0.14%	–
2024-04-07	–	–	–	0.14%	–
2024-06-02	–	–	–	0.2%	–
2024-06-08	–	–	–	0.2%	–
2024-09-22	–	–	–	0.22%	–
2024-10-27	–	–	–	0.22%	–
2024-11-03	–	–	–	0.22%	–
2024-12-22	–	–	–	0.22%	–
2025-01-19	–	–	–	0.22%	–
2025-03-09	–	–	–	0.22%	–
2025-03-09	–	–	–	0.22%	–
2025-03-18	–	–	–	–	0.31%
2025-03-30	–	–	–	–	0.31%
2025-04-15	–	–	–	–	0.31%
2025-05-01	–	–	–	–	0.31%
2025-05-04	–	–	–	–	0.31%
2025-05-09	–	–	–	–	0.31%
2025-05-10	–	–	–	–	0.31%
2025-05-16	–	–	–	–	0.31%
2025-11-18	–	–	–	–	0.31%
2025-11-21	–	–	–	–	0.31%
2026-06-14	–	–	–	–	0.31%

Ngày	Phân vị
2022-02-06	41%
2022-03-27	42%
2022-04-03	64%
2022-05-08	65%
2022-08-28	66%
2023-02-26	67%
2023-03-12	58%
2023-04-09	59%
2023-09-17	6%
2024-02-11	47%
2024-03-17	49%
2024-04-07	5%
2024-06-02	57%
2024-06-08	58%
2024-09-22	6%
2024-10-27	6%
2024-11-03	61%
2024-12-22	6%
2025-01-19	6%
2025-03-09	61%
2025-03-09	61%
2025-03-18	52%
2025-03-30	51%
2025-04-15	53%
2025-05-01	54%
2025-05-04	53%
2025-05-09	54%
2025-05-10	53%
2025-05-16	54%
2025-11-18	51%
2025-11-21	54%
2026-06-14	55%

CVE-2009-1849 : Chi tiết

CVE-2009-1849