{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-10-03T16:23:59", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "35249", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/35249"}, {"tags": ["x_refsource_MISC"], "url": "http://blog.bkis.com/?p=704"}, {"name": "35128", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/35128"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.paessler.com/support/kb/questions/prtg6history"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2009-1849", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "35249", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/35249"}, {"name": "http://blog.bkis.com/?p=704", "refsource": "MISC", "url": "http://blog.bkis.com/?p=704"}, {"name": "35128", "refsource": "BID", "url": "http://www.securityfocus.com/bid/35128"}, {"name": "http://www.paessler.com/support/kb/questions/prtg6history", "refsource": "CONFIRM", "url": "http://www.paessler.com/support/kb/questions/prtg6history"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2009-1849", "datePublished": "2022-10-03T16:23:59", "dateReserved": "2022-10-03T00:00:00", "dateUpdated": "2022-10-03T16:23:59", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:*:*:*:*:*:*:*:*", "matchCriteriaId": "7EB46CD8-7E79-48E6-ACA8-58646CD5DFD7", "versionEndIncluding": "6.2.977", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.0.7.139:*:*:*:*:*:*:*", "matchCriteriaId": "EF160BB3-D13E-46A6-8223-524440C3F993", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.0.8.154:*:*:*:*:*:*:*", "matchCriteriaId": "858DE93A-F8D5-421F-9A9A-407F0FC60890", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.256:*:*:*:*:*:*:*", "matchCriteriaId": "1FBE495A-FAAD-4DE8-913D-CAC6F8B5F29A", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.257:*:*:*:*:*:*:*", "matchCriteriaId": "E9FCC4E3-BB37-4BC9-9046-06952FC2571A", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.265:*:*:*:*:*:*:*", "matchCriteriaId": "7510E041-535F-4925-B7DA-3E34C59EC1CB", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.1.0.266:*:*:*:*:*:*:*", "matchCriteriaId": "42B8D289-3CC2-49C3-82ED-20A80CCD824E", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.356:*:*:*:*:*:*:*", "matchCriteriaId": "FA086843-99C5-489F-8036-3DCCE7046A94", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.357:*:*:*:*:*:*:*", "matchCriteriaId": "9E35BEC0-4FEE-48D9-9748-72C76B2330DD", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.363:*:*:*:*:*:*:*", "matchCriteriaId": "E1103E40-44D6-47CB-AA49-69454FB5AA8E", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.0.364:*:*:*:*:*:*:*", "matchCriteriaId": "E733A72C-C955-43A0-82FA-018859620751", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.1.385:*:*:*:*:*:*:*", "matchCriteriaId": "DB0961E2-BDEA-4F4E-BF99-91E468CD5E4A", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.2.1.386:*:*:*:*:*:*:*", "matchCriteriaId": "737308B8-F130-4C5E-A7E8-11BB93EF1FEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.0.470:*:*:*:*:*:*:*", "matchCriteriaId": "42EAD7DC-3EE5-4CA2-BC65-CC3AEA65DC78", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.0.471:*:*:*:*:*:*:*", "matchCriteriaId": "D464FD9D-EBC7-44CE-85FA-02F78CA98ECE", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.498:*:*:*:*:*:*:*", "matchCriteriaId": "D05A59D2-BA10-4165-93FC-43B8C204871D", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.505:*:*:*:*:*:*:*", "matchCriteriaId": "3975137E-8EE2-4190-92EA-13A40DD01454", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.510:*:*:*:*:*:*:*", "matchCriteriaId": "7F3BFEC7-FD2F-40EE-B9FF-BF386E5A803E", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.522:*:*:*:*:*:*:*", "matchCriteriaId": "687C3053-7089-475F-A276-01A01A17ACFC", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.534:*:*:*:*:*:*:*", "matchCriteriaId": "C0C3C6AB-CBEC-4F19-9AC7-858DDF2B5DC5", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.562:*:*:*:*:*:*:*", "matchCriteriaId": "0B95DF35-45CE-497E-8602-061E1C84DD0A", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:4.3.1.566:*:*:*:*:*:*:*", "matchCriteriaId": "480EB1A5-54EC-4089-9D96-62D39C58BFFD", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.1.300:*:*:*:*:*:*:*", "matchCriteriaId": "8DE4A952-49D7-4D56-A7F6-C18641BBFA38", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.1.310:*:*:*:*:*:*:*", "matchCriteriaId": "9C8D0B8B-DB77-498D-AEDC-566A0A87DC26", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.1.356:*:*:*:*:*:*:*", "matchCriteriaId": "31119ED0-80F5-41DE-B8AF-AC443791B58C", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.3.379:*:*:*:*:*:*:*", "matchCriteriaId": "AC55092F-F428-48ED-8345-DCD620B2BFE0", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.0.3.398:*:*:*:*:*:*:*", "matchCriteriaId": "86A62E3B-2727-4B5F-BF8C-52099F901C41", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.1.0.452:*:*:*:*:*:*:*", "matchCriteriaId": "61DB3915-E534-44E4-87F5-63D614B7899A", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.1.1.474:*:*:*:*:*:*:*", "matchCriteriaId": "C4539CCB-6727-4068-93AA-601EF54818BB", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.548:*:*:*:*:*:*:*", "matchCriteriaId": "79AD54E2-8F65-47E5-805E-EE249D44A148", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.549:*:*:*:*:*:*:*", "matchCriteriaId": "1A40DC9A-6AFB-47F3-BD83-CB046F3EB73D", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.559:*:*:*:*:*:*:*", "matchCriteriaId": "8EC50905-5919-4F54-94DD-081FAF99DCCF", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.560:*:*:*:*:*:*:*", "matchCriteriaId": "060873E0-FECA-49AD-A116-78F8979853E2", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.565:*:*:*:*:*:*:*", "matchCriteriaId": "CD1A2C75-B4C8-42C7-B28A-E82BAFC893C0", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.566:*:*:*:*:*:*:*", "matchCriteriaId": "EF5742D1-8BA7-4FBC-8F8F-E62D5551F9C8", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.574:*:*:*:*:*:*:*", "matchCriteriaId": "DAF7EF38-CD51-4A73-AFC2-1F3669C6276A", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.575:*:*:*:*:*:*:*", "matchCriteriaId": "F9B65DA1-587C-497F-9950-9D809C5AAE2A", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.581:*:*:*:*:*:*:*", "matchCriteriaId": "DECA3D57-6886-49AD-AA8C-1BFC2B95AC9D", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.2.0.582:*:*:*:*:*:*:*", "matchCriteriaId": "04789BF9-8D3B-4DBB-A5D1-EE1422FF5609", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.687:*:*:*:*:*:*:*", "matchCriteriaId": "8EEDDEEA-0DB1-4F70-B92D-B08CA65E7893", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.738:*:*:*:*:*:*:*", "matchCriteriaId": "89C9927F-9723-4BA8-8AEE-09C1835D33EA", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.739:*:*:*:*:*:*:*", "matchCriteriaId": "D5A56729-2F74-43F7-A9B6-33E765C581A0", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.758:*:*:*:*:*:*:*", "matchCriteriaId": "BCB7985A-0484-4741-9A39-78105AE1B690", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.759:*:*:*:*:*:*:*", "matchCriteriaId": "BE5D7BD1-9F60-4C85-9E23-7DB1D6F14F82", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.812:*:*:*:*:*:*:*", "matchCriteriaId": "A296F328-B1B4-4B95-AEA9-DC7A899852EC", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.813:*:*:*:*:*:*:*", "matchCriteriaId": "8D933F67-548C-438A-96F5-42706125123E", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.833:*:*:*:*:*:*:*", "matchCriteriaId": "985A84B5-1EA8-4939-AE5A-DDF3BF24530E", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.834:*:*:*:*:*:*:*", "matchCriteriaId": "F19FDECF-1D4C-41A6-828F-933E47E21419", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.862:*:*:*:*:*:*:*", "matchCriteriaId": "D0E9B0D4-D408-4383-9B0E-D931B350A035", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:5.3.0.863:*:*:*:*:*:*:*", "matchCriteriaId": "EB6222BC-C31B-4168-AC89-DB34F85115C2", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.2.255:*:*:*:*:*:*:*", "matchCriteriaId": "523BA24F-AEF3-401B-A4C8-4AE2A6F1FA77", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.2.256:*:*:*:*:*:*:*", "matchCriteriaId": "AF35DFBC-ABFE-4776-A9FE-4ED1FD4DA7CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.258:*:*:*:*:*:*:*", "matchCriteriaId": "3AE82434-3D52-4DD6-860B-A259F55CB86C", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.259:*:*:*:*:*:*:*", "matchCriteriaId": "C4DE8E48-D315-42F1-933D-4048F8C868CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.261:*:*:*:*:*:*:*", "matchCriteriaId": "F75EDE82-5D59-462A-8792-FE7585F03673", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.262:*:*:*:*:*:*:*", "matchCriteriaId": "9F7B8FF0-5E19-4527-947D-124B6E4BDF29", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.284:*:*:*:*:*:*:*", "matchCriteriaId": "628D9547-8661-4FB5-A5D7-593B93CDF666", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.3.285:*:*:*:*:*:*:*", "matchCriteriaId": "E23AAC1E-6081-46D4-9B91-DBA79656642F", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.332:*:*:*:*:*:*:*", "matchCriteriaId": "2BED3603-BD98-4C6D-AD86-C0E8FDAF530E", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.333:*:*:*:*:*:*:*", "matchCriteriaId": "BEC7F90A-0DE4-4D70-8CC7-2313DDA5791A", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.335:*:*:*:*:*:*:*", "matchCriteriaId": "27FE080A-B2EF-415C-A6A6-762C8DDBF959", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.336:*:*:*:*:*:*:*", "matchCriteriaId": "593B0A84-0DFC-414F-8A34-6C8790876EE9", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.393:*:*:*:*:*:*:*", "matchCriteriaId": "0456E733-F112-4B54-AECC-32EC933F5920", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.4.394:*:*:*:*:*:*:*", "matchCriteriaId": "3E53FD0B-DD3F-4C66-97C1-04609556286F", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.417:*:*:*:*:*:*:*", "matchCriteriaId": "BFFCC4D4-682E-480C-B1F8-83DB43B6B9D8", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.441:*:*:*:*:*:*:*", "matchCriteriaId": "8786AC61-7441-4E3E-AE9F-E985D737BD20", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.442:*:*:*:*:*:*:*", "matchCriteriaId": "678CAD17-2B48-4C29-B025-AF0D3A51DA10", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.450:*:*:*:*:*:*:*", "matchCriteriaId": "199E6F79-1EAE-458A-A6FB-A60C3D211751", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.5.451:*:*:*:*:*:*:*", "matchCriteriaId": "3D11D880-AC3B-433B-82E2-88E6F11ACD4F", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.585:*:*:*:*:*:*:*", "matchCriteriaId": "0557C778-CE93-4494-96A4-F5FCD30C1009", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.586:*:*:*:*:*:*:*", "matchCriteriaId": "9657EEAB-9901-4AFA-B136-84AF9394242E", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.601:*:*:*:*:*:*:*", "matchCriteriaId": "0EB7DDF4-6E0B-41E7-8853-6A92E5557768", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.602:*:*:*:*:*:*:*", "matchCriteriaId": "4871FE92-DF4D-44B6-9A36-6F3B04F46A24", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.625:*:*:*:*:*:*:*", "matchCriteriaId": "D673D1D0-174A-4C89-85B4-14674DE2DF2E", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.626:*:*:*:*:*:*:*", "matchCriteriaId": "34AC3B6A-F9AE-4E9F-9FEC-A2CB8519F774", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.675:*:*:*:*:*:*:*", "matchCriteriaId": "97DE6BC8-9C96-4484-A316-6DF8D14D5973", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.0.6.676:*:*:*:*:*:*:*", "matchCriteriaId": "D7649A66-3DA0-4B8E-9600-55F973015887", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.683_beta:*:*:*:*:*:*:*", "matchCriteriaId": "236A9603-3512-4E2F-9219-B2A7618BC9C0", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.750:*:*:*:*:*:*:*", "matchCriteriaId": "DC47944B-1875-4E78-BD04-9A5B42B946DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.751:*:*:*:*:*:*:*", "matchCriteriaId": "7BDACFEB-6371-4410-B1CC-73444DABD7C0", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.753:*:*:*:*:*:*:*", "matchCriteriaId": "92F4B6B4-3929-4615-BB24-B7A9162D39FC", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.754:*:*:*:*:*:*:*", "matchCriteriaId": "758DBBC9-840F-449A-92B2-CF57618C2D76", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.756:*:*:*:*:*:*:*", "matchCriteriaId": "A0BBBDC5-2E05-418B-B304-50A13EB7DDF0", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.0.757:*:*:*:*:*:*:*", "matchCriteriaId": "670477DE-6EA7-40F6-95CB-890F5AE95EEE", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.1.854:*:*:*:*:*:*:*", "matchCriteriaId": "CA10F36E-8CB5-47CB-966B-A8EA437582E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.1.1.855:*:*:*:*:*:*:*", "matchCriteriaId": "52209A39-851A-4EED-9F82-336A5289BD7F", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.0.907:*:*:*:*:*:*:*", "matchCriteriaId": "88F1D13B-DEA2-4FAC-BDE3-CC5BDBDCF314", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.0.908:*:*:*:*:*:*:*", "matchCriteriaId": "468F35D5-9E88-40FB-B59B-0FCC65D561FF", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.950:*:*:*:*:*:*:*", "matchCriteriaId": "97A41779-9099-40FB-840B-77CA6E0EC3FF", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.951:*:*:*:*:*:*:*", "matchCriteriaId": "F03F66F5-5964-4D6E-9FA8-9A16A7E925CE", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.957:*:*:*:*:*:*:*", "matchCriteriaId": "2EC3282B-7F9D-4733-9885-A62EF09BC4DB", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.958:*:*:*:*:*:*:*", "matchCriteriaId": "A54E0D31-6FC6-40D9-AD6E-3E1A04188627", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.963:*:*:*:*:*:*:*", "matchCriteriaId": "FCFF0A3D-E902-4337-B934-C04F481C78FE", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher:6.2.1.964:*:*:*:*:*:*:*", "matchCriteriaId": "98DAB8C9-8DBD-4BD5-A165-DEC63206C3E9", "vulnerable": true}, {"criteria": "cpe:2.3:a:paessler:prtg_traffic_grapher6.0.5.416:*:*:*:*:*:*:*:*", "matchCriteriaId": "34B19C37-5393-432D-98BF-4261528C92B0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors."}, {"lang": "es", "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en funci\u00f3n Monitor_Bandwidth en PRTG Traffic Grapher v6.2.2.977 y anteriores permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elecci\u00f3n mediante vectores no especificados."}], "id": "CVE-2009-1849", "lastModified": "2009-06-29T04:00:00.000", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 4.3, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2009-06-01T19:30:00.313", "references": [{"source": "cve@mitre.org", "url": "http://blog.bkis.com/?p=704"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/35249"}, {"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://www.paessler.com/support/kb/questions/prtg6history"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/35128"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}