CVE-2009-1849: Paessler PRTG Traffic Grapher

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Paessler PRTG Traffic Grapher: up to and including 6.2.977; version 4.0.7.139 only; version 4.0.8.154 only; version 4.1.0.256 only; version 4.1.0.257 only; version 4.1.0.265 only; …
• Paessler PRTG Traffic GRAPHER6.0.5.416: any version

Published 2009-06-01. Last modified 2026-06-16.