[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNicY-6SRDdErfk9Oi_OeDedipdlVKqxsLpstSxhT9kA":3,"g5a-risk:CVE-2009-1135":138},{"success":4,"data":5,"meta":136},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":82,"weaknesses":83,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":87,"seoMetadata":88,"configurations":113,"relatedVendorCves":127,"notableEvents":128},"CVE-2009-1135","What is CVE-2009-1135?","Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which allows remote attackers to gain the privileges of an arbitrary account, and access published web pages, via vectors involving attempted access to a network resource behind the ISA Server, aka \"Radius OTP Bypass Vulnerability.\"","Microsoft Internet Security and Acceleration (ISA) Server 2006 Gold and SP1, when Radius OTP is enabled, uses the HTTP-Basic authentication method, which all...","2009-07-15T15:30:01.327","2026-06-16T23:06:34.933",9,"AV:N\u002FAC:L\u002FAu:S\u002FC:C\u002FI:C\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","SINGLE","COMPLETE","",null,"HIGH",8,10,false,[],0.26454,[34,34,34,34,34,34,34],"Critical",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"microsoft","isa_server","2006","cpe:2.3:a:microsoft:isa_server:2006:*:*:*:*:*:*:*",1,[45,49,53,58,62,66,70,72,74,76,78,80],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F35784","Secunia",[],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fwww.securitytracker.com\u002Fid?1022547","Securitytracker",[],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fwww.us-cert.gov\u002Fcas\u002Ftechalerts\u002FTA09-195A.html","Us-cert",[57],"US Government Resource",{"url":59,"source":60,"tags":61},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2009\u002F1889","Vupen",[],{"url":63,"source":64,"tags":65},"https:\u002F\u002Fdocs.microsoft.com\u002Fen-us\u002Fsecurity-updates\u002Fsecuritybulletins\u002F2009\u002Fms09-031","Microsoft",[],{"url":67,"source":68,"tags":69},"https:\u002F\u002Foval.cisecurity.org\u002Frepository\u002Fsearch\u002Fdefinition\u002Foval%3Aorg.mitre.oval%3Adef%3A5649","Cisecurity",[],{"url":46,"source":47,"tags":71},[],{"url":50,"source":51,"tags":73},[],{"url":54,"source":55,"tags":75},[57],{"url":59,"source":60,"tags":77},[],{"url":63,"source":64,"tags":79},[],{"url":67,"source":68,"tags":81},[],12,[84],{"id":85,"name":85,"description":86},"Unknown","CWE-264",[],{"title":89,"metaDescription":90,"keywords":91,"canonicalUrl":92,"structuredData":93},"What is CVE-2009-1135? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2009-1135, a critical severity cyber security vulnerability from 2009. Microsoft Internet Security and Acceleration (ISA) Serve...","CVE-2009-1135, CVE-2009-1135 vulnerability, CVE-2009-1135 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2009, CVSS score, exploit, patch, remediation, microsoft security, isa_server vulnerability","\u002Fwhat-is\u002Fcve-2009-1135",{"@context":94,"@type":95,"headline":89,"description":90,"datePublished":10,"dateModified":11,"author":96,"publisher":100,"about":104,"mainEntityOfPage":108,"articleSection":111,"keywords":112},"https:\u002F\u002Fschema.org","TechArticle",{"@type":97,"name":98,"url":99},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":97,"name":98,"url":99,"logo":101},{"@type":102,"url":103},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":105,"name":6,"description":106,"additionalType":107},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":109,"@id":110},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2009-1135","Cybersecurity","CVE-2009-1135, CVE-2009-1135 vulnerability, CVE-2009-1135 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[114],{"Operator":28,"Negate":28,"Nodes":115},[116],{"Operator":117,"Negate":32,"CPEMatch":118},"OR",[119,121,124],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":120,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"D9552EF3-4A85-4F2A-927B-B485BBDB5BEF",{"Vulnerable":4,"Criteria":122,"MatchCriteriaID":123,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:microsoft:isa_server:2006:sp1:*:*:*:*:*:*","C2B6CDFF-1DA8-43A1-8363-77F4365852D5",{"Vulnerable":4,"Criteria":125,"MatchCriteriaID":126,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:microsoft:isa_server:2006:supportability:*:*:*:*:*:*","82E6155D-37B4-477D-980E-E1ECEC2E6CAE",[],[129],{"id":130,"eventType":131,"eventTime":132,"details":133,"label":134,"color":135},"b925ce22-2a68-4976-8a41-e01a71588da2","LOW_EPSS_DELTA","2026-06-16T04:07:01.631457+00:00","Daily EPSS score decreased by 0.129 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":137,"version":22},1792370398052,{"score":139,"band":140,"action":141,"scoredAt":142},55,"Medium","Plan remediation","2026-10-17T06:36:45.398669+00:00"]