CVE-2009-2069

Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.

Published: 2009-06-15 Last update: 2026-04-23 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2009-2069 is rated Moderate Risk (51.9/100): CVSS Medium severity, with medium exploitation likelihood (EPSS 2.20%). Review affected assets and schedule remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2009-2069

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-02-28 2.95% 2.20% -0.75%
2 2025-03-30 2.53% 2.95% +0.42%
3 2025-03-29 — 2.53% —

Full EPSS history (11 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2009-2069

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.8 2.0 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:P)
Partial confidentiality impact.
Integrity impact (I:P)
Partial integrity impact.
Availability impact (A:N)
No availability impact.
 8.6 4.9 [email protected]

Weakness enumeration for CVE-2009-2069

Affected software / configurations for CVE-2009-2069

Vendor Product Version Raw CPE
microsoft ie 5.0 cpe:2.3:a:microsoft:ie:5.0:sp1:*:*:*:*:*:*
microsoft ie 5.0 cpe:2.3:a:microsoft:ie:5.0:sp4:*:*:*:*:*:*
microsoft ie 5.22 cpe:2.3:a:microsoft:ie:5.22:*:*:*:*:*:*:*
microsoft ie 6.0 cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*
microsoft ie 6.0 cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*
microsoft internet_explorer 3.0 cpe:2.3:a:microsoft:internet_explorer:3.0:*:*:*:*:*:*:*
microsoft internet_explorer 3.0.1 cpe:2.3:a:microsoft:internet_explorer:3.0.1:*:*:*:*:*:*:*
microsoft internet_explorer 3.0.2 cpe:2.3:a:microsoft:internet_explorer:3.0.2:*:*:*:*:*:*:*
microsoft internet_explorer 3.1 cpe:2.3:a:microsoft:internet_explorer:3.1:*:*:*:*:*:*:*
microsoft internet_explorer 3.2 cpe:2.3:a:microsoft:internet_explorer:3.2:*:*:*:*:*:*:*
microsoft internet_explorer 4.0 cpe:2.3:a:microsoft:internet_explorer:4.0:*:*:*:*:*:*:*
microsoft internet_explorer 4.0.1 cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*
microsoft internet_explorer 4.0.1 cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp1:*:*:*:*:*:*
microsoft internet_explorer 4.0.1 cpe:2.3:a:microsoft:internet_explorer:4.0.1:sp2:*:*:*:*:*:*
microsoft internet_explorer 4.01 cpe:2.3:a:microsoft:internet_explorer:4.01:*:*:*:*:*:*:*
microsoft internet_explorer 4.1 cpe:2.3:a:microsoft:internet_explorer:4.1:*:*:*:*:*:*:*
microsoft internet_explorer 4.01 cpe:2.3:a:microsoft:internet_explorer:4.01:sp1:*:*:*:*:*:*
microsoft internet_explorer 4.5 cpe:2.3:a:microsoft:internet_explorer:4.5:*:*:*:*:*:*:*
microsoft internet_explorer 4.40.308 cpe:2.3:a:microsoft:internet_explorer:4.40.308:*:*:*:*:*:*:*
microsoft internet_explorer 4.40.520 cpe:2.3:a:microsoft:internet_explorer:4.40.520:*:*:*:*:*:*:*
microsoft internet_explorer 4.70.1155 cpe:2.3:a:microsoft:internet_explorer:4.70.1155:*:*:*:*:*:*:*
microsoft internet_explorer 4.70.1158 cpe:2.3:a:microsoft:internet_explorer:4.70.1158:*:*:*:*:*:*:*
microsoft internet_explorer 4.70.1215 cpe:2.3:a:microsoft:internet_explorer:4.70.1215:*:*:*:*:*:*:*
microsoft internet_explorer 4.70.1300 cpe:2.3:a:microsoft:internet_explorer:4.70.1300:*:*:*:*:*:*:*
microsoft internet_explorer 4.71.544 cpe:2.3:a:microsoft:internet_explorer:4.71.544:*:*:*:*:*:*:*
microsoft internet_explorer 4.71.1008.3 cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3:*:*:*:*:*:*:*
microsoft internet_explorer 4.71.1712.6 cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6:*:*:*:*:*:*:*
microsoft internet_explorer 4.72.2106.8 cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8:*:*:*:*:*:*:*
microsoft internet_explorer 4.72.3110.8 cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8:*:*:*:*:*:*:*
microsoft internet_explorer 4.72.3612.1713 cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713:*:*:*:*:*:*:*
microsoft internet_explorer 5 cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*
microsoft internet_explorer 5.0 cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*
microsoft internet_explorer 5.0.1 cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*
microsoft internet_explorer 5.0.1 cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*
microsoft internet_explorer 5.0.1 cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*
microsoft internet_explorer 5.0.1 cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*
microsoft internet_explorer 5.0.1 cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*
microsoft internet_explorer 5.00.0518.10 cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.0910.1309 cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.2014.0216 cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.2314.1003 cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.2614.3500 cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.2919.800 cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.2919.3800 cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.2919.6307 cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.2920.0000 cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.3103.1000 cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.3105.0106 cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.3314.2101 cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.3315.1000 cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.3502.1000 cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:*
microsoft internet_explorer 5.00.3700.1000 cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:*
microsoft internet_explorer 5.01 cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*
microsoft internet_explorer 5.1 cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*
microsoft internet_explorer 5.01 cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*
microsoft internet_explorer 5.01 cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*
microsoft internet_explorer 5.01 cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*
microsoft internet_explorer 5.01 cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*
microsoft internet_explorer 5.2.3 cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*
microsoft internet_explorer 5.5 cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*
microsoft internet_explorer 5.5 cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*
microsoft internet_explorer 5.5 cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*
microsoft internet_explorer 5.5 cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*
microsoft internet_explorer 5.50.3825.1300 cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300:*:*:*:*:*:*:*
microsoft internet_explorer 5.50.4030.2400 cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400:*:*:*:*:*:*:*
microsoft internet_explorer 5.50.4134.0600 cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600:*:*:*:*:*:*:*
microsoft internet_explorer 5.50.4308.2900 cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900:*:*:*:*:*:*:*
microsoft internet_explorer 5.50.4522.1800 cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800:*:*:*:*:*:*:*
microsoft internet_explorer 5.50.4807.2300 cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300:*:*:*:*:*:*:*
microsoft internet_explorer 6 cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*
microsoft internet_explorer 6 cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*
microsoft internet_explorer 6.0 cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*
microsoft internet_explorer 6.00.2462.0000 cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000:*:*:*:*:*:*:*
microsoft internet_explorer 6.00.2479.0006 cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006:*:*:*:*:*:*:*
microsoft internet_explorer 6.0.2600 cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*
microsoft internet_explorer 6.0.2800 cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*
microsoft internet_explorer 6.0.2800.1106 cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*
microsoft internet_explorer 6.00.2800.1106 cpe:2.3:a:microsoft:internet_explorer:6.00.2800.1106:*:*:*:*:*:*:*
microsoft internet_explorer 6.0.2900 cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*
microsoft internet_explorer 6.0.2900.2180 cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*

References for CVE-2009-2069

cvelogic Threat Intelligence