PA
Vendor
Paessler
46
CVEs
2
On KEV
0
New 30D
Products
PN9.8
PRTG Network Monitor
Paessler
43 CVEs2 on KEV0 new
IS–
Ipcheck Server Monitor
Paessler
1 CVEs0 on KEV0 new
PT–
Prtg Traffic Grapher
Paessler
1 CVEs0 on KEV0 new
PT–
Prtg Traffic Grapher6.0.5.416
Paessler
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2023-22632 | PN PRTG Network Monitor Paessler | 2.7 | Sep 14 | PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the FTP Server Count Sensor |
| CVE-2023-45858 | PN PRTG Network Monitor Paessler | 8.6 | Sep 14 | A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files |
| CVE-2023-28148 | PN PRTG Network Monitor Paessler | 7.2 | Sep 14 | A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520 |
| CVE-2023-22631 | PN PRTG Network Monitor Paessler | 2.7 | Sep 14 | PRTG Network Monitor before 23.1.82 allows remote attackers to write to files via the HTTP XML/REST Sensor |
| CVE-2025-67834 | PN Prtg Network Monitor Paessler | 5.4 | Jan 14 | Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter |
| CVE-2025-67835 | PN Prtg Network Monitor Paessler | 6.5 | Jan 14 | Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notification Contacts functionality |
| CVE-2025-67833 | PN Prtg Network Monitor Paessler | 6.1 | Jan 14 | Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter |
| CVE-2024-12833 | PN PRTG Network Monitor Paessler | 6.1 | Feb 11 | Paessler PRTG Network Monitor SNMP Cross-Site Scripting Authentication Bypass Vulnerability |
| CVE-2023-51630 | PN PRTG Network Monitor Paessler | 6.1 | Feb 8 | Paessler PRTG Network Monitor Cross-Site Scripting Authentication Bypass Vulnerability |
| CVE-2023-31448 | PN Prtg Network Monitor Paessler | 4.7 | Aug 9 | A path traversal vulnerability was identified in the HL7 sensor in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permissions could trick the HL7… |
| CVE-2023-32782 | PN Prtg Network Monitor Paessler | 7.2 | Aug 9 | A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with write permissions could abuse the debug… |
| CVE-2023-32781 | PN Prtg Network Monitor Paessler | 7.2 | Aug 9 | A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions could abuse the… |
| CVE-2023-31452 | PN Prtg Network Monitor Paessler | 8.8 | Aug 9 | A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows remote attackers to perform actions with the permissions of a… |
| CVE-2023-31450 | PN Prtg Network Monitor Paessler | 4.7 | Aug 9 | A path traversal vulnerability was identified in the SQL v2 sensors in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permissions could trick the… |
| CVE-2023-31449 | PN Prtg Network Monitor Paessler | 4.7 | Aug 9 | A path traversal vulnerability was identified in the WMI Custom sensor in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permissions could trick the… |
| CVE-2022-35739 | PN Prtg Network Monitor Paessler | 5.3 | Oct 25 | PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to insert arbitrary content into the style tag for that device |
| CVE-2021-29643 | PN Prtg Network Monitor Paessler | 5.4 | Sep 13 | PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Directory instance |
| CVE-2021-34547 | PN Prtg Network Monitor Paessler | 4.3 | Jun 10 | PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation |
| CVE-2021-27220 | PN Prtg Network Monitor Paessler | 5.3 | Mar 31 | An issue was discovered in PRTG Network Monitor before 21.1.66.1623 |
| CVE-2020-14073 | PN Prtg Network Monitor Paessler | 5.4 | Jun 23 | XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties |
| CVE-2020-11547 | PN Prtg Network Monitor Paessler | 5.3 | Apr 5 | PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself (CPU usage, memory, Windows… |
| CVE-2020-10374 | PN Prtg Network Monitor Paessler | 9.8 | Mar 30 | A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or the what parameter of… |
| CVE-2019-11074 | PN Prtg Network Monitor Paessler | 7.2 | Mar 17 | A Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and below that allows attackers to place files in arbitrary locations with SYSTEM… |
| CVE-2019-11073 | PN Prtg Network Monitor Paessler | 7.2 | Mar 16 | A Remote Code Execution vulnerability exists in PRTG Network Monitor before 19.4.54.1506 that allows attackers to execute code due to insufficient sanitization when passing… |
| CVE-2019-19119 | PN Prtg Network Monitor Paessler | 5.5 | Feb 3 | An issue was discovered in PRTG 7.x through 19.4.53 |
| CVE-2019-9207 | PN Prtg Network Monitor Paessler | 6.1 | Dec 31 | PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter |
| CVE-2019-9206 | PN Prtg Network Monitor Paessler | 6.1 | Dec 31 | PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter |
| CVE-2018-14683 | PN Prtg Network Monitor Paessler | 6.1 | Apr 10 | PRTG before 19.1.49.1966 has Cross Site Scripting (XSS) in the WEBGUI |
| CVE-2018-19411 | PN Prtg Network Monitor Paessler | 8.8 | Nov 21 | PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including administrator) via an… |
| CVE-2018-19410 In wildKEV | PN Prtg Network Monitor Paessler | 9.8 | Nov 21 | Paessler PRTG Network Monitor Local File Inclusion Vulnerability |
| CVE-2018-19204 | PN Prtg Network Monitor Paessler | 8.8 | Nov 12 | PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and OS commands with system privileges |
| CVE-2018-19203 | PN Prtg Network Monitor Paessler | 7.5 | Nov 12 | PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTP request |
| CVE-2018-9276 In wildKEV | PN Prtg Network Monitor Paessler | 7.2 | Jul 2 | Paessler PRTG Network Monitor OS Command Injection Vulnerability |
| CVE-2018-10253 | PN Prtg Network Monitor Paessler | 7.5 | Apr 21 | Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls |
| CVE-2017-15917 | PN Prtg Network Monitor Paessler | 6.5 | Oct 26 | In Paessler PRTG Network Monitor 17.3.33.2830, it's possible to create a Map as a read-only user, by forging a request and sending it to the server |
| CVE-2017-15651 | PN Prtg Network Monitor Paessler | 6.7 | Oct 20 | PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then proceeding in spite of the error message |
| CVE-2017-15360 | PN Prtg Network Monitor Paessler | 5.4 | Oct 15 | PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script |
| CVE-2017-15009 | PN Prtg Network Monitor Paessler | 6.1 | Oct 4 | PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page), via the errormsg parameter |
| CVE-2017-15008 | PN Prtg Network Monitor Paessler | 4.8 | Oct 4 | PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to incorrect error handling for a %00 in the SRC attribute of… |
| CVE-2017-12879 | PN Prtg Network Monitor Paessler | 5.4 | Aug 24 | Cross-site scripting (XSS-STORED) vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers… |
| CVE-2017-9816 | PN Prtg Network Monitor Paessler | 6.1 | Aug 18 | Cross-site scripting (XSS) vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary web script or HTML via unspecified… |
| CVE-2016-5078 | PN Prtg Network Monitor Paessler | 6.1 | Apr 10 | Paessler PRTG before 16.2.24.4045 has XSS via SNMP |
| CVE-2015-7743 | PN Prtg Network Monitor Paessler | 6.5 | Jan 23 | XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files by creating a new HTTP XML/REST Value… |
| CVE-2009-1849 | PT Prtg Traffic Grapher6.0.5.416 Paessler | – | Jun 1 | Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or… |
| CVE-2006-4461 | IS Ipcheck Server Monitor Paessler | – | Aug 31 | Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the probe settings," which has unknown impact and… |
