Skip to content
Noroxi

Paessler records

41 published records for vendor paessler.

Researcher profile

Entered KEV
2 · 4.9%
Weaponized
3 · 7.3%
Pre-auth RCE
1
With a fix record
0%
Median publish → KEV
2338 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

41 records
  • CVE-2018-19410
    98Now

    PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including admin

    CriticalCVSS 9.8KEVWeaponizedEPSS 97%

    paessler · prtg network monitorNov 21, 2018

  • CVE-2018-9276
    84Now

    An issue was discovered in PRTG Network Monitor before 18.2.39.

    HighCVSS 7.2KEVWeaponizedEPSS 86%

    paessler · prtg network monitorJul 2, 2018

  • CVE-2023-32782
    45Plan

    A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with wri

    HighCVSS 7.2No exploitEPSS 56%

    paessler · prtg network monitorAug 9, 2023

  • CVE-2020-10374
    40Plan

    A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted

    CriticalCVSS 9.8No exploitEPSS 4%

    paessler · prtg network monitorMar 30, 2020

  • CVE-2006-4461
    40Plan

    Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the probe settin

    CriticalCVSS 10.0No exploitEPSS 1%

    paessler · ipcheck server monitorAug 31, 2006

  • CVE-2020-11547
    37Monitor

    PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server it

    MediumCVSS 5.3Proof of conceptEPSS 52%

    paessler · prtg network monitorApr 4, 2020

  • CVE-2018-19204
    36Monitor

    PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and O

    HighCVSS 8.8No exploitEPSS 4%

    paessler · prtg network monitorNov 12, 2018

  • CVE-2018-19411
    35Monitor

    PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write acco

    HighCVSS 8.8No exploitEPSS 0%

    paessler · prtg network monitorNov 21, 2018

  • CVE-2023-31452
    35Monitor

    A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows remote attackers to pe

    HighCVSS 8.8No exploitEPSS 0%

    paessler · prtg network monitorAug 9, 2023

  • CVE-2023-32781
    32Monitor

    A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user wit

    HighCVSS 7.2WeaponizedEPSS 14%

    paessler · prtg network monitorAug 9, 2023

  • CVE-2018-10253
    32Monitor

    Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls.

    HighCVSS 7.5Proof of conceptEPSS 7%

    paessler · prtg network monitorApr 20, 2018

  • CVE-2018-19203
    31Monitor

    PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTT

    HighCVSS 7.5No exploitEPSS 2%

    paessler · prtg network monitorNov 12, 2018

  • CVE-2019-11073
    30Monitor

    A Remote Code Execution vulnerability exists in PRTG Network Monitor before 19.4.54.1506 that allows attackers to execute code due to insuff

    HighCVSS 7.2No exploitEPSS 6%

    paessler · prtg network monitorMar 16, 2020

  • CVE-2019-11074
    29Monitor

    A Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and below that allows attackers to place files in

    HighCVSS 7.2No exploitEPSS 4%

    paessler · prtg network monitorMar 17, 2020

  • CVE-2017-15651
    26Monitor

    PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then pro

    MediumCVSS 6.7No exploitEPSS 1%

    paessler · prtg network monitorOct 19, 2017

  • CVE-2015-7743
    26Monitor

    XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files

    MediumCVSS 6.5No exploitEPSS 1%

    paessler · prtg network monitorJan 23, 2017

  • CVE-2017-15917
    26Monitor

    In Paessler PRTG Network Monitor 17.3.33.2830, it's possible to create a Map as a read-only user, by forging a request and sending it to the

    MediumCVSS 6.5No exploitEPSS 0%

    paessler · prtg network monitorOct 26, 2017

  • CVE-2025-67835
    26Monitor

    Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notification Contacts func

    MediumCVSS 6.5No exploitEPSS 0%

    paessler · prtg network monitorJan 14, 2026

  • CVE-2023-51630
    25Monitor

    Paessler PRTG Network Monitor Cross-Site Scripting Authentication Bypass Vulnerability

    MediumCVSS 6.1No exploitEPSS 1%

    paessler · prtg network monitorFeb 8, 2024

  • CVE-2019-9207
    24Monitor

    PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter.

    MediumCVSS 6.1No exploitEPSS 1%

    paessler · prtg network monitorDec 31, 2019

  • CVE-2019-9206
    24Monitor

    PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter.

    MediumCVSS 6.1No exploitEPSS 1%

    paessler · prtg network monitorDec 31, 2019

  • CVE-2024-12833
    24Monitor

    Paessler PRTG Network Monitor SNMP Cross-Site Scripting Authentication Bypass Vulnerability

    MediumCVSS 6.1No exploitEPSS 0%

    paessler · prtg network monitorFeb 11, 2025

  • CVE-2017-9816
    24Monitor

    Cross-site scripting (XSS) vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary we

    MediumCVSS 6.1No exploitEPSS 0%

    paessler · prtg network monitorAug 18, 2017

  • CVE-2017-15009
    24Monitor

    PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page), via the errormsg pa

    MediumCVSS 6.1No exploitEPSS 0%

    paessler · prtg network monitorOct 3, 2017

  • CVE-2016-5078
    24Monitor

    Paessler PRTG before 16.2.24.4045 has XSS via SNMP.

    MediumCVSS 6.1No exploitEPSS 0%

    paessler · prtg network monitorApr 9, 2017