Записи Paessler
41 опубликованных записей вендора paessler.
Профиль для исследователя
- Попали в KEV
- 2 · 4,9 %
- С эксплойтом
- 3 · 7,3 %
- Pre-auth RCE
- 1
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- 2338 дн.
Повторяющиеся классы
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')17
- CWE-20 Improper Input Validation3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-269 Improper Privilege Management2
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
41 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
98Срочно | CVE-2018-19410Готовый эксплойт | PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including adminpaessler · prtg network monitor | Критическая9,8 | KEV | 97,9 % | 21 нояб. 2018 г. |
84Срочно | CVE-2018-9276Готовый эксплойт | An issue was discovered in PRTG Network Monitor before 18.2.39.paessler · prtg network monitor · CWE-78 | Высокая7,2 | KEV | 87,0 % | 2 июл. 2018 г. |
45В плане | CVE-2023-32782Эксплойта нет | A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with wripaessler · prtg network monitor · CWE-77 | Высокая7,2 | — | 56,2 % | 9 авг. 2023 г. |
40В плане | CVE-2020-10374Эксплойта нет | A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a craftedpaessler · prtg network monitor · CWE-20 | Критическая9,8 | — | 4,7 % | 30 мар. 2020 г. |
40В плане | CVE-2006-4461Эксплойта нет | Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the probe settinpaessler · ipcheck server monitor | Критическая10,0 | — | 1,4 % | 31 авг. 2006 г. |
37Наблюдать | CVE-2020-11547Proof of concept | PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itpaessler · prtg network monitor · CWE-306 | Средняя5,3 | — | 52,1 % | 4 апр. 2020 г. |
36Наблюдать | CVE-2018-19204Эксплойта нет | PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and Opaessler · prtg network monitor · CWE-20 | Высокая8,8 | — | 4,6 % | 12 нояб. 2018 г. |
35Наблюдать | CVE-2018-19411Эксплойта нет | PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write accopaessler · prtg network monitor · CWE-269 | Высокая8,8 | — | 0,9 % | 21 нояб. 2018 г. |
35Наблюдать | CVE-2023-31452Эксплойта нет | A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows remote attackers to pepaessler · prtg network monitor · CWE-352 | Высокая8,8 | — | 0,7 % | 9 авг. 2023 г. |
32Наблюдать | CVE-2023-32781Готовый эксплойт | A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user witpaessler · prtg network monitor · CWE-77 | Высокая7,2 | — | 14,3 % | 9 авг. 2023 г. |
32Наблюдать | CVE-2018-10253Proof of concept | Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls.paessler · prtg network monitor · CWE-119 | Высокая7,5 | — | 7,2 % | 20 апр. 2018 г. |
31Наблюдать | CVE-2018-19203Эксплойта нет | PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTpaessler · prtg network monitor | Высокая7,5 | — | 2,8 % | 12 нояб. 2018 г. |
30Наблюдать | CVE-2019-11073Эксплойта нет | A Remote Code Execution vulnerability exists in PRTG Network Monitor before 19.4.54.1506 that allows attackers to execute code due to insuffpaessler · prtg network monitor · CWE-74 | Высокая7,2 | — | 6,3 % | 16 мар. 2020 г. |
29Наблюдать | CVE-2019-11074Эксплойта нет | A Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and below that allows attackers to place files inpaessler · prtg network monitor · CWE-434 | Высокая7,2 | — | 4,5 % | 17 мар. 2020 г. |
26Наблюдать | CVE-2017-15651Эксплойта нет | PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then propaessler · prtg network monitor · CWE-20 | Средняя6,7 | — | 1,4 % | 19 окт. 2017 г. |
26Наблюдать | CVE-2015-7743Эксплойта нет | XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary filespaessler · prtg network monitor · CWE-611 | Средняя6,5 | — | 1,3 % | 23 янв. 2017 г. |
26Наблюдать | CVE-2017-15917Эксплойта нет | In Paessler PRTG Network Monitor 17.3.33.2830, it's possible to create a Map as a read-only user, by forging a request and sending it to thepaessler · prtg network monitor · CWE-269 | Средняя6,5 | — | 0,7 % | 26 окт. 2017 г. |
26Наблюдать | CVE-2025-67835Эксплойта нет | Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notification Contacts funcpaessler · prtg network monitor · CWE-400 | Средняя6,5 | — | 0,4 % | 14 янв. 2026 г. |
25Наблюдать | CVE-2023-51630Эксплойта нет | Paessler PRTG Network Monitor Cross-Site Scripting Authentication Bypass Vulnerabilitypaessler · prtg network monitor · CWE-79 | Средняя6,1 | — | 1,7 % | 8 февр. 2024 г. |
24Наблюдать | CVE-2019-9207Эксплойта нет | PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter.paessler · prtg network monitor · CWE-79 | Средняя6,1 | — | 1,2 % | 31 дек. 2019 г. |
24Наблюдать | CVE-2019-9206Эксплойта нет | PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter.paessler · prtg network monitor · CWE-79 | Средняя6,1 | — | 1,2 % | 31 дек. 2019 г. |
24Наблюдать | CVE-2024-12833Эксплойта нет | Paessler PRTG Network Monitor SNMP Cross-Site Scripting Authentication Bypass Vulnerabilitypaessler · prtg network monitor · CWE-79 | Средняя6,1 | — | 0,9 % | 11 февр. 2025 г. |
24Наблюдать | CVE-2017-9816Эксплойта нет | Cross-site scripting (XSS) vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary wepaessler · prtg network monitor · CWE-79 | Средняя6,1 | — | 0,8 % | 18 авг. 2017 г. |
24Наблюдать | CVE-2017-15009Эксплойта нет | PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page), via the errormsg papaessler · prtg network monitor · CWE-79 | Средняя6,1 | — | 0,7 % | 3 окт. 2017 г. |
24Наблюдать | CVE-2016-5078Эксплойта нет | Paessler PRTG before 16.2.24.4045 has XSS via SNMP.paessler · prtg network monitor · CWE-79 | Средняя6,1 | — | 0,7 % | 9 апр. 2017 г. |
- CVE-2018-1941098Срочно
PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including admin
КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 98 %paessler · prtg network monitor21 нояб. 2018 г.
- CVE-2018-927684Срочно
An issue was discovered in PRTG Network Monitor before 18.2.39.
ВысокаяCVSS 7,2KEVГотовый эксплойтEPSS 87 %paessler · prtg network monitor2 июл. 2018 г.
- CVE-2023-3278245В плане
A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with wri
ВысокаяCVSS 7,2Эксплойта нетEPSS 56 %paessler · prtg network monitor9 авг. 2023 г.
- CVE-2020-1037440В плане
A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted
КритическаяCVSS 9,8Эксплойта нетEPSS 5 %paessler · prtg network monitor30 мар. 2020 г.
- CVE-2006-446140В плане
Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the probe settin
КритическаяCVSS 10,0Эксплойта нетEPSS 1 %paessler · ipcheck server monitor31 авг. 2006 г.
- CVE-2020-1154737Наблюдать
PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server it
СредняяCVSS 5,3Proof of conceptEPSS 52 %paessler · prtg network monitor4 апр. 2020 г.
- CVE-2018-1920436Наблюдать
PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and O
ВысокаяCVSS 8,8Эксплойта нетEPSS 5 %paessler · prtg network monitor12 нояб. 2018 г.
- CVE-2018-1941135Наблюдать
PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write acco
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %paessler · prtg network monitor21 нояб. 2018 г.
- CVE-2023-3145235Наблюдать
A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows remote attackers to pe
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %paessler · prtg network monitor9 авг. 2023 г.
- CVE-2023-3278132Наблюдать
A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user wit
ВысокаяCVSS 7,2Готовый эксплойтEPSS 14 %paessler · prtg network monitor9 авг. 2023 г.
- CVE-2018-1025332Наблюдать
Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls.
ВысокаяCVSS 7,5Proof of conceptEPSS 7 %paessler · prtg network monitor20 апр. 2018 г.
- CVE-2018-1920331Наблюдать
PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTT
ВысокаяCVSS 7,5Эксплойта нетEPSS 3 %paessler · prtg network monitor12 нояб. 2018 г.
- CVE-2019-1107330Наблюдать
A Remote Code Execution vulnerability exists in PRTG Network Monitor before 19.4.54.1506 that allows attackers to execute code due to insuff
ВысокаяCVSS 7,2Эксплойта нетEPSS 6 %paessler · prtg network monitor16 мар. 2020 г.
- CVE-2019-1107429Наблюдать
A Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and below that allows attackers to place files in
ВысокаяCVSS 7,2Эксплойта нетEPSS 5 %paessler · prtg network monitor17 мар. 2020 г.
- CVE-2017-1565126Наблюдать
PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then pro
СредняяCVSS 6,7Эксплойта нетEPSS 1 %paessler · prtg network monitor19 окт. 2017 г.
- CVE-2015-774326Наблюдать
XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files
СредняяCVSS 6,5Эксплойта нетEPSS 1 %paessler · prtg network monitor23 янв. 2017 г.
- CVE-2017-1591726Наблюдать
In Paessler PRTG Network Monitor 17.3.33.2830, it's possible to create a Map as a read-only user, by forging a request and sending it to the
СредняяCVSS 6,5Эксплойта нетEPSS 1 %paessler · prtg network monitor26 окт. 2017 г.
- CVE-2025-6783526Наблюдать
Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notification Contacts func
СредняяCVSS 6,5Эксплойта нетEPSS 0 %paessler · prtg network monitor14 янв. 2026 г.
- CVE-2023-5163025Наблюдать
Paessler PRTG Network Monitor Cross-Site Scripting Authentication Bypass Vulnerability
СредняяCVSS 6,1Эксплойта нетEPSS 2 %paessler · prtg network monitor8 февр. 2024 г.
- CVE-2019-920724Наблюдать
PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter.
СредняяCVSS 6,1Эксплойта нетEPSS 1 %paessler · prtg network monitor31 дек. 2019 г.
- CVE-2019-920624Наблюдать
PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter.
СредняяCVSS 6,1Эксплойта нетEPSS 1 %paessler · prtg network monitor31 дек. 2019 г.
- CVE-2024-1283324Наблюдать
Paessler PRTG Network Monitor SNMP Cross-Site Scripting Authentication Bypass Vulnerability
СредняяCVSS 6,1Эксплойта нетEPSS 1 %paessler · prtg network monitor11 февр. 2025 г.
- CVE-2017-981624Наблюдать
Cross-site scripting (XSS) vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary we
СредняяCVSS 6,1Эксплойта нетEPSS 1 %paessler · prtg network monitor18 авг. 2017 г.
- CVE-2017-1500924Наблюдать
PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page), via the errormsg pa
СредняяCVSS 6,1Эксплойта нетEPSS 1 %paessler · prtg network monitor3 окт. 2017 г.
- CVE-2016-507824Наблюдать
Paessler PRTG before 16.2.24.4045 has XSS via SNMP.
СредняяCVSS 6,1Эксплойта нетEPSS 1 %paessler · prtg network monitor9 апр. 2017 г.