Paessler kayıtları
paessler üreticisine ait 41 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 2 · %4,9
- Silahlaştırılmış
- 3 · %7,3
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- 2338 gün
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')17
- CWE-20 Improper Input Validation3
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-269 Improper Privilege Management2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
41 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
98Hemen | CVE-2018-19410Silahlaştırılmış | PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including adminpaessler · prtg network monitor | Kritik9,8 | KEV | %97,9 | 21 Kas 2018 |
84Hemen | CVE-2018-9276Silahlaştırılmış | An issue was discovered in PRTG Network Monitor before 18.2.39.paessler · prtg network monitor · CWE-78 | Yüksek7,2 | KEV | %87,0 | 2 Tem 2018 |
45Planlayın | CVE-2023-32782İstismar yok | A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with wripaessler · prtg network monitor · CWE-77 | Yüksek7,2 | — | %56,2 | 9 Ağu 2023 |
40Planlayın | CVE-2020-10374İstismar yok | A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a craftedpaessler · prtg network monitor · CWE-20 | Kritik9,8 | — | %4,7 | 30 Mar 2020 |
40Planlayın | CVE-2006-4461İstismar yok | Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the probe settinpaessler · ipcheck server monitor | Kritik10,0 | — | %1,4 | 31 Ağu 2006 |
37İzleyin | CVE-2020-11547Kavram kanıtı | PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itpaessler · prtg network monitor · CWE-306 | Orta5,3 | — | %52,1 | 4 Nis 2020 |
36İzleyin | CVE-2018-19204İstismar yok | PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and Opaessler · prtg network monitor · CWE-20 | Yüksek8,8 | — | %4,6 | 12 Kas 2018 |
35İzleyin | CVE-2018-19411İstismar yok | PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write accopaessler · prtg network monitor · CWE-269 | Yüksek8,8 | — | %0,9 | 21 Kas 2018 |
35İzleyin | CVE-2023-31452İstismar yok | A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows remote attackers to pepaessler · prtg network monitor · CWE-352 | Yüksek8,8 | — | %0,7 | 9 Ağu 2023 |
32İzleyin | CVE-2023-32781Silahlaştırılmış | A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user witpaessler · prtg network monitor · CWE-77 | Yüksek7,2 | — | %14,3 | 9 Ağu 2023 |
32İzleyin | CVE-2018-10253Kavram kanıtı | Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls.paessler · prtg network monitor · CWE-119 | Yüksek7,5 | — | %7,2 | 20 Nis 2018 |
31İzleyin | CVE-2018-19203İstismar yok | PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTpaessler · prtg network monitor | Yüksek7,5 | — | %2,8 | 12 Kas 2018 |
30İzleyin | CVE-2019-11073İstismar yok | A Remote Code Execution vulnerability exists in PRTG Network Monitor before 19.4.54.1506 that allows attackers to execute code due to insuffpaessler · prtg network monitor · CWE-74 | Yüksek7,2 | — | %6,3 | 16 Mar 2020 |
29İzleyin | CVE-2019-11074İstismar yok | A Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and below that allows attackers to place files inpaessler · prtg network monitor · CWE-434 | Yüksek7,2 | — | %4,5 | 17 Mar 2020 |
26İzleyin | CVE-2017-15651İstismar yok | PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then propaessler · prtg network monitor · CWE-20 | Orta6,7 | — | %1,4 | 19 Eki 2017 |
26İzleyin | CVE-2015-7743İstismar yok | XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary filespaessler · prtg network monitor · CWE-611 | Orta6,5 | — | %1,3 | 23 Oca 2017 |
26İzleyin | CVE-2017-15917İstismar yok | In Paessler PRTG Network Monitor 17.3.33.2830, it's possible to create a Map as a read-only user, by forging a request and sending it to thepaessler · prtg network monitor · CWE-269 | Orta6,5 | — | %0,7 | 26 Eki 2017 |
26İzleyin | CVE-2025-67835İstismar yok | Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notification Contacts funcpaessler · prtg network monitor · CWE-400 | Orta6,5 | — | %0,4 | 14 Oca 2026 |
25İzleyin | CVE-2023-51630İstismar yok | Paessler PRTG Network Monitor Cross-Site Scripting Authentication Bypass Vulnerabilitypaessler · prtg network monitor · CWE-79 | Orta6,1 | — | %1,7 | 8 Şub 2024 |
24İzleyin | CVE-2019-9207İstismar yok | PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter.paessler · prtg network monitor · CWE-79 | Orta6,1 | — | %1,2 | 31 Ara 2019 |
24İzleyin | CVE-2019-9206İstismar yok | PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter.paessler · prtg network monitor · CWE-79 | Orta6,1 | — | %1,2 | 31 Ara 2019 |
24İzleyin | CVE-2024-12833İstismar yok | Paessler PRTG Network Monitor SNMP Cross-Site Scripting Authentication Bypass Vulnerabilitypaessler · prtg network monitor · CWE-79 | Orta6,1 | — | %0,9 | 11 Şub 2025 |
24İzleyin | CVE-2017-9816İstismar yok | Cross-site scripting (XSS) vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary wepaessler · prtg network monitor · CWE-79 | Orta6,1 | — | %0,8 | 18 Ağu 2017 |
24İzleyin | CVE-2017-15009İstismar yok | PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page), via the errormsg papaessler · prtg network monitor · CWE-79 | Orta6,1 | — | %0,7 | 3 Eki 2017 |
24İzleyin | CVE-2016-5078İstismar yok | Paessler PRTG before 16.2.24.4045 has XSS via SNMP.paessler · prtg network monitor · CWE-79 | Orta6,1 | — | %0,7 | 9 Nis 2017 |
- CVE-2018-1941098Hemen
PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including admin
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98paessler · prtg network monitor21 Kas 2018
- CVE-2018-927684Hemen
An issue was discovered in PRTG Network Monitor before 18.2.39.
YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %87paessler · prtg network monitor2 Tem 2018
- CVE-2023-3278245Planlayın
A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with wri
YüksekCVSS 7,2İstismar yokEPSS %56paessler · prtg network monitor9 Ağu 2023
- CVE-2020-1037440Planlayın
A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted
KritikCVSS 9,8İstismar yokEPSS %5paessler · prtg network monitor30 Mar 2020
- CVE-2006-446140Planlayın
Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the probe settin
KritikCVSS 10,0İstismar yokEPSS %1paessler · ipcheck server monitor31 Ağu 2006
- CVE-2020-1154737İzleyin
PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server it
OrtaCVSS 5,3Kavram kanıtıEPSS %52paessler · prtg network monitor4 Nis 2020
- CVE-2018-1920436İzleyin
PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and O
YüksekCVSS 8,8İstismar yokEPSS %5paessler · prtg network monitor12 Kas 2018
- CVE-2018-1941135İzleyin
PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write acco
YüksekCVSS 8,8İstismar yokEPSS %1paessler · prtg network monitor21 Kas 2018
- CVE-2023-3145235İzleyin
A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows remote attackers to pe
YüksekCVSS 8,8İstismar yokEPSS %1paessler · prtg network monitor9 Ağu 2023
- CVE-2023-3278132İzleyin
A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user wit
YüksekCVSS 7,2SilahlaştırılmışEPSS %14paessler · prtg network monitor9 Ağu 2023
- CVE-2018-1025332İzleyin
Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls.
YüksekCVSS 7,5Kavram kanıtıEPSS %7paessler · prtg network monitor20 Nis 2018
- CVE-2018-1920331İzleyin
PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTT
YüksekCVSS 7,5İstismar yokEPSS %3paessler · prtg network monitor12 Kas 2018
- CVE-2019-1107330İzleyin
A Remote Code Execution vulnerability exists in PRTG Network Monitor before 19.4.54.1506 that allows attackers to execute code due to insuff
YüksekCVSS 7,2İstismar yokEPSS %6paessler · prtg network monitor16 Mar 2020
- CVE-2019-1107429İzleyin
A Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and below that allows attackers to place files in
YüksekCVSS 7,2İstismar yokEPSS %5paessler · prtg network monitor17 Mar 2020
- CVE-2017-1565126İzleyin
PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then pro
OrtaCVSS 6,7İstismar yokEPSS %1paessler · prtg network monitor19 Eki 2017
- CVE-2015-774326İzleyin
XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files
OrtaCVSS 6,5İstismar yokEPSS %1paessler · prtg network monitor23 Oca 2017
- CVE-2017-1591726İzleyin
In Paessler PRTG Network Monitor 17.3.33.2830, it's possible to create a Map as a read-only user, by forging a request and sending it to the
OrtaCVSS 6,5İstismar yokEPSS %1paessler · prtg network monitor26 Eki 2017
- CVE-2025-6783526İzleyin
Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notification Contacts func
OrtaCVSS 6,5İstismar yokEPSS %0paessler · prtg network monitor14 Oca 2026
- CVE-2023-5163025İzleyin
Paessler PRTG Network Monitor Cross-Site Scripting Authentication Bypass Vulnerability
OrtaCVSS 6,1İstismar yokEPSS %2paessler · prtg network monitor8 Şub 2024
- CVE-2019-920724İzleyin
PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter.
OrtaCVSS 6,1İstismar yokEPSS %1paessler · prtg network monitor31 Ara 2019
- CVE-2019-920624İzleyin
PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter.
OrtaCVSS 6,1İstismar yokEPSS %1paessler · prtg network monitor31 Ara 2019
- CVE-2024-1283324İzleyin
Paessler PRTG Network Monitor SNMP Cross-Site Scripting Authentication Bypass Vulnerability
OrtaCVSS 6,1İstismar yokEPSS %1paessler · prtg network monitor11 Şub 2025
- CVE-2017-981624İzleyin
Cross-site scripting (XSS) vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary we
OrtaCVSS 6,1İstismar yokEPSS %1paessler · prtg network monitor18 Ağu 2017
- CVE-2017-1500924İzleyin
PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page), via the errormsg pa
OrtaCVSS 6,1İstismar yokEPSS %1paessler · prtg network monitor3 Eki 2017
- CVE-2016-507824İzleyin
Paessler PRTG before 16.2.24.4045 has XSS via SNMP.
OrtaCVSS 6,1İstismar yokEPSS %1paessler · prtg network monitor9 Nis 2017