CVE-2025-67835 | Medium | 6.5 | 2026-01-14 | Paessler PRTG Network Monitor before 25.4.114 allows Denial-of-Service (DoS) by an authenticated attacker via the Notification Contacts functionality. |
CVE-2025-67834 | Medium | 5.4 | 2026-01-14 | Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the filter parameter. |
CVE-2025-67833 | Medium | 6.1 | 2026-01-14 | Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter. |
CVE-2024-12833 | Medium | 6.1 | 2025-02-11 | Paessler PRTG Network Monitor SNMP Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass aut… |
CVE-2023-51630 | Medium | 6.1 | 2024-02-08 | Paessler PRTG Network Monitor Cross-Site Scripting Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on… |
CVE-2023-32782 | High | 7.2 | 2023-08-09 | A command injection was identified in PRTG 23.2.84.1566 and earlier versions in the Dicom C-ECHO sensor where an authenticated user with write permissions coul… |
CVE-2023-32781 | High | 7.2 | 2023-08-09 | A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an authenticated user with write permissions… |
CVE-2023-31452 | High | 8.8 | 2023-08-09 | A cross-site request forgery (CSRF) token bypass was identified in PRTG 23.2.84.1566 and earlier versions that allows remote attackers to perform actions with… |
CVE-2023-31450 | Medium | 4.7 | 2023-08-09 | A path traversal vulnerability was identified in the SQL v2 sensors in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permission… |
CVE-2023-31449 | Medium | 4.7 | 2023-08-09 | A path traversal vulnerability was identified in the WMI Custom sensor in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permiss… |
CVE-2023-31448 | Medium | 4.7 | 2023-08-09 | A path traversal vulnerability was identified in the HL7 sensor in PRTG 23.2.84.1566 and earlier versions where an authenticated user with write permissions co… |
CVE-2022-35739 | Medium | 5.3 | 2022-10-25 | PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to insert arbitrary content into the style t… |
CVE-2021-29643 | Medium | 5.4 | 2021-09-13 | PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Directory instance. |
CVE-2021-34547 | Medium | 4.3 | 2021-06-10 | PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation. |
CVE-2021-27220 | Medium | 5.3 | 2021-03-31 | An issue was discovered in PRTG Network Monitor before 21.1.66.1623. By invoking the screenshot functionality with prepared context paths, an attacker is able… |
CVE-2020-14073 | Medium | 5.4 | 2020-06-23 | XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can create a map, and then use the Map Desig… |
CVE-2020-11547 | Medium | 5.3 | 2020-04-05 | PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself (CPU usage, me… |
CVE-2020-10374 | Critical | 9.8 | 2020-03-30 | A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command execution via a crafted POST request or th… |
CVE-2019-11074 | High | 7.2 | 2020-03-17 | A Write to Arbitrary Location in Disk vulnerability exists in PRTG Network Monitor 19.1.49 and below that allows attackers to place files in arbitrary location… |
CVE-2019-11073 | High | 7.2 | 2020-03-16 | A Remote Code Execution vulnerability exists in PRTG Network Monitor before 19.4.54.1506 that allows attackers to execute code due to insufficient sanitization… |
CVE-2019-19119 | Medium | 5.5 | 2020-02-03 | An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local registry keys for the Core Server Service, a non-administrativ… |
CVE-2019-9207 | Medium | 6.1 | 2019-12-31 | PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued. |
CVE-2019-9206 | Medium | 6.1 | 2019-12-31 | PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter. NOTE: This product is discontinued. |
CVE-2018-14683 | Medium | 6.1 | 2019-04-10 | PRTG before 19.1.49.1966 has Cross Site Scripting (XSS) in the WEBGUI. |
CVE-2018-19411 | High | 8.8 | 2018-11-21 | PRTG Network Monitor before 18.2.40.1683 allows an authenticated user with a read-only account to create another user with a read-write account (including admi… |
CVE-2018-19410 | Critical | 9.8 | 2018-11-21 | PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including administrator). A remote… |
CVE-2018-19204 | High | 8.8 | 2018-11-12 | PRTG Network Monitor before 18.3.44.2054 allows a remote authenticated attacker (with read-write privileges) to execute arbitrary code and OS commands with sys… |
CVE-2018-19203 | High | 7.5 | 2018-11-12 | PRTG Network Monitor before 18.2.41.1652 allows remote unauthenticated attackers to terminate the PRTG Core Server Service via a special HTTP request. |
CVE-2018-9276 | High | 7.2 | 2018-07-02 | An issue was discovered in PRTG Network Monitor before 18.2.39. An attacker who has access to the PRTG System Administrator web console with administrative pri… |
CVE-2018-10253 | High | 7.5 | 2018-04-21 | Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls. |
CVE-2017-15917 | Medium | 6.5 | 2017-10-26 | In Paessler PRTG Network Monitor 17.3.33.2830, it's possible to create a Map as a read-only user, by forging a request and sending it to the server. |
CVE-2017-15651 | Medium | 6.7 | 2017-10-20 | PRTG Network Monitor 17.3.33.2830 allows remote authenticated administrators to execute arbitrary code by uploading a .exe file and then proceeding in spite of… |
CVE-2017-15360 | Medium | 5.4 | 2017-10-15 | PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an H… |
CVE-2017-15009 | Medium | 6.1 | 2017-10-04 | PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page), via the errormsg parameter. |
CVE-2017-15008 | Medium | 4.8 | 2017-10-04 | PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to incorrect error handling for a %00 in t… |
CVE-2017-12879 | Medium | 5.4 | 2017-08-24 | Cross-site scripting (XSS-STORED) vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticat… |
CVE-2017-9816 | Medium | 6.1 | 2017-08-18 | Cross-site scripting (XSS) vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary web script or HTML vi… |
CVE-2016-5078 | Medium | 6.1 | 2017-04-10 | Paessler PRTG before 16.2.24.4045 has XSS via SNMP. |
CVE-2015-7743 | Medium | 6.5 | 2017-01-23 | XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files by creating a new… |
CVE-2009-1849 | | | 2009-06-01 | Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbi… |
CVE-2006-4461 | | | 2006-08-31 | Paessler IPCheck Server Monitor before 5.3.3.639/640 does not properly implement a "list of acceptable host IP addresses in the probe settings," which has unkn… |