CVE-2017-15008

CVE-2017-15008 affects PRTG Network Monitor version 17.3.33.2830. The issue is a stored Cross-Site Scripting vulnerability in sensor titles caused by incorrect error handling for a %00 in the SRC attribute of an IMG element. This could allow an attacker to inject script or HTML when malicious dat...

CVE-2017-15009

CVE-2017-15009 affects PRTG Network Monitor (v17.3.33.2830). The vulnerability is a reflected Cross‑Site Scripting flaw on the error page (error.htm) via the errormsg parameter. Documented CVSS values (NVD) indicate a network-facing issue with medium base severity (CVSS2: 4.3; CVSS3: 6.1) and use...

PT-2017-13812

Name of the Vulnerable Software and Affected Versions PRTG Network Monitor version 17.3.33.2830 Description The issue is related to stored Cross-Site Scripting on all sensor titles, due to incorrect error handling for a %00 in the SRC attribute of an IMG element. Recommendations For version...

PT-2017-13813

Name of the Vulnerable Software and Affected Versions PRTG Network Monitor version 17.3.33.2830 Description The issue concerns reflected Cross-Site Scripting on the error page, specifically "error.htm", via the errormsg parameter. Recommendations For version 17.3.33.2830, consider restricting...

Paessler PRTG Network Monitor Cross-Site Scripting Vulnerability

Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler AG, Germany. A cross-site scripting vulnerability exists in the DEVICES OR SENSORS feature in versions prior to Paessler PRTG Network Monitor 17.3.33.2654. A remote attacker can exploit this...

PRTG Network Monitor < 17.3.33.265 XSS Vulnerability

PRTG Network Monitor is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cross site scripting

Cross-site scripting XSS-STORED vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers to inject arbitrary web script or HTML...

CVE-2017-12879

Cross-site scripting XSS-STORED vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers to inject arbitrary web script or HTML...

CVE-2017-12879

Cross-site scripting XSS-STORED vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers to inject arbitrary web script or HTML...

CVE-2017-12879

Paessler PRTG Network Monitor (before version 17.3.33.2654) contains a stored XSS in the DEVICES OR SENSORS feature. Exploitation requires authentication and remote access; an attacker can inject arbitrary web script or HTML, with the impact described as partial integrity impact and low confident...

CVE-2017-12879: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS-STORED vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers to inject arbitrary web script or HTML...

PT-2017-12747

Name of the Vulnerable Software and Affected Versions Paessler PRTG Network Monitor versions prior to 17.3.33.2654 Description A cross-site scripting XSS issue exists in the DEVICES OR SENSORS functionality, allowing authenticated remote attackers to inject arbitrary web script or HTML...

Paessler PRTG Network Monitor Cross-Site Scripting Vulnerability

Paessler PRTG Network Monitor is a full-featured network monitoring and management software from Paessler AG, Germany. A cross-site scripting vulnerability exists in versions prior to Paessler PRTG Network Monitor 17.2.32.2279. A remote attacker can exploit this vulnerability to inject arbitrary...

Cross site scripting

Cross-site scripting XSS vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-9816

Cross-site scripting XSS vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-9816

Cross-site scripting XSS vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-9816

Cross-site scripting XSS vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-9816

CVE-2017-9816 is a cross-site scripting (XSS) vulnerability in Paessler PRTG Network Monitor, reported for versions prior to 17.2.32.2279. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the web interface. Connected sources (CNVD-2017-30012 and ...

PT-2017-19202

Name of the Vulnerable Software and Affected Versions Paessler PRTG Network Monitor versions prior to 17.2.32.2279 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For versions prior to 17.2.32.2279, update to version...

CVE-2017-9816: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Paessler PRTG Network Monitor before 17.2.32.2279 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...