Known vulnerabilities in PRTG Network Monitor

Software CPE: cpe:2.3:a:paessler_ag:prtg_network_monitor:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 15
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PRTG Network Monitor PRTG Network Monitor is affected by 15 known vulnerabilities: 1 critical, 2 high, 2 medium, 10 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103630 - Missing Authorization
CVE-2018-19410
CWE-862 Critical
No
Exploited
18.2.40.1683 05.02.2025 SB2018112122
#VU103629 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-9276
CWE-78 High
Available
Exploited
18.2.39.1661 05.02.2025 SB2018070213
#VU102312 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-12833
CWE-79 Low
No
No
25.1.102.1373 06.01.2025 SB2025010623
#VU85375 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-51630
CWE-79 Low
No
No
24.1.90.1306 15.01.2024 SB2024011519
#VU34200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-14073
CWE-79 Low
Available
No
- 23.06.2020 SB2020062324
#VU34919 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-9206
CWE-79 Low
No
No
- 31.12.2019 SB2019123134
#VU34920 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-9207
CWE-79 Low
No
No
- 31.12.2019 SB2019123134
#VU16207 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2018-19204
CWE-78 High
No
No
18.3.44.2054 03.12.2018 SB2018092404
#VU16206 - Improper input validation
CVE-2018-19203
CWE-20 Low
No
No
18.2.41.1652 03.12.2018 SB2018092404
#VU12613 - Stack-based buffer overflow
CVE-2018-10253
CWE-121 Medium
Available
No
- 14.05.2018 SB2018051422
#VU38018 - Improper Privilege Management
CVE-2017-15917
CWE-269 Medium
No
No
- 26.10.2017 SB2017100412
#VU38025 - Improper input validation
CVE-2017-15651
CWE-20 Low
No
No
- 20.10.2017 SB2017100412
#VU38070 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-15360
CWE-79 Low
No
No
- 15.10.2017 SB2017100412
#VU38146 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-15008
CWE-79 Low
No
No
- 04.10.2017 SB2017100412
#VU38147 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-15009
CWE-79 Low
No
No
- 04.10.2017 SB2017100412