Skip to main content

Prtg Network Monitor CVE-2025-67833

MEDIUM
Cross-site Scripting (XSS) (CWE-79)
2026-01-14 cve@mitre.org
6.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.1 MEDIUM
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Changed
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

2
Analysis Generated
Mar 12, 2026 - 21:54 vuln.today
CVE Published
Jan 14, 2026 - 17:16 nvd
MEDIUM 6.1

DescriptionCVE.org

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter.

AnalysisAI

Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter. [CVSS 6.1 MEDIUM]

Technical ContextAI

Classified as CWE-79 (Cross-site Scripting (XSS)). Affects the tag component of Prtg Network Monitor. Paessler PRTG Network Monitor before 25.4.114 allows XSS by an unauthenticated attacker via the tag parameter.

RemediationAI

Monitor vendor advisories for a patch. Implement output encoding and Content Security Policy headers. Restrict network access to the affected service where possible.

CVE-2023-32781 HIGH POC
7.2 Aug 09

A command injection vulnerability was identified in PRTG 23.2.84.1566 and earlier versions in the HL7 sensor where an au

CVE-2018-9276 HIGH POC
7.2 Jul 02

An issue was discovered in PRTG Network Monitor before 18.2.39. Rated high severity (CVSS 7.2), this vulnerability is re

CVE-2018-19410 CRITICAL POC
9.8 Nov 21

PRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privile

CVE-2018-10253 HIGH POC
7.5 Apr 21

Paessler PRTG Network Monitor before 18.1.39.1648 mishandles stack memory during unspecified API calls. Rated high sever

CVE-2015-7743 MEDIUM POC
6.5 Jan 23

XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to

CVE-2017-15009 MEDIUM POC
6.1 Oct 04

PRTG Network Monitor version 17.3.33.2830 is vulnerable to reflected Cross-Site Scripting on error.htm (the error page),

CVE-2019-9206 MEDIUM POC
6.1 Dec 31

PRTG Network Monitor v7.1.3.3378 allows XSS via the /public/login.htm errormsg or loginurl parameter. Rated medium sever

CVE-2020-10374 CRITICAL
9.8 Mar 30

A webserver component in Paessler PRTG Network Monitor 19.2.50 to PRTG 20.1.56 allows unauthenticated remote command exe

CVE-2017-15360 MEDIUM POC
5.4 Oct 15

PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, relat

CVE-2021-29643 MEDIUM POC
5.4 Sep 13

PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a co

CVE-2020-14073 MEDIUM POC
5.4 Jun 23

XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. Rated medium severity (CVSS 5.4), this vulne

CVE-2022-35739 MEDIUM POC
5.3 Oct 25

PRTG Network Monitor through 22.2.77.2204 does not prevent custom input for a device’s icon, which can be modified to in

Share

CVE-2025-67833 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy