PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all group names created, related to incorrect error handling for an HTML encoded script.
References
Link | Resource |
---|---|
https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b | Exploit Technical Description Third Party Advisory |
Configurations
Information
Published : 2017-10-15 10:29
Updated : 2017-11-01 04:37
NVD link : CVE-2017-15360
Mitre link : CVE-2017-15360
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
paessler
- prtg_network_monitor