Arbitrary Web Script Injection in Paessler PRTG Network Monitor's DEVICES OR SENSORS Functionality

Arbitrary Web Script Injection in Paessler PRTG Network Monitor's DEVICES OR SENSORS Functionality

CVE-2017-12879 · LOW Severity

AV:N/AC:M/AU:S/C:N/I:P/A:N

Cross-site scripting (XSS-STORED) vulnerability in the DEVICES OR SENSORS functionality in Paessler PRTG Network Monitor before 17.3.33.2654 allows authenticated remote attackers to inject arbitrary web script or HTML.

Learn more about our Web App Pen Testing.