Back to Database
Status published
Medium
CVE-2015-7743
XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078...
Vulnerability Description
XML external entity vulnerability in PRTG Network Monitor before 16.2.23.3077/3078 allows remote authenticated users to read arbitrary files by creating a new HTTP XML/REST Value sensor that accesses a crafted XML file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2015-7743
Credits & Attribution
No credits recorded in the NVD database.
References
More from paessler
View All →CVE-2022-35739
PRTG Network Monitor through 22.2.77.2204 does not prevent custom input...
Unknown
0
CVE-2021-34547
PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account...
Medium
4.3
CVE-2021-29643
PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an...
Medium
5.4
CVE-2021-27220
An issue was discovered in PRTG Network Monitor before 21.1.66.1623....
Medium
5.3
CVE-2020-14073
XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map...
Medium
5.4
Affected Vendor
paessler
View all reports →Affected Software
prtg network monitor
Vulnerable Versions:
0
Timeline
Official Publish:
January 23rd, 2017
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.