Lucene search

[email protected]CVE-2019-9207

HistoryDec 31, 2019 - 5:15 p.m.

CVE-2019-9207

2019-12-3117:15:11

CWE-79

[email protected]

web.nvd.nist.gov

cve-2019-9207

prtg network monitor

xss

searchtext parameter

discontinued product

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

46.7%

JSON

PRTG Network Monitor v7.1.3.3378 allows XSS via the /search.htm searchtext parameter. NOTE: This product is discontinued.

Affected configurations

NVD

Node

paesslerprtg_network_monitorMatch7.1.3.3378

CPENameOperatorVersion
paessler:prtg_network_monitorpaessler prtg network monitoreq7.1.3.3378

CPE	Name	Operator	Version
paessler:prtg_network_monitor	paessler prtg network monitor	eq	7.1.3.3378

References

packetstormsecurity.com/files/151925/PRTG-Network-Monitor-7.1.3.3378-Cross-Site-Scripting.html

seclists.org/fulldisclosure/2019/Mar/3

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

46.7%

JSON

Related for CVE-2019-9207

prion1 nvd1 cvelist1 packetstorm1