CVE-2020-14073

XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties

published June 23, 2020

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties. An attacker with Read/Write privileges can create a map, and then use the Map Designer Properties screen to insert JavaScript code. This can be exploited against any user with View Maps or Edit Maps access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02857 · 86.6th percentile
Published
2020-06-23T19:09Z
EPSS history
Timeline
  • 23 JUN 19:09Z
    XSS exists in PRTG Network Monitor 20.1.56.1574 via crafted map properties
    cvelistv5