CVE-2021-29643: Paessler PRTG Network Monitor

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Directory instance.

Affected products

• Paessler PRTG Network Monitor: before 21.3.69.1333 (fixed in 21.3.69.1333)

Published 2021-09-13. Last modified 2026-06-17.