What’s Vulnerable › Vulnerabilities

CVE-2021-29643

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-09-13 · updated 2026-06-17
• Weakness: CWE-79

Description

PRTG Network Monitor before 21.3.69.1333 allows stored XSS via an unsanitized string imported from a User Object in a connected Active Directory instance.

Affected products

• Paessler PRTG: before 21.3.69.1333 — fixed in 21.3.69.1333

How to fix

Upgrade to a fixed version: Paessler PRTG 21.3.69.1333. Check the vendor advisory for mitigations.

References

• https://raxis.com/blog/prtg-network-monitor-cve-2021-29643
• https://www.paessler.com/prtg/history/stable#21.3.69.1333
• https://raxis.com/blog/prtg-network-monitor-cve-2021-29643
• https://www.paessler.com/prtg/history/stable#21.3.69.1333

Get alerted when CVE-2021-29643 or the next vulnerability affects your stack