# CVE-2015-7743: Paessler PRTG Network Monitor XXE in HTTP XML/REST Value sensor

Source: https://junglewise.ai/threats/cve-2015-7743-paessler-prtg-network-monitor-xxe-in-http-xml-rest-value-sensor  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2017-01-23. Updated: 2026-05-13  
License: CC BY 4.0 with a link back

CVE-2015-7743 · Severity: medium · CVSS 6.5 · Published 2017-01-23

PRTG Network Monitor is a widely used tool for monitoring the health and performance of IT infrastructure. A security vulnerability in older versions allows an authorized user to read sensitive files from the server hosting the software. This could lead to the exposure of configuration details, credentials, or other private data, potentially allowing an attacker to expand their access within the corporate network.

Technologies: [Paessler PRTG Network Monitor](https://junglewise.ai/threats/technologies/prtg-network-monitor). Vendors: [Paessler](https://junglewise.ai/threats/vendors/paessler).

## Quick answers

**Is CVE-2015-7743 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2015-7743 being exploited in the wild.

**How severe is CVE-2015-7743?** Medium severity, with a CVSS score of 6.5, published 23 January 2017.

**Which products and versions are affected?** Paessler PRTG Network Monitor before 16.2.23.3077/3078.

**Is there a fix for CVE-2015-7743?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2015-7743 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2015-7743?** Check whether you run Paessler PRTG Network Monitor. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An XML External Entity (XXE) vulnerability exists in the way PRTG Network Monitor processes XML data when creating specific sensor types. Specifically, the 'HTTP XML/REST Value' sensor fails to properly restrict external entity references. A remote authenticated attacker can exploit this by creating a new sensor and pointing it at a maliciously crafted XML file. This allows the attacker to perform an out-of-band data exfiltration or directly read local files on the PRTG server's file system. The issue is resolved in versions 16.2.23.3077 and 16.2.23.3078.

## Affected products

- Paessler PRTG Network Monitor before 16.2.23.3077/3078

## Timeline

- 2015-10-06: disclosed: CVE reserved date
- 2017-01-23: advisory: NVD publication date

## References

- [https://packetstormsecurity.com/files/137255/Paessler-PRTG-Network-Monitor-14.4.12.3282-XXE-Injection.html](https://packetstormsecurity.com/files/137255/Paessler-PRTG-Network-Monitor-14.4.12.3282-XXE-Injection.html)
- [https://www.paessler.com/prtg/history/stable](https://www.paessler.com/prtg/history/stable)

## Related threats

- [Paessler PRTG Network Monitor password disclosure in demo sensor](https://junglewise.ai/threats/cve-2026-4638-prtg-network-monitor-before-version-26-2-120-1449-ships-a-demo-exe)
- [Paessler PRTG Network Monitor reflected XSS in error responses](https://junglewise.ai/threats/cve-2026-4637-paessler-prtg-network-monitor-before-version-26-2-120-1449-is)
- [Paessler PRTG cross-site scripting in body class](https://junglewise.ai/threats/cve-2023-28148-paessler-prtg-cross-site-scripting-in-body-class)
- [Paessler PRTG Network Monitor arbitrary file write via FTP Server Count Sensor](https://junglewise.ai/threats/cve-2023-22632-paessler-prtg-network-monitor-arbitrary-file-write-via-ftp-server)
- [Paessler PRTG Network Monitor arbitrary file write in HTTP XML/REST Sensor](https://junglewise.ai/threats/cve-2023-22631-paessler-prtg-network-monitor-arbitrary-file-write-in-http-xml)