CVE-2023-27000

2024-01-0900:00:00

mitre

www.cve.org

cve-2023-27000

cross site scripting

netscoutngeniusone

remote attacker

arbitrary code execution

name parameter

AI Score

6.6

Confidence

High

EPSS

0.002

Percentile

55.2%

JSON

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s).

References

netscout.com

ngeniusone.com

piotrryciak.com/posts/netscout-multiple-vulnerabilities/