Lucene search
+L

418 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/25 12:00 a.m.•11 views

CVE-2025-32982: Improper Authorization

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

7.5CVSS5.8AI score0.00391EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/25 12:00 a.m.•33 views

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

0.00391EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/25 12:00 a.m.•19 views

CVE-2025-32983

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace...

5.8AI score0.0042EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/25 12:00 a.m.•85 views

CVE-2025-32983

The NETSCOUT nGeniusONE application (versions prior to 6.4.0 b2350 ) is susceptible to a Technical Information Disclosure vulnerability. The root cause is the potential disclosure of internal technical information through a stack trace . Impacted systems are those running the vulnerable software ...

7.5CVSS5.8AI score0.0042EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/25 12:00 a.m.•10 views

CVE-2025-32979: Creation of Temporary File With Insecure Permissions

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users...

6.5CVSS5.8AI score0.00353EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/25 12:00 a.m.•28 views

CVE-2025-32986

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint...

0.00434EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/25 12:00 a.m.•14 views

CVE-2025-32984

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting XSS via a certain POST parameter...

5.8AI score0.00257EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/25 12:00 a.m.•16 views

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

5.8AI score0.00391EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/25 12:00 a.m.•44 views

CVE-2025-32983

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace...

0.0042EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/25 12:00 a.m.•11 views

CVE-2025-32980: Incorrect Privilege Assignment

NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration...

9.8CVSS5.8AI score0.00452EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/25 12:00 a.m.•32 views

CVE-2025-32984

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting XSS via a certain POST parameter...

0.00257EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/25 12:00 a.m.•28 views

PT-2025-17944 · Netscout · Ngeniusone

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue concerns a Sensitive File Accessible Without Proper Authentication to an endpoint. No information is provided about the estimated number of potentially affected devices...

7.5CVSS5.7AI score0.00434EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2025/04/25 12:00 a.m.•23 views

PT-2025-17940 · Netscout · Ngeniusone

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue is related to a Broken Authorization Schema for the report module. This means that there is a flaw in how authorization is handled, potentially allowing unauthorized...

7.5CVSS5.9AI score0.00391EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2025/04/25 12:00 a.m.•27 views

NetScout nGeniusONE security vulnerabilities

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE versions prior to 6.4.0 b2350 that originates from allowing an authenticated user to create arbitrary files...

6.5CVSS5.9AI score0.00353EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2024/01/09 2:15 a.m.•25 views

CVE-2023-27000

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List pages...

6.1CVSS7AI score0.00542EPSS
SaveExploits1References3
NVD
NVD
•added 2024/01/09 2:15 a.m.•40 views

CVE-2023-26999

An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file...

9.8CVSS9.5AI score0.01062EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/01/09 2:15 a.m.•24 views

CVE-2023-26998

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page...

5.4CVSS6.8AI score0.00508EPSS
SaveExploits1References3
Prion
Prion
•added 2024/01/09 2:15 a.m.•32 views

Design/Logic Flaw

An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file...

7.5CVSS8.2AI score0.01062EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2024/01/09 12:00 a.m.•23 views

NetScout nGeniusONE Cross-Site Scripting Vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A cross-site scripting vulnerability exists in NetScout nGeniusONE v.6.3.4 that could allow a remote attacker to execute arbitrary code via the name parameter of the Profile and...

6.1CVSS6.8AI score0.00542EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2024/01/09 12:00 a.m.•21 views

CVE-2023-26998

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page...

6.8AI score0.00508EPSS
SaveExploits1References2
Rows per page
Query Builder