NetScout nGeniusONE 安全漏洞

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE due to a weak Sudo configuration...

CVE-2025-32980

NETSCOUT nGeniusONE is affected by CVE-2025-32980 due to a weak sudo configuration in versions prior to 6.4.0 P11 b3245. The root cause is described as an improper sudo setup, enabling elevated privileges under certain conditions. Remediation per PT-2025-17938 indicates upgrading to version 6.4.0...

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

CVE-2025-32984

NETSCOUT nGeniusONE is affected when running versions prior to 6.4.0 b2350. The issue is a Stored Cross-Site Scripting (XSS) vulnerability triggered via a certain POST parameter. Impact described in the sources is a stored XSS condition; no exploits or in-the-wild details are provided in the docu...

PT-2025-17944 · Netscout · Ngeniusone

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue concerns a Sensitive File Accessible Without Proper Authentication to an endpoint. No information is provided about the estimated number of potentially affected devices...

CVE-2023-26999

An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file...

CVE-2023-27000

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List pages...

CVE-2023-26998

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page...

Design/Logic Flaw

An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file...

NetScout nGeniusONE Cross-Site Scripting Vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A cross-site scripting vulnerability exists in NetScoutnGeniusOne version v.6.3.4 that could allow a remote attacker to execute arbitrary code via the creator parameter on the Alert...

CVE-2023-26999

An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file...

NetScout nGeniusONE Cross-Site Scripting Vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A cross-site scripting vulnerability exists in NetScout nGeniusONE v.6.3.4 that could allow a remote attacker to execute arbitrary code via the name parameter of the Profile and...

CVE-2023-26999

An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file...

NetScout nGeniusONE Security Vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE version v.6.3.4, which originated from a vulnerability that could allow a remote attacker to execute arbitrary code and cause a...

CVE-2023-26999

CVE-2023-26999 affects NetScout nGeniusOne v6.3.4. The issue allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file. Per CVSS/ENISA entries, the impact is high (C/H/I/A) with network access, no user interaction required. No vendor patch information is ...

PT-2024-12120

Name of the Vulnerable Software and Affected Versions NetScout nGeniusOne version 6.3.4 Description An issue in NetScout nGeniusOne allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file. Recommendations For NetScout nGeniusOne version 6.3.4, consider...

PT-2024-12119

Name of the Vulnerable Software and Affected Versions NetScoutnGeniusOne version 6.3.4 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the creator parameter of the "Alert Configuration" page. This enables the attacker to perform unauthorized actions...

CVE-2023-41171

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 3 of 4...

CVE-2023-41168

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 1 of 4...

CVE-2023-40301

NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability...