NETSCOUT nGeniusPULSE Security Vulnerability

NetScout nGeniusPULSE is a comprehensive testing and infrastructure operational condition monitoring platform from NetScout, Inc. A security vulnerability exists in NETSCOUT nGeniusPULSE version 3.8 that stems from the use of hard-coded encryption keys...

NetScout nGeniusONE Security Vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE version 6.3.4. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

CVE-2023-41170

NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability...

CVE-2023-40301

NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability...

CVE-2023-41905

CVE-2023-41905 affects NETSCOUT nGeniusONE 6.3.4 build 2298, where an authenticated user can trigger a reflected XSS vulnerability. The available connected records confirm the affected product/version and the vulnerability class (Reflected XSS) but do not provide exploit details, affected compone...

CVE-2023-40300

NETSCOUT nGeniusPULSE 3.8 is affected by a hardcoded cryptographic key. The available connected sources confirm the issue exists in version 3.8 and describe the risk as potentially enabling unauthorized access or decryption of sensitive data. No details on exploit vectors, affected configurations...

CVE-2023-41171

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 3 of 4...

CVE-2023-41168

NetScout nGeniusONE 6.3.4 build 2298 is affected by a Stored Cross-Site Scripting vulnerability. The stored scripts reside on the server and are executed when a user accesses the affected page. Connected PT-2023-27843 notes no information about a fix/version with a patch; no other remediation det...

CVE-2023-40302

CVE-2023-40302 affects NETSCOUT nGeniusPULSE 3.8. The vulnerability is described as a weak file permissions issue in the product, with root cause related to improper/weak file access controls. Exploitation details are not provided in the connected documents; no explicit attack vectors or exploita...

CVE-2023-41168

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 1 of 4...

CVE-2023-41905

NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting XSS vulnerability by an authenticated user...

CVE-2023-40301

NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability...

NetScout nGeniusONE Cross-Site Scripting Vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A cross-site scripting vulnerability exists in NETSCOUT nGeniusONE version 6.3.4 build 2298, which can be exploited by an attacker to inject malicious script into a web site...

PT-2023-27370 · Netscout · Netscout Ngeniuspulse

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusPULSE version 3.8 Description: The issue is related to weak file permissions. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

CVE-2023-40302

NETSCOUT nGeniusPULSE 3.8 has Weak File Permissions Vulnerability...

NetScout nGeniusONE Security Vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE version 6.3.4. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

CVE-2022-44715

Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload...

CVE-2022-44718

An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur issue 2 of 2. After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack...

CVE-2022-44717

An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur issue 1 of 2. After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack...

CVE-2022-44718

An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur issue 2 of 2. After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack...