Cross site scripting

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

Cross site scripting

NETSCOUT nGeniusONE 6.3.0 build 1196 and earlier allows Stored Cross-Site Scripting XSS in UploadFile...

CVE-2021-35199

NETSCOUT nGeniusONE 6.3.0 build 1196 and earlier allows Stored Cross-Site Scripting XSS in UploadFile...

Cross site scripting

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting XSS in the support endpoint...

Code injection

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint...

Xxe

NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity XXE attacks...

CVE-2021-35203

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint...

Cross site scripting

NETSCOUT nGeniusONE 6.3.0 build 1196 allows high-privileged users to achieve Stored Cross-Site Scripting XSS in FDSQueryService...

Authorization

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Authorization Bypass to access an endpoint in FDSQueryService...

CVE-2021-35205

NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 allows URL redirection in redirector...

Cross site request forgery (csrf)

NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 allows URL redirection in redirector...

CVE-2021-35199

CVE-2021-35199 affects NETSCOUT nGeniusONE, specifically versions 6.3.0 build 1196 and earlier. The vulnerability arises from an insufficient input validation/filtering in the UploadFile function of the packet analysis module, enabling a stored Cross-Site Scripting (XSS) attack. Impact is describ...

CVE-2021-35199

NETSCOUT nGeniusONE 6.3.0 build 1196 and earlier allows Stored Cross-Site Scripting XSS in UploadFile...

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Packet Analysis module. The root cause is improper input validation/filtering, enabling an attacker to inject JavaScript and perform stored XSS. Public references (NVD, CVE lis...

CVE-2021-35205

NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 allows URL redirection in redirector...

CVE-2021-35205

NETSCOUT nGeniusONE is vulnerable in version 6.3.0 build 1196 to a URL redirection issue in the redirector. The CVE-2021-35205 entry notes the root cause as the system’s failure to reasonably handle target jumps, enabling potential user redirection to malicious websites. Other connected reports (...

CVE-2021-35200

NETSCOUT nGeniusONE 6.3.0 build 1196 allows high-privileged users to achieve Stored Cross-Site Scripting XSS in FDSQueryService...

CVE-2021-35200

Summary (CVE-2021-35200): Netscout nGeniusONE 6.3.0 build 1196 is affected by a Stored Cross‑Site Scripting (XSS) vulnerability in the FDSQueryService. The root cause is lack of validation/filtering of user input data within that service, enabling high-privileged users to inject JavaScript. The r...

CVE-2021-35201

NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity XXE attacks...