CVE-2021-35205

NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 allows URL redirection in redirector...

CVE-2021-35205

NETSCOUT nGeniusONE is vulnerable in version 6.3.0 build 1196 to a URL redirection issue in the redirector. The CVE-2021-35205 entry notes the root cause as the system’s failure to reasonably handle target jumps, enabling potential user redirection to malicious websites. Other connected reports (...

CVE-2021-35200

NETSCOUT nGeniusONE 6.3.0 build 1196 allows high-privileged users to achieve Stored Cross-Site Scripting XSS in FDSQueryService...

CVE-2021-35200

Summary (CVE-2021-35200): Netscout nGeniusONE 6.3.0 build 1196 is affected by a Stored Cross‑Site Scripting (XSS) vulnerability in the FDSQueryService. The root cause is lack of validation/filtering of user input data within that service, enabling high-privileged users to inject JavaScript. The r...

CVE-2021-35201

NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity XXE attacks...

CVE-2021-35201

Netscout nGeniusONE 6.3.0 build 1196 is affected by an XML External Entity (XXE) vulnerability due to insufficient filtering of external entities in XML processing. A remote attacker can exploit this by sending a specially crafted XML payload. No patch/fix details are provided in the supplied doc...

CVE-2021-35202

CVE-2021-35202 affects NETSCOUT Systems nGeniusONE 6.3.0 build 1196. The issue is an Authorization Bypass in FDSQueryService, enabling access to the endpoint by an unauthenticated or inappropriate actor. Documented impact from multiple sources indicates unauthorized access could be gained via thi...

CVE-2021-35202

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Authorization Bypass to access an endpoint in FDSQueryService...

CVE-2021-35203

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint...

CVE-2021-35203

Netscout nGeniusONE 6.3.0 build 1196 is affected by CVE-2021-35203, a vulnerability that allows Arbitrary File Read through the FDSQueryService endpoint due to incorrect user access control. Exploitation details are not provided in the connected documents; no in‑the‑wild exploit information is ci...

CVE-2021-35204

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting XSS in the support endpoint...

CVE-2021-35204

Netscout nGeniusONE 6.3.0 build 1196 is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the Support endpoint. The root cause is insufficient validation/filtering of user input at the Support endpoint, allowing an attacker to execute JavaScript code in a victim’s browser. The C...

PT-2021-20837

Name of the Vulnerable Software and Affected Versions: NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 Description: The issue allows URL redirection in the redirector component. Recommendations: For NETSCOUT Systems nGeniusONE version 6.3.0 build 1196, consider restricting access to the...

PT-2021-20834

Name of the Vulnerable Software and Affected Versions: nGeniusONE version 6.3.0 build 1196 Description: The issue allows for Authorization Bypass, enabling access to an endpoint in FDSQueryService. Recommendations: For version 6.3.0 build 1196, consider restricting access to the FDSQueryService...

Netscout NgeniusOne 跨站脚本漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE version 6.3.0 build 1196, which stems from a lack of validation of user input and filtering of input data at the...

Netscout NgeniusOne 跨站脚本漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE in version 6.3.0 build 1196 and earlier, which stems from a lack of validation of user input data and filtering of...

CVE-2021-35201: Improper Restriction of XML External Entity Reference

NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity XXE attacks...

PT-2021-20835

Name of the Vulnerable Software and Affected Versions: NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 Description: The issue allows for Arbitrary File Read operations. This is achieved via the "FDSQueryService" endpoint. Recommendations: For NETSCOUT Systems nGeniusONE version 6.3.0 build...

Netscout NgeniusOne 安全漏洞

nGeniusONE is a service assurance solution provided by NETSCOUT that provides full visibility into infrastructure, interdependencies, and applications. nGeniusONE version 6.3.0 build 1196 contains an authorization bypass vulnerability in FDSQueryService. An attacker could exploit this vulnerabili...

PT-2021-20830

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE version 6.3.0 build 1004 and earlier Description: The issue allows Stored Cross-Site Scripting XSS in the Packet Analysis module. This means an attacker can inject malicious scripts into the system, which can then be...