PT-2021-20830

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE version 6.3.0 build 1004 and earlier Description: The issue allows Stored Cross-Site Scripting XSS in the Packet Analysis module. This means an attacker can inject malicious scripts into the system, which can then be...

CVE-2021-35203: Files or Directories Accessible to External Parties

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint...

Netscout NgeniusOne 代码问题漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. Netscaut nGeniusONE in version 6.3.0 build 1196 suffers from an XML External Entity Injection vulnerability, which arises from a network system or product that does not have the correc...

Netscout NgeniusOne 输入验证错误漏洞

Netscaut nGeniusONE is a network performance management appliance from Netscout, Inc. with a next-generation Deep Packet Inspection DPI engine that enables fast, real-time, context-sensitive business, network, and application performance analysis of large amounts of data. nGeniusONE is vulnerable...

CVE-2021-35200: Improper Neutralization of Input During Web Page Generation

NETSCOUT nGeniusONE 6.3.0 build 1196 allows high-privileged users to achieve Stored Cross-Site Scripting XSS in FDSQueryService...

CVE-2021-35202: Incorrect Permission Assignment for Critical Resource

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Authorization Bypass to access an endpoint in FDSQueryService...

CVE-2021-35198: Improper Neutralization of Input During Web Page Generation

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

CVE-2021-35204: Improper Neutralization of Input During Web Page Generation

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting XSS in the support endpoint...

CVE-2021-35205: URL Redirection to Untrusted Site

NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 allows URL redirection in redirector...

PT-2021-20836

Name of the Vulnerable Software and Affected Versions: NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 Description: The issue concerns a Reflected Cross-Site Scripting XSS flaw in the support endpoint. This allows for malicious scripts to be injected and executed, potentially leading to...

PT-2021-20831

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE version 6.3.0 build 1196 and earlier Description: The issue allows Stored Cross-Site Scripting XSS in the UploadFile feature. This means an attacker can inject malicious scripts into the system, which can then be executed ...

PT-2021-20833

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE version 6.3.0 build 1196 Description: The issue allows XML External Entity XXE attacks. This means that an attacker can potentially exploit the system by injecting malicious XML code, which could lead to unauthorized acces...

CVE-2021-35199: Improper Neutralization of Input During Web Page Generation

NETSCOUT nGeniusONE 6.3.0 build 1196 and earlier allows Stored Cross-Site Scripting XSS in UploadFile...

PT-2021-20832

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE version 6.3.0 build 1196 Description: The issue allows high-privileged users to achieve Stored Cross-Site Scripting XSS in FDSQueryService. This means that an attacker with high privileges could potentially inject maliciou...