Design/Logic Flaw

NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution...

Xxe

NetScout nGeniusONE 6.3.2 allows an XML External Entity XXE attack...

CVE-2021-45983

NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution...

CVE-2021-45983

Summary : CVE-2021-45983 affects NetScout nGeniusONE 6.3.2, with a reported Java RMI code execution vulnerability. The connected records consistently name NetScout nGeniusONE 6.3.2 as the affected product and cite Java RMI as the vector, but do not provide technical payload details, affected modu...

CVE-2021-45982

CVE-2021-45982 affects NetScout nGeniusONE 6.3.2. The vulnerability allows an authenticated, privileged user to upload arbitrary files, per the CVE entry and associated records. The connected documents confirm the affected product/version and the attack capability (arbitrary file upload), but do ...

CVE-2021-45982

NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user...

CVE-2021-45981

NetScout nGeniusONE 6.3.2 allows an XML External Entity XXE attack...

CVE-2021-45981

NetScout nGeniusONE 6.3.2 is affected by a XML External Entity (XXE) vulnerability. The issue arises in XML parsing, enabling an XXE attack that could impact confidentiality, integrity, and availability. CVSS metrics indicate high severity (CVSS 3.1: 9.8, CRITICAL) with network attack vector and ...

CVE-2021-45983: Undefined Security Weakness

NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution...

PT-2022-12483

Name of the Vulnerable Software and Affected Versions NetScout nGeniusONE version 6.3.2 Description The issue allows for Arbitrary File Upload by a privileged user. Recommendations For NetScout nGeniusONE version 6.3.2, consider restricting file upload capabilities for privileged users until a...

PT-2022-12484 · Netscout · Netscout Ngeniusone

Name of the Vulnerable Software and Affected Versions: NetScout nGeniusONE version 6.3.2 Description: The issue allows Java RMI code execution. Recommendations: For NetScout nGeniusONE version 6.3.2, at the moment, there is no information about a newer version that contains a fix for this issue...

Netscout NgeniusOne code-related vulnerabilities

Netscout NgeniusOne is a centralized application management and network performance solution from Netscout, Inc. A security vulnerability exists in Netscout NgeniusOne version 6.3.2, which can be exploited by attackers to upload arbitrary files...

NetScout nGeniusONE code injection vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A code injection vulnerability exists in NetScout nGeniusONE version 6.3.2, which can be exploited by an attacker to execute Java RMI code...

Netscout NgeniusOne code-related vulnerabilities

Netscout NgeniusOne is a centralized application management and network performance solution from Netscout, Inc. A security vulnerability exists in Netscout NgeniusOne version 6.3.2, which can be exploited by attackers to launch XML External Entity XXE attacks...

CVE-2021-45982: Unrestricted Upload of File with Dangerous Type

NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user...

PT-2022-12482

Name of the Vulnerable Software and Affected Versions NetScout nGeniusONE version 6.3.2 Description The issue allows an XML External Entity XXE attack. This type of attack occurs when an application parses XML input that contains an external entity, allowing an attacker to access local or remote...

CVE-2021-45981: Improper Restriction of XML External Entity Reference

NetScout nGeniusONE 6.3.2 allows an XML External Entity XXE attack...

nGeniusONE authorization bypass vulnerability

nGeniusONE is a service assurance solution provided by NETSCOUT that provides full visibility into infrastructure, interdependencies, and applications. nGeniusONE version 6.3.0 build 1196 contains an authorization bypass vulnerability in FDSQueryService. An attacker could exploit this vulnerabili...

Netscaut nGeniusONE UploadFile Function Cross-Site Scripting Vulnerability

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE in version 6.3.0 build 1196 and earlier, which stems from a lack of user input validation and filtering of input data...

Netscaut nGeniusONE XML External Entity Injection Vulnerability

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. Netscaut nGeniusONE in version 6.3.0 build 1196 suffers from an XML External Entity Injection vulnerability, which arises from a network system or product that does not have the correc...