CVE-2025-32980

NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration...

CVE-2025-32981

NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File...

CVE-2025-32982

NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 are affected by a Broken Authorization Schema within the report module . This flaw stems from an authorization mode error, which could potentially allow unauthorized access to specific features or data within that module. To remediate this vulnera...

CVE-2025-32980

NETSCOUT nGeniusONE versions prior to 6.4.0 P11 b3245 are susceptible to a security vulnerability caused by a Weak Sudo Configuration (CWE-266: Incorrect Privilege Assignment). This misconfiguration allows for potential unauthorized privilege escalation. To remediate this issue, users are recomme...

CVE-2025-32985

NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 are vulnerable to a security flaw involving hardcoded credentials . These credentials can be extracted from the application's JAR files . To resolve this issue, users are recommended to update to version 6.4.0 b2350 or later. No specific exploit l...

CVE-2025-32986

The NETSCOUT nGeniusONE centralized application management and network performance solution is vulnerable in versions prior to 6.4.0 b2350 . The root cause is a Sensitive File Accessible Without Proper Authentication to an endpoint, allowing an unauthorized actor to access sensitive information (...

CVE-2025-32979

NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 are vulnerable to Arbitrary File Creation by authenticated users. The root cause is identified as the creation of temporary files with insecure permissions (CWE-378). This vulnerability allows an attacker with low-level privileges to create files ...

CVE-2025-32983

The NETSCOUT nGeniusONE application (versions prior to 6.4.0 b2350 ) is susceptible to a Technical Information Disclosure vulnerability. The root cause is the potential disclosure of internal technical information through a stack trace . Impacted systems are those running the vulnerable software ...

CVE-2025-32984

NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 are vulnerable to Stored Cross-Site Scripting (XSS) . The flaw exists because the application fails to properly neutralize input during web page generation, specifically via a certain POST parameter . This allows an attacker to inject malicious sc...

CVE-2025-32986

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint...

CVE-2025-32980

NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration...

CVE-2025-32983

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace...

CVE-2025-32984

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting XSS via a certain POST parameter...

CVE-2025-32983

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace...

CVE-2025-32985

NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files...

CVE-2025-32980

NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration...

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

CVE-2025-32986

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint...

CVE-2025-32979

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users...

CVE-2025-32981

NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 are affected by a vulnerability where Insecure Permissions on the nGeniusCLI file allow local users to leverage elevated privileges. This flaw could potentially lead to unauthorized access or modifications on the system. To remediate this issue, u...