353 matches found
Command injection
NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability...
Cross site scripting
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 3 of 4...
Cross site scripting
NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting XSS vulnerability by an authenticated user...
Cross site scripting
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 2 of 4...
NetScout nGeniusONE Security Vulnerability
NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE version 6.3.4. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...
CVE-2023-40301
NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability...
NetScout nGeniusONE Security Vulnerability
NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE version 6.3.4. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...
CVE-2023-40300
NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key...
NETSCOUT nGeniusPULSE Security Vulnerability
NetScout nGeniusPULSE is a comprehensive testing and infrastructure operational condition monitoring platform from NetScout, Inc. A security vulnerability exists in NETSCOUT nGeniusPULSE version 3.8 that stems from the use of hard-coded encryption keys...
CVE-2023-41170
NetScout nGeniusONE 6.3.4 build 2298 is affected by a Reflected Cross-Site Scripting vulnerability. The available sources consistently state the issue affects the product and build, but do not provide the exact vulnerable component, root cause details, exploit specifics, or a confirmed patch vers...
CVE-2023-41169
CVE-2023-41169 affects NetScout nGeniusONE 6.3.4 build 2298 with a Stored Cross-Site Scripting (XSS) vulnerability (issue 2 of 4). CVSS v3.1 base score 5.4 (Network, Low attack complexity, Privileges required: Low, User interaction: Required, Scope: Changed). No remediation details are provided i...
CVE-2023-40302
CVE-2023-40302 affects NETSCOUT nGeniusPULSE 3.8. The vulnerability is described as a weak file permissions issue in the product, with root cause related to improper/weak file access controls. Exploitation details are not provided in the connected documents; no explicit attack vectors or exploita...
CVE-2023-40301
NETSCOUT nGeniusPULSE 3.8 is affected by CVE-2023-40301, a Command Injection vulnerability. The CVSS v3.1 base score is 9.8 (CRITICAL) with network attack vector, low attack complexity, no privileges required, no user interaction, and impact to confidentiality, integrity, and availability are all...
NetScout nGeniusONE Security Vulnerability
NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE version 6.3.4. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...
PT-2023-27370 · Netscout · Netscout Ngeniuspulse
Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusPULSE version 3.8 Description: The issue is related to weak file permissions. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...
CVE-2023-41168
NetScout nGeniusONE 6.3.4 build 2298 is affected by a Stored Cross-Site Scripting vulnerability. The stored scripts reside on the server and are executed when a user accesses the affected page. Connected PT-2023-27843 notes no information about a fix/version with a patch; no other remediation det...
CVE-2023-41171
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 3 of 4...
CVE-2023-41172
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 4 of 4...
CVE-2023-40301
NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability...
CVE-2023-41172
CVE-2023-41172 affects NetScout nGeniusONE 6.3.4 build 2298, with a stored cross-site scripting vulnerability (issue 4 of 4). The initial entry notes a stored XSS vulnerability; CVSSv3.1 base score 5.4 (NETWORK, LOW attack complexity, user interaction required). The connected documents provide no...