CVE-2023-41172

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 4 of 4...

CVE-2023-41168

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 1 of 4...

CVE-2023-41171

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 3 of 4...

PT-2023-27370 · Netscout · Netscout Ngeniuspulse

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusPULSE version 3.8 Description: The issue is related to weak file permissions. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

CVE-2023-40301

NETSCOUT nGeniusPULSE 3.8 is affected by CVE-2023-40301, a Command Injection vulnerability. The CVSS v3.1 base score is 9.8 (CRITICAL) with network attack vector, low attack complexity, no privileges required, no user interaction, and impact to confidentiality, integrity, and availability are all...

CVE-2023-41168

NetScout nGeniusONE 6.3.4 build 2298 is affected by a Stored Cross-Site Scripting vulnerability. The stored scripts reside on the server and are executed when a user accesses the affected page. Connected PT-2023-27843 notes no information about a fix/version with a patch; no other remediation det...

CVE-2023-40300

NETSCOUT nGeniusPULSE 3.8 is affected by a hardcoded cryptographic key. The available connected sources confirm the issue exists in version 3.8 and describe the risk as potentially enabling unauthorized access or decryption of sensitive data. No details on exploit vectors, affected configurations...

CVE-2023-40300

NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key...

PT-2023-27843 · Netscout · Netscout Ngeniusone

Name of the Vulnerable Software and Affected Versions: NetScout nGeniusONE version 6.3.4 build 2298 Description: The issue is related to a Stored Cross-Site scripting vulnerability. This allows for malicious scripts to be stored on the server and executed when a user accesses the affected page...

CVE-2023-41171

NetScout nGeniusONE 6.3.4 build 2298 is affected by a Stored Cross-Site Scripting vulnerability (issue 3 of 4). The CVE entry explicitly identifies NetScout nGeniusONE 6.3.4 build 2298 as vulnerable. From NVD metrics, the CVSS 3.1 base score is 5.4 (Medium) with an attack vector of NETWORK , atta...

CVE-2023-41171

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 3 of 4...

NetScout nGeniusONE Security Vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE version 6.3.4. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

CVE-2023-41172

CVE-2023-41172 affects NetScout nGeniusONE 6.3.4 build 2298, with a stored cross-site scripting vulnerability (issue 4 of 4). The initial entry notes a stored XSS vulnerability; CVSSv3.1 base score 5.4 (NETWORK, LOW attack complexity, user interaction required). The connected documents provide no...

NetScout nGeniusONE Cross-Site Scripting Vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A cross-site scripting vulnerability exists in NETSCOUT nGeniusONE version 6.3.4 build 2298, which can be exploited by an attacker to inject malicious script into a web site...

CVE-2023-41169

CVE-2023-41169 affects NetScout nGeniusONE 6.3.4 build 2298 with a Stored Cross-Site Scripting (XSS) vulnerability (issue 2 of 4). CVSS v3.1 base score 5.4 (Network, Low attack complexity, Privileges required: Low, User interaction: Required, Scope: Changed). No remediation details are provided i...

PT-2023-27846 · Netscout · Ngeniusone

Name of the Vulnerable Software and Affected Versions: NetScout nGeniusONE version 6.3.4 build 2298 Description: The issue is a Reflected Cross-Site scripting vulnerability. Recommendations: For NetScout nGeniusONE version 6.3.4 build 2298, consider disabling the affected feature or restricting...

CVE-2022-44715

Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload...

CVE-2022-44715

Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload...

CVE-2022-44718

An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur issue 2 of 2. After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack...

CVE-2022-44718

An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur issue 2 of 2. After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack...