PT-2021-20837

Name of the Vulnerable Software and Affected Versions: NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 Description: The issue allows URL redirection in the redirector component. Recommendations: For NETSCOUT Systems nGeniusONE version 6.3.0 build 1196, consider restricting access to the...

Netscout NgeniusOne 跨站脚本漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE in version 6.3.0 build 1196 and earlier, which stems from a lack of validation of user input data and filtering of...

CVE-2021-35201: Improper Restriction of XML External Entity Reference

NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity XXE attacks...

Netscout NgeniusOne 跨站脚本漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE in version 6.3.0 build 1004 and earlier, which stems from a lack of validation of user input and filtering of input...

PT-2021-20835

Name of the Vulnerable Software and Affected Versions: NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 Description: The issue allows for Arbitrary File Read operations. This is achieved via the "FDSQueryService" endpoint. Recommendations: For NETSCOUT Systems nGeniusONE version 6.3.0 build...

Netscout NgeniusOne 跨站脚本漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE version 6.3.0 build 1196, which stems from a lack of validation of user input and filtering of input data at the...

Netscout NgeniusOne 安全漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. Netscaut nGeniusONE in version 6.3.0 build 1196 suffers from an arbitrary file read vulnerability, which arises from incorrect user access control on a network system or product, and...

Netscout NgeniusOne 安全漏洞

nGeniusONE is a service assurance solution provided by NETSCOUT that provides full visibility into infrastructure, interdependencies, and applications. nGeniusONE version 6.3.0 build 1196 contains an authorization bypass vulnerability in FDSQueryService. An attacker could exploit this vulnerabili...

Netscout NgeniusOne 跨站脚本漏洞

Netscout NgeniusOne is a centralized application and network performance management solution from Netscout, Inc. A cross-site scripting vulnerability exists in Netscaut nGeniusONE in version 6.3.0 build 1196 and earlier, which stems from a lack of user input validation and filtering of input data...

PT-2021-20830

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE version 6.3.0 build 1004 and earlier Description: The issue allows Stored Cross-Site Scripting XSS in the Packet Analysis module. This means an attacker can inject malicious scripts into the system, which can then be...

CVE-2021-35203: Files or Directories Accessible to External Parties

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint...

PT-2021-20832

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE version 6.3.0 build 1196 Description: The issue allows high-privileged users to achieve Stored Cross-Site Scripting XSS in FDSQueryService. This means that an attacker with high privileges could potentially inject maliciou...

Netscout NgeniusOne 输入验证错误漏洞

Netscaut nGeniusONE is a network performance management appliance from Netscout, Inc. with a next-generation Deep Packet Inspection DPI engine that enables fast, real-time, context-sensitive business, network, and application performance analysis of large amounts of data. nGeniusONE is vulnerable...

CVE-2021-35200: Improper Neutralization of Input During Web Page Generation

NETSCOUT nGeniusONE 6.3.0 build 1196 allows high-privileged users to achieve Stored Cross-Site Scripting XSS in FDSQueryService...

CVE-2021-35202: Incorrect Permission Assignment for Critical Resource

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Authorization Bypass to access an endpoint in FDSQueryService...

CVE-2021-35199: Improper Neutralization of Input During Web Page Generation

NETSCOUT nGeniusONE 6.3.0 build 1196 and earlier allows Stored Cross-Site Scripting XSS in UploadFile...

CVE-2021-35198: Improper Neutralization of Input During Web Page Generation

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting XSS in the Packet Analysis module...

CVE-2021-35204: Improper Neutralization of Input During Web Page Generation

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting XSS in the support endpoint...

CVE-2021-35205: URL Redirection to Untrusted Site

NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 allows URL redirection in redirector...

PT-2021-20836

Name of the Vulnerable Software and Affected Versions: NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 Description: The issue concerns a Reflected Cross-Site Scripting XSS flaw in the support endpoint. This allows for malicious scripts to be injected and executed, potentially leading to...