353 matches found
NetScout nGeniusONE 安全漏洞
NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE versions prior to 6.4.0 b2350 that originates from allowing an authenticated user to create arbitrary files...
CVE-2025-32986
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint...
PT-2025-17940 · Netscout · Ngeniusone
Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusONE versions prior to 6.4.0 b2350 Description: The issue is related to a Broken Authorization Schema for the report module. This means that there is a flaw in how authorization is handled, potentially allowing unauthorized...
CVE-2025-32983
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace...
CVE-2025-32984
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting XSS via a certain POST parameter...
CVE-2025-32982
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...
CVE-2023-27000
Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List pages...
CVE-2023-26999
An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file...
CVE-2023-26998
Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page...
Design/Logic Flaw
An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file...
NetScout nGeniusONE Cross-Site Scripting Vulnerability
NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A cross-site scripting vulnerability exists in NetScout nGeniusONE v.6.3.4 that could allow a remote attacker to execute arbitrary code via the name parameter of the Profile and...
CVE-2023-26999
CVE-2023-26999 affects NetScout nGeniusOne v6.3.4. The issue allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file. Per CVSS/ENISA entries, the impact is high (C/H/I/A) with network access, no user interaction required. No vendor patch information is ...
CVE-2023-26999
An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file...
CVE-2023-26999
An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file...
NetScout nGeniusONE Security Vulnerability
NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE version v.6.3.4, which originated from a vulnerability that could allow a remote attacker to execute arbitrary code and cause a...
NetScout nGeniusONE Cross-Site Scripting Vulnerability
NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A cross-site scripting vulnerability exists in NetScoutnGeniusOne version v.6.3.4 that could allow a remote attacker to execute arbitrary code via the creator parameter on the Alert...
PT-2024-12120
Name of the Vulnerable Software and Affected Versions NetScout nGeniusOne version 6.3.4 Description An issue in NetScout nGeniusOne allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file. Recommendations For NetScout nGeniusOne version 6.3.4, consider...
PT-2024-12119
Name of the Vulnerable Software and Affected Versions NetScoutnGeniusOne version 6.3.4 Description A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the creator parameter of the "Alert Configuration" page. This enables the attacker to perform unauthorized actions...