NetScout nGeniusONE Cross-Site Scripting Vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A cross-site scripting vulnerability exists in NETSCOUT nGeniusONE version 6.3.4 build 2298, which can be exploited by an attacker to inject malicious script into a web site...

PT-2023-27846 · Netscout · Ngeniusone

Name of the Vulnerable Software and Affected Versions: NetScout nGeniusONE version 6.3.4 build 2298 Description: The issue is a Reflected Cross-Site scripting vulnerability. Recommendations: For NetScout nGeniusONE version 6.3.4 build 2298, consider disabling the affected feature or restricting...

CVE-2023-40300

NETSCOUT nGeniusPULSE 3.8 is affected by a hardcoded cryptographic key. The available connected sources confirm the issue exists in version 3.8 and describe the risk as potentially enabling unauthorized access or decryption of sensitive data. No details on exploit vectors, affected configurations...

CVE-2023-40300

NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key...

CVE-2023-41171

NetScout nGeniusONE 6.3.4 build 2298 is affected by a Stored Cross-Site Scripting vulnerability (issue 3 of 4). The CVE entry explicitly identifies NetScout nGeniusONE 6.3.4 build 2298 as vulnerable. From NVD metrics, the CVSS 3.1 base score is 5.4 (Medium) with an attack vector of NETWORK , atta...

PT-2023-27370 · Netscout · Netscout Ngeniuspulse

Name of the Vulnerable Software and Affected Versions: NETSCOUT nGeniusPULSE version 3.8 Description: The issue is related to weak file permissions. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was...

CVE-2023-41168

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 1 of 4...

CVE-2023-41171

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 3 of 4...

NetScout nGeniusONE Security Vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE version 6.3.4. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

NetScout nGeniusONE Security Vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE version 6.3.4. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

CVE-2023-41172

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability issue 4 of 4...

NETSCOUT nGeniusPULSE Security Vulnerability

NetScout nGeniusPULSE is a comprehensive testing and infrastructure operational condition monitoring platform from NetScout, Inc. A security vulnerability exists in NETSCOUT nGeniusPULSE version 3.8 that stems from improper file permission management...

CVE-2023-41905

CVE-2023-41905 affects NETSCOUT nGeniusONE 6.3.4 build 2298, where an authenticated user can trigger a reflected XSS vulnerability. The available connected records confirm the affected product/version and the vulnerability class (Reflected XSS) but do not provide exploit details, affected compone...

CVE-2023-41169

CVE-2023-41169 affects NetScout nGeniusONE 6.3.4 build 2298 with a Stored Cross-Site Scripting (XSS) vulnerability (issue 2 of 4). CVSS v3.1 base score 5.4 (Network, Low attack complexity, Privileges required: Low, User interaction: Required, Scope: Changed). No remediation details are provided i...

CVE-2023-40301

NETSCOUT nGeniusPULSE 3.8 is affected by CVE-2023-40301, a Command Injection vulnerability. The CVSS v3.1 base score is 9.8 (CRITICAL) with network attack vector, low attack complexity, no privileges required, no user interaction, and impact to confidentiality, integrity, and availability are all...

NetScout nGeniusONE Security Vulnerability

NetScout nGeniusONE is a centralized application management and network performance solution from NetScout, Inc. A security vulnerability exists in NetScout nGeniusONE version 6.3.4. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

CVE-2022-44717

An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur issue 1 of 2. After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack...

CVE-2022-44715

Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload...

CVE-2022-44715

Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload...

CVE-2022-44718

An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur issue 2 of 2. After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack...