CVE-2021-45981

NetScout nGeniusONE 6.3.2 is affected by a XML External Entity (XXE) vulnerability. The issue arises in XML parsing, enabling an XXE attack that could impact confidentiality, integrity, and availability. CVSS metrics indicate high severity (CVSS 3.1: 9.8, CRITICAL) with network attack vector and ...

CVE-2021-45982

CVE-2021-45982 affects NetScout nGeniusONE 6.3.2. The vulnerability allows an authenticated, privileged user to upload arbitrary files, per the CVE entry and associated records. The connected documents confirm the affected product/version and the attack capability (arbitrary file upload), but do ...

CVE-2021-45983

Summary : CVE-2021-45983 affects NetScout nGeniusONE 6.3.2, with a reported Java RMI code execution vulnerability. The connected records consistently name NetScout nGeniusONE 6.3.2 as the affected product and cite Java RMI as the vector, but do not provide technical payload details, affected modu...

CVE-2025-32985

CVE-2025-32985 affects NETSCOUT nGeniusONE prior to version 6.4.0 b2350. Root cause: hardcoded credentials embedded in a JAR file, enabling credential disclosure that leads to a high-impact loss of confidentiality, integrity, and availability (CVSS 3.1 base score 9.8). The vulnerability is descri...

CVE-2025-32986

NETSCOUT nGeniusONE vulnerable prior to version 6.4.0 b2350. The issue is a sensitive file accessible without proper authentication to an endpoint, indicating an access-control weakness in the affected component. Affected product/version: NETSCOUT nGeniusONE before 6.4.0 b2350. Reported impact: e...

CVE-2022-44718

NetScout nGeniusONE 6.3.2 build 904 is affected by an Open Redirection vulnerability. After successful login, an attacker must visit a vulnerable parameter and inject a crafted payload to redirect to an unknown host. This is an issue of open redirect (root cause: vulnerable parameter) with attack...

CVE-2025-32981

CVE-2025-32981 affects NETSCOUT nGeniusONE prior to 6.4.0 b2350. The issue is due to insecure permissions on the nGeniusCLI File , which could allow a local user to leverage these permissions. The primary consequence is local access/privilege concerns as stated in public records. Affected product...

CVE-2025-32984

NETSCOUT nGeniusONE is affected when running versions prior to 6.4.0 b2350. The issue is a Stored Cross-Site Scripting (XSS) vulnerability triggered via a certain POST parameter. Impact described in the sources is a stored XSS condition; no exploits or in-the-wild details are provided in the docu...

CVE-2025-32983

CVE-2025-32983 affects NETSCOUT nGeniusONE prior to version 6.4.0 b2350. The issue enables technical information disclosure via a stack trace , exposing potentially sensitive data. The available sources consistently cite the affected product and version range, with public advisories recommending ...

CVE-2021-35203

Netscout nGeniusONE 6.3.0 build 1196 is affected by CVE-2021-35203, a vulnerability that allows Arbitrary File Read through the FDSQueryService endpoint due to incorrect user access control. Exploitation details are not provided in the connected documents; no in‑the‑wild exploit information is ci...

CVE-2025-32979

CVE-2025-32979 affects NETSCOUT nGeniusONE prior to version 6.4.0 b2350. The vulnerability allows authenticated users to create arbitrary files due to the underlying issue described across multiple sources. The available documents do not provide exploit details or specific vulnerable components b...

CVE-2025-32982

NETSCOUT nGeniusONE prior to 6.4.0 b2350 is affected by a Broken Authorization Schema in the report module (CVE-2025-32982). The CVE details indicate a high-severity impact (CVSS 3.1: 7.5; Confidentiality impact H, Integrity/Availability none) due to an authorization flaw that could enable unauth...

CVE-2022-44025

NetScout nGeniusONE 6.3.2 before P10 exposes a Reflected Cross-Site Scripting (XSS) vulnerability (CVE-2022-44025) with CVSS v3.1 base score 6.1 (MEDIUM). The Connected documents confirm affected software/version and the XSS class, but do not provide exploitation details or a concrete remediation...

CVE-2022-44715

NetScout nGeniusONE is affected: version 6.3.2, build 904. The vulnerability arises from improper file permissions that allow an authenticated remote user to gain permissions via a crafted payload. Exploitation details beyond this payload and a concrete exploit vector are not provided in the conn...

CVE-2022-44024

NetScout nGeniusONE 6.3.2 before P10 is affected by CVE-2022-44024, a Reflected Cross-Site Scripting (XSS) vulnerability (issue 1 of 6). Affected component is the Web UI handling returns that can reflect input; details describe XSS as the underlying issue. The CVSS v3.1 score is 6.1 (MEDIUM) with...

CVE-2022-44028

CVE-2022-44028 affects NetScout nGeniusONE 6.3.2 before P10 and is a Reflected Cross-Site Scripting (XSS) vulnerability. The available connected documents confirm the product and issue type but do not provide root-cause details, exploit specifics, affected subcomponents, or remediation steps. No ...

CVE-2022-44717

CVE-2022-44717 affects NetScout nGeniusONE 6.3.2 build 904. The issue is an Open Redirect: after login, an attacker can visit a vulnerable parameter and inject a crafted payload to redirect to an unknown host. Technical details from connected sources confirm: network-based vulnerability with high...

CVE-2021-35205

NETSCOUT nGeniusONE is vulnerable in version 6.3.0 build 1196 to a URL redirection issue in the redirector. The CVE-2021-35205 entry notes the root cause as the system’s failure to reasonably handle target jumps, enabling potential user redirection to malicious websites. Other connected reports (...

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the Packet Analysis module. The root cause is improper input validation/filtering, enabling an attacker to inject JavaScript and perform stored XSS. Public references (NVD, CVE lis...

CVE-2021-35201

Netscout nGeniusONE 6.3.0 build 1196 is affected by an XML External Entity (XXE) vulnerability due to insufficient filtering of external entities in XML processing. A remote attacker can exploit this by sending a specially crafted XML payload. No patch/fix details are provided in the supplied doc...

CVE-2021-35204

Netscout nGeniusONE 6.3.0 build 1196 is affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the Support endpoint. The root cause is insufficient validation/filtering of user input at the Support endpoint, allowing an attacker to execute JavaScript code in a victim’s browser. The C...

CVE-2022-44027

Affected software: NetScout nGeniusONE 6.3.2 before P10. Vulnerability: Reflected Cross-Site Scripting (XSS) in the web-facing component. Root cause: unspecified in provided documents beyond “Reflected XSS.” Impact: Low confidentiality and integrity impact per CVSS 3.1 vector (C:L, I:L, A:N) with...

CVE-2023-26999

CVE-2023-26999 affects NetScout nGeniusOne v6.3.4. The issue allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file. Per CVSS/ENISA entries, the impact is high (C/H/I/A) with network access, no user interaction required. No vendor patch information is ...

CVE-2022-44029

NetScout nGeniusONE 6.3.2 before P10 is affected by CVE-2022-44029, a Reflected Cross-Site Scripting (XSS) vulnerability. The issue is described across multiple sources (NVD/Red Hat/CVE records) with a CVSS v3.1 base score of 6.1 (Medium). Concrete details such as the vulnerable component/file, e...

CVE-2021-35199

CVE-2021-35199 affects NETSCOUT nGeniusONE, specifically versions 6.3.0 build 1196 and earlier. The vulnerability arises from an insufficient input validation/filtering in the UploadFile function of the packet analysis module, enabling a stored Cross-Site Scripting (XSS) attack. Impact is describ...

CVE-2022-44026

NetScout nGeniusONE 6.3.2 before P10 is affected by CVE-2022-44026, a Reflected Cross-Site Scripting (XSS) vulnerability. The provided documents identify the affected product/version and the vulnerability type but do not provide further technical details (root cause, affected components, exploit ...

CVE-2021-35200

Summary (CVE-2021-35200): Netscout nGeniusONE 6.3.0 build 1196 is affected by a Stored Cross‑Site Scripting (XSS) vulnerability in the FDSQueryService. The root cause is lack of validation/filtering of user input data within that service, enabling high-privileged users to inject JavaScript. The r...

CVE-2023-41171

NetScout nGeniusONE 6.3.4 build 2298 is affected by a Stored Cross-Site Scripting vulnerability (issue 3 of 4). The CVE entry explicitly identifies NetScout nGeniusONE 6.3.4 build 2298 as vulnerable. From NVD metrics, the CVSS 3.1 base score is 5.4 (Medium) with an attack vector of NETWORK , atta...

CVE-2021-35202

CVE-2021-35202 affects NETSCOUT Systems nGeniusONE 6.3.0 build 1196. The issue is an Authorization Bypass in FDSQueryService, enabling access to the endpoint by an unauthenticated or inappropriate actor. Documented impact from multiple sources indicates unauthorized access could be gained via thi...

CVE-2023-26998

CVE-2023-26998 affects NetScout nGeniusOne 6.3.4. The vulnerability is a Cross Site Scripting issue in the Alert Configuration page, exploitable via the creator parameter, enabling a remote attacker to execute arbitrary code. Root cause relates to unsanitized input in the creator field. No offici...

CVE-2023-41905

CVE-2023-41905 affects NETSCOUT nGeniusONE 6.3.4 build 2298, where an authenticated user can trigger a reflected XSS vulnerability. The available connected records confirm the affected product/version and the vulnerability class (Reflected XSS) but do not provide exploit details, affected compone...

CVE-2023-41172

CVE-2023-41172 affects NetScout nGeniusONE 6.3.4 build 2298, with a stored cross-site scripting vulnerability (issue 4 of 4). The initial entry notes a stored XSS vulnerability; CVSSv3.1 base score 5.4 (NETWORK, LOW attack complexity, user interaction required). The connected documents provide no...

CVE-2023-41169

CVE-2023-41169 affects NetScout nGeniusONE 6.3.4 build 2298 with a Stored Cross-Site Scripting (XSS) vulnerability (issue 2 of 4). CVSS v3.1 base score 5.4 (Network, Low attack complexity, Privileges required: Low, User interaction: Required, Scope: Changed). No remediation details are provided i...

CVE-2023-27000

Summary: NetScout nGeniusONE v6.3.4 contains a cross‑site scripting vulnerability that allows a remote attacker to execute arbitrary code via the name parameter on the Profile and Exclusion List pages. Affected component: NetScoutnGeniusOne 6.3.4 (name parameter handling on Profile/Exclusion List...

CVE-2023-41168

NetScout nGeniusONE 6.3.4 build 2298 is affected by a Stored Cross-Site Scripting vulnerability. The stored scripts reside on the server and are executed when a user accesses the affected page. Connected PT-2023-27843 notes no information about a fix/version with a patch; no other remediation det...

CVE-2023-41170

NetScout nGeniusONE 6.3.4 build 2298 is affected by a Reflected Cross-Site Scripting vulnerability. The available sources consistently state the issue affects the product and build, but do not provide the exact vulnerable component, root cause details, exploit specifics, or a confirmed patch vers...