Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
NetscoutNgeniusone

36 matches found

CVE
CVE•added 2022/06/02 6:15 p.m.•66 views

CVE-2021-45981

NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack.

9.8CVSS9.4AI score0.00423EPSS
CVE
CVE•added 2022/06/02 6:15 p.m.•65 views

CVE-2021-45983

NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution.

9.8CVSS9.4AI score0.01299EPSS
CVE
CVE•added 2022/06/02 6:15 p.m.•64 views

CVE-2021-45982

NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user.

8.8CVSS8.5AI score0.00405EPSS
CVE
CVE•added 2025/04/25 9:15 p.m.•57 views

CVE-2025-32985

NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.

9.8CVSS6.7AI score0.00065EPSS
CVE
CVE•added 2025/04/25 9:15 p.m.•47 views

CVE-2025-32981

NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.

7.1CVSS6.3AI score0.00014EPSS
CVE
CVE•added 2025/04/25 9:15 p.m.•47 views

CVE-2025-32986

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint.

7.5CVSS7AI score0.00072EPSS
CVE
CVE•added 2025/04/25 9:15 p.m.•44 views

CVE-2025-32979

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.

6.5CVSS6.5AI score0.00045EPSS
CVE
CVE•added 2025/04/25 9:15 p.m.•44 views

CVE-2025-32984

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.

6.1CVSS5.5AI score0.00041EPSS
CVE
CVE•added 2025/04/25 9:15 p.m.•43 views

CVE-2025-32983

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.

7.5CVSS6.5AI score0.00049EPSS
CVE
CVE•added 2025/04/25 9:15 p.m.•42 views

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.

7.5CVSS6.8AI score0.0005EPSS
CVE
CVE•added 2023/01/27 2:15 p.m.•40 views

CVE-2022-44024

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 1 of 6.

6.1CVSS6.1AI score0.00435EPSS
CVE
CVE•added 2023/01/27 2:15 p.m.•40 views

CVE-2022-44718

An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack C...

3.5CVSS4AI score0.00119EPSS
CVE
CVE•added 2023/01/27 2:15 p.m.•38 views

CVE-2022-44025

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 2 of 6.

6.1CVSS6.1AI score0.00435EPSS
CVE
CVE•added 2023/01/27 2:15 p.m.•37 views

CVE-2022-44027

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 4 of 6.

6.1CVSS6.1AI score0.00435EPSS
CVE
CVE•added 2023/01/27 2:15 p.m.•37 views

CVE-2022-44028

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 5 of 6.

6.1CVSS6.1AI score0.00435EPSS
CVE
CVE•added 2023/01/27 2:15 p.m.•37 views

CVE-2022-44715

Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload.

8.8CVSS8.4AI score0.00414EPSS
CVE
CVE•added 2024/01/09 2:15 a.m.•35 views

CVE-2023-26999

An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.

9.8CVSS9.3AI score0.01179EPSS
CVE
CVE•added 2023/01/27 2:15 p.m.•34 views

CVE-2022-44026

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 3 of 6.

7.1CVSS6.1AI score0.00227EPSS
CVE
CVE•added 2021/09/30 6:15 p.m.•33 views

CVE-2021-35204

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting (XSS) in the support endpoint.

5.4CVSS5.3AI score0.00502EPSS
CVE
CVE•added 2021/09/30 6:15 p.m.•33 views

CVE-2021-35205

NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 allows URL redirection in redirector.

5.4CVSS5.5AI score0.00152EPSS
CVE
CVE•added 2023/01/27 2:15 p.m.•33 views

CVE-2022-44029

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 6 of 6.

6.1CVSS6.1AI score0.00435EPSS
CVE
CVE•added 2021/09/30 6:15 p.m.•32 views

CVE-2021-35201

NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity (XXE) attacks.

6.5CVSS6.4AI score0.00347EPSS
CVE
CVE•added 2021/09/30 6:15 p.m.•31 views

CVE-2021-35198

NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting (XSS) in the Packet Analysis module.

5.4CVSS5.2AI score0.00502EPSS
CVE
CVE•added 2021/09/30 6:15 p.m.•31 views

CVE-2021-35199

NETSCOUT nGeniusONE 6.3.0 build 1196 and earlier allows Stored Cross-Site Scripting (XSS) in UploadFile.

5.4CVSS5.2AI score0.00502EPSS
CVE
CVE•added 2023/01/27 2:15 p.m.•31 views

CVE-2022-44717

An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 1 of 2). After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack C...

3.1CVSS4AI score0.00119EPSS
CVE
CVE•added 2023/12/07 6:15 p.m.•31 views

CVE-2023-41171

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 3 of 4).

5.4CVSS5.3AI score0.00525EPSS
CVE
CVE•added 2021/09/30 6:15 p.m.•30 views

CVE-2021-35203

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint.

5.7CVSS5.6AI score0.00345EPSS
CVE
CVE•added 2021/09/30 6:15 p.m.•27 views

CVE-2021-35200

NETSCOUT nGeniusONE 6.3.0 build 1196 allows high-privileged users to achieve Stored Cross-Site Scripting (XSS) in FDSQueryService.

4.8CVSS4.8AI score0.00515EPSS
CVE
CVE•added 2023/12/07 6:15 p.m.•27 views

CVE-2023-41905

NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated user.

5.4CVSS5.3AI score0.002EPSS
CVE
CVE•added 2021/09/30 6:15 p.m.•26 views

CVE-2021-35202

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Authorization Bypass (to access an endpoint) in FDSQueryService.

4.3CVSS4.6AI score0.00206EPSS
CVE
CVE•added 2024/01/09 2:15 a.m.•22 views

CVE-2023-26998

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page.

5.4CVSS5.8AI score0.00671EPSS
CVE
CVE•added 2023/12/07 6:15 p.m.•22 views

CVE-2023-41168

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 1 of 4).

5.4CVSS5.3AI score0.00569EPSS
CVE
CVE•added 2023/12/07 6:15 p.m.•22 views

CVE-2023-41169

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 2 of 4).

5.4CVSS5.3AI score0.00569EPSS
CVE
CVE•added 2023/12/07 6:15 p.m.•22 views

CVE-2023-41172

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4).

5.4CVSS5.3AI score0.00358EPSS
CVE
CVE•added 2024/01/09 2:15 a.m.•21 views

CVE-2023-27000

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s).

6.1CVSS6.4AI score0.00772EPSS
CVE
CVE•added 2023/12/07 6:15 p.m.•19 views

CVE-2023-41170

NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability.

6.1CVSS6.2AI score0.00251EPSS