Netscout

Records41All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

Netscout records in CISA KEV

No Netscout vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ngeniusone 36 records MEDIUM Ngeniuspulse 3 records MEDIUM Airmagnet Enterprise 1 record LOW Ngenius Infinistream 1 record LOW Visualizer 1 record LOW

Records

36 records in Ngeniusone · all components

TI-2023-11863 CVE-2023-27000 · GHSA-jr5v-4546-4997

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote…

MEDIUM 62

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00542 Published 2024-01-09 No fix listed CWE-79

TI-2023-11861 CVE-2023-26998 · GHSA-pp9j-v998-vpq3

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote…

MEDIUM 58

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00508 Published 2024-01-09 No fix listed CWE-79

TI-2023-11862 CVE-2023-26999 · GHSA-86g4-mj62-f66h

An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute…

MEDIUM 51

An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01062 Published 2024-01-09 No fix listed CWE-611

TI-2025-23995 CVE-2025-32985 · GHSA-r7f2-jfpq-8j9r

NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.

MEDIUM 49

NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00452 Published 2025-04-25 No fix listed CWE-798

TI-2021-20977 CVE-2021-45983 · GHSA-qjp6-p4qq-39w6

NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution.

MEDIUM 45

NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01492 Published 2022-06-02 No fix listed

TI-2021-20975 CVE-2021-45981 · GHSA-4qv7-mvg8-3455

NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack.

MEDIUM 44

NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01148 Published 2022-06-02 No fix listed CWE-611

TI-2022-22009 CVE-2022-44715 · GHSA-3mw8-jr69-x96w

Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated…

MEDIUM 41

Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00754 Published 2023-01-27 No fix listed CWE-732

TI-2021-20976 CVE-2021-45982 · GHSA-gr7j-c53q-r2m2

NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user.

MEDIUM 40

NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00991 Published 2022-06-02 No fix listed CWE-434

TI-2025-23996 CVE-2025-32986 · GHSA-4rmx-r8gj-vj26

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint.

LOW 39

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00434 Published 2025-04-25 No fix listed CWE-200

TI-2025-23993 CVE-2025-32983 · GHSA-8343-fjcx-gwpw

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.

LOW 39

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0042 Published 2025-04-25 No fix listed CWE-200

TI-2025-23992 CVE-2025-32982 · GHSA-8pjq-x38c-gm89

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.

LOW 39

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00391 Published 2025-04-25 No fix listed CWE-285

TI-2025-23991 CVE-2025-32981 · GHSA-h656-x889-hh62

NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.

LOW 33

NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00221 Published 2025-04-25 No fix listed CWE-276

TI-2022-21651 CVE-2022-44026 · GHSA-9xjv-gm25-4r49

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.

LOW 31

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00363 Published 2023-01-27 No fix listed CWE-79

TI-2021-14095 CVE-2021-35201 · GHSA-9959-vfr9-jv96

NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity (XXE) attacks.

LOW 31

NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity (XXE) attacks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00964 Published 2021-09-30 No fix listed CWE-611

TI-2025-23989 CVE-2025-32979 · GHSA-5cwq-8g5w-gmhm

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.

LOW 29

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00353 Published 2025-04-25 No fix listed CWE-378

TI-2025-23994 CVE-2025-32984 · GHSA-pp5v-6vv5-vc6c

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.

LOW 27

NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00257 Published 2025-04-25 No fix listed CWE-79

TI-2023-21779 CVE-2023-41170 · GHSA-rfm6-67q9-fgg9

NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability.

LOW 27

NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00406 Published 2023-12-07 No fix listed CWE-79

TI-2022-21654 CVE-2022-44029 · GHSA-v42g-2wvf-f5qm

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.

LOW 27

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00363 Published 2023-01-27 No fix listed CWE-79

TI-2022-21653 CVE-2022-44028 · GHSA-fh8h-h985-278j

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.

LOW 27

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00363 Published 2023-01-27 No fix listed CWE-79

TI-2022-21652 CVE-2022-44027 · GHSA-cxh2-v5r8-56w9

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.

LOW 27

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00363 Published 2023-01-27 No fix listed CWE-79

TI-2022-21650 CVE-2022-44025 · GHSA-62w5-p9f5-3v9m

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.

LOW 27

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00363 Published 2023-01-27 No fix listed CWE-79

TI-2022-21649 CVE-2022-44024 · GHSA-rh7r-hw59-x23v

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.

LOW 27

An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00363 Published 2023-01-27 No fix listed CWE-79

TI-2021-14097 CVE-2021-35203 · GHSA-mwfm-2cm9-pfhj

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint.

LOW 27

NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint.

CVSS 3.1MEDIUM 5.7 Network Low privileges User interaction EPSS 0.00724 Published 2021-09-30 No fix listed CWE-552

TI-2023-22295 CVE-2023-41905 · GHSA-85xh-mvq8-6vfr

NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS)…

LOW 25

NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated user.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00388 Published 2023-12-07 No fix listed CWE-79

TI-2023-21781 CVE-2023-41172 · GHSA-5mvq-q3hx-7j6m

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4).

LOW 25

NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00388 Published 2023-12-07 No fix listed CWE-79

Open these records in search →

Critical	7
High	9
Medium	23
Low	2
No CVSS	0