Priority LOW 39
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00434 · Published 2025-04-25 · No fix listed CWE-200
Priority MEDIUM 49
NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00452 · Published 2025-04-25 · No fix listed CWE-798
Priority LOW 27
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00257 · Published 2025-04-25 · No fix listed CWE-79
Priority LOW 39
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0042 · Published 2025-04-25 · No fix listed CWE-200
Priority LOW 39
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00391 · Published 2025-04-25 · No fix listed CWE-285
Priority LOW 33
NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.
CVSS 3.1HIGH 7.1· Local · Low privileges · No interaction · EPSS 0.00221 · Published 2025-04-25 · No fix listed CWE-276
Priority LOW 29
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00353 · Published 2025-04-25 · No fix listed CWE-378
Priority MEDIUM 62
Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s).
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00542 · Published 2024-01-09 · No fix listed CWE-79
Priority MEDIUM 51
An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01062 · Published 2024-01-09 · No fix listed CWE-611
Priority MEDIUM 58
Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00508 · Published 2024-01-09 · No fix listed CWE-79
Priority LOW 25
NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated user.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00388 · Published 2023-12-07 · No fix listed CWE-79
Priority LOW 25
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4).
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00388 · Published 2023-12-07 · No fix listed CWE-79
Priority LOW 25
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 3 of 4).
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00388 · Published 2023-12-07 · No fix listed CWE-79
Priority LOW 27
NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00406 · Published 2023-12-07 · No fix listed CWE-79
Priority LOW 25
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 2 of 4).
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00388 · Published 2023-12-07 · No fix listed CWE-79
Priority LOW 25
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 1 of 4).
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00388 · Published 2023-12-07 · No fix listed CWE-79
Priority MEDIUM 41
NETSCOUT nGeniusPULSE 3.8 has Weak File Permissions Vulnerability
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00836 · Published 2023-12-07 · No fix listed CWE-732
Priority MEDIUM 52
NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01484 · Published 2023-12-07 · No fix listed CWE-77
Priority MEDIUM 50
NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00706 · Published 2023-12-07 · No fix listed CWE-798
Priority LOW 17
An issue was discovered in NetScout nGeniusONE 6.3.2 build 904.
CVSS 3.1LOW 3.5· Network · High privileges · User interaction · EPSS 0.00332 · Published 2023-01-27 · No fix listed CWE-601
Priority LOW 15
An issue was discovered in NetScout nGeniusONE 6.3.2 build 904.
CVSS 3.1LOW 3.1· Network · High privileges · User interaction · EPSS 0.00288 · Published 2023-01-27 · No fix listed CWE-601
Priority MEDIUM 41
Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00754 · Published 2023-01-27 · No fix listed CWE-732
Priority LOW 27
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00363 · Published 2023-01-27 · No fix listed CWE-79
Priority LOW 27
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00363 · Published 2023-01-27 · No fix listed CWE-79
Priority LOW 27
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00363 · Published 2023-01-27 · No fix listed CWE-79
Load more
THREATIST.IORead the docs