Browse CVEs

CRITICAL 9.8 CVE-2025-32985 NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files. Ngeniusone 6.4.0+ Fix from $2,3002025-04-25 HIGH 7.5 CVE-2025-32982 NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module. Ngeniusone 6.4.0+ Fix from $1,9502025-04-25 HIGH 7.5 CVE-2025-32983 NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace. Ngeniusone 6.4.0+ Fix from $1,9502025-04-25 HIGH 7.5 CVE-2025-32986 NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint. Ngeniusone 6.4.0+ Fix from $1,9502025-04-25 HIGH 7.1 CVE-2025-32981 NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File. Ngeniusone 6.4.0+ Fix from $1,9502025-04-25 MEDIUM 6.1 CVE-2025-32984 NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter. Ngeniusone 6.4.0+ Fix from $1,6002025-04-25 MEDIUM 6.5 CVE-2025-32979 NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users. Ngeniusone 6.4.0+ Fix from $1,6002025-04-25 CRITICAL 9.8 CVE-2023-26999 An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file. Ngeniusone Mitigation only Fix from $2,3002024-01-09 MEDIUM 6.1 CVE-2023-27000 Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of t… Ngeniusone No fix yet Fix from $1,6002024-01-09 MEDIUM 5.4 CVE-2023-26998 Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter o… Ngeniusone No fix yet Fix from $1,6002024-01-09 CRITICAL 9.8 CVE-2023-40300 NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key. Ngeniuspulse Mitigation only Fix from $2,3002023-12-07 CRITICAL 9.8 CVE-2023-40301 NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability. Ngeniuspulse Mitigation only Fix from $2,3002023-12-07 CRITICAL 9.1 CVE-2023-40302 NETSCOUT nGeniusPULSE 3.8 has Weak File Permissions Vulnerability Ngeniuspulse Mitigation only Fix from $2,3002023-12-07 MEDIUM 6.1 CVE-2023-41170 NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability. Ngeniusone Mitigation only Fix from $1,6002023-12-07 MEDIUM 5.4 CVE-2023-41168 NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 1 of 4). Ngeniusone Mitigation only Fix from $1,6002023-12-07 MEDIUM 5.4 CVE-2023-41169 NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 2 of 4). Ngeniusone Mitigation only Fix from $1,6002023-12-07 MEDIUM 5.4 CVE-2023-41171 NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 3 of 4). Ngeniusone Mitigation only Fix from $1,6002023-12-07 MEDIUM 5.4 CVE-2023-41172 NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4). Ngeniusone Mitigation only Fix from $1,6002023-12-07 MEDIUM 5.4 CVE-2023-41905 NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated user. Ngeniusone Mitigation only Fix from $1,6002023-12-07 HIGH 8.8 CVE-2022-44715 Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload. Ngeniusone Mitigation only Fix from $1,9502023-01-27 MEDIUM 6.1 CVE-2022-44025 An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 2 of 6. Ngeniusone Mitigation only Fix from $1,6002023-01-27 MEDIUM 6.1 CVE-2022-44026 An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 3 of 6. Ngeniusone Mitigation only Fix from $1,6002023-01-27 MEDIUM 6.1 CVE-2022-44027 An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 4 of 6. Ngeniusone Mitigation only Fix from $1,6002023-01-27 MEDIUM 6.1 CVE-2022-44028 An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 5 of 6. Ngeniusone Mitigation only Fix from $1,6002023-01-27 MEDIUM 6.1 CVE-2022-44029 An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 6 of 6. Ngeniusone Mitigation only Fix from $1,6002023-01-27 MEDIUM 6.1 CVE-2022-44024 An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 1 of 6. Ngeniusone Mitigation only Fix from $1,6002023-01-27 CRITICAL 9.8 CVE-2021-45981 NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack. Ngeniusone Mitigation only Fix from $2,3002022-06-02 CRITICAL 9.8 CVE-2021-45983 NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution. Ngeniusone Mitigation only Fix from $2,3002022-06-02 HIGH 8.8 CVE-2021-45982 NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user. Ngeniusone Mitigation only Fix from $1,9502022-06-02 MEDIUM 6.5 CVE-2021-35201 NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity (XXE) attacks. Ngeniusone Mitigation only Fix from $1,6002021-09-30