Vulnerabilities (CVE)

Filtered by vendor Netscout Subscribe
Total 37 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-27000 1 Netscout 1 Ngeniusone 2025-06-18 N/A 6.1 MEDIUM
Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s).
CVE-2023-26999 1 Netscout 1 Ngeniusone 2025-06-16 N/A 9.8 CRITICAL
An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.
CVE-2023-26998 1 Netscout 1 Ngeniusone 2025-06-03 N/A 5.4 MEDIUM
Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page.
CVE-2023-40301 1 Netscout 1 Ngeniuspulse 2025-05-28 N/A 9.8 CRITICAL
NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability.
CVE-2025-32979 1 Netscout 1 Ngeniusone 2025-05-27 N/A 6.5 MEDIUM
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.
CVE-2025-32981 1 Netscout 1 Ngeniusone 2025-05-27 N/A 7.1 HIGH
NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.
CVE-2025-32982 1 Netscout 1 Ngeniusone 2025-05-27 N/A 7.5 HIGH
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.
CVE-2025-32983 1 Netscout 1 Ngeniusone 2025-05-27 N/A 7.5 HIGH
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.
CVE-2025-32984 1 Netscout 1 Ngeniusone 2025-05-27 N/A 6.1 MEDIUM
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.
CVE-2025-32985 1 Netscout 1 Ngeniusone 2025-05-27 N/A 9.8 CRITICAL
NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.
CVE-2025-32986 1 Netscout 1 Ngeniusone 2025-05-27 N/A 7.5 HIGH
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint.
CVE-2008-6701 1 Netscout 2 Ngenius Infinistream, Visualizer 2025-04-09 7.5 HIGH N/A
NetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/en_US/domains/add_domain.jsp, which allows remote attackers to gain administrator privileges via a direct request.
CVE-2022-44024 1 Netscout 1 Ngeniusone 2025-03-28 N/A 6.1 MEDIUM
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 1 of 6.
CVE-2022-44029 1 Netscout 1 Ngeniusone 2025-03-28 N/A 6.1 MEDIUM
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 6 of 6.
CVE-2022-44025 1 Netscout 1 Ngeniusone 2025-03-28 N/A 6.1 MEDIUM
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 2 of 6.
CVE-2022-44028 1 Netscout 1 Ngeniusone 2025-03-28 N/A 6.1 MEDIUM
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 5 of 6.
CVE-2022-44027 1 Netscout 1 Ngeniusone 2025-03-28 N/A 6.1 MEDIUM
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 4 of 6.
CVE-2022-44026 1 Netscout 1 Ngeniusone 2025-03-28 N/A 6.1 MEDIUM
An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 3 of 6.
CVE-2023-41905 1 Netscout 1 Ngeniusone 2024-11-21 N/A 5.4 MEDIUM
NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated user.
CVE-2023-41172 1 Netscout 1 Ngeniusone 2024-11-21 N/A 5.4 MEDIUM
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4).