CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| HOCH7.5 |
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module. |
| 25/04/2025 |
| CVE-2025-32981 | HOCH7.1 | NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File. | 25/04/2025 |
| CVE-2025-32979 | MITTEL6.5 | NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users. | 25/04/2025 |
| CVE-2023-27000 | MITTEL6.1 | Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s). | 09/01/2024 |
| CVE-2023-26999 | KRITISCH9.8 | An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file. | 09/01/2024 |
| CVE-2023-26998 | MITTEL5.4 | Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page. | 09/01/2024 |
| CVE-2023-41905 | MITTEL5.4 | NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated user. | 07/12/2023 |
| CVE-2023-41172 | MITTEL5.4 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4). | 07/12/2023 |
| CVE-2023-41171 | MITTEL5.4 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 3 of 4). | 07/12/2023 |
| CVE-2023-41170 | MITTEL6.1 | NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability. | 07/12/2023 |
| CVE-2023-41169 | MITTEL5.4 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 2 of 4). | 07/12/2023 |
| CVE-2023-41168 | MITTEL5.4 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 1 of 4). | 07/12/2023 |
| CVE-2023-40301 | KRITISCH9.8 | NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability. | 07/12/2023 |
| CVE-2023-40300 | KRITISCH9.8 | NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key. | 07/12/2023 |
| CVE-2022-44718 | NIEDRIG3.5 | An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack Complexity required is | 27/01/2023 |
| CVE-2022-44717 | NIEDRIG3.1 | An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 1 of 2). After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack Complexity required is | 27/01/2023 |