| CVE-2025-32986 | 高7.5 | NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint. | 25/04/2025 |
| CVE-2025-32985 | 緊急9.8 | NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files. | 25/04/2025 |
| CVE-2025-32984 | 中6.1 | NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter. | 25/04/2025 |
| CVE-2025-32983 | 高7.5 | NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace. | 25/04/2025 |
| CVE-2025-32982 | 高7.5 | NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module. | 25/04/2025 |
| CVE-2025-32981 | 高7.1 | NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File. | 25/04/2025 |
| CVE-2025-32979 | 中6.5 | NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users. | 25/04/2025 |
| CVE-2023-27000 | 中6.1 | Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s). | 09/01/2024 |
| CVE-2023-26999 | 緊急9.8 | An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file. | 09/01/2024 |
| CVE-2023-26998 | 中5.4 | Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page. | 09/01/2024 |
| CVE-2023-41905 | 中5.4 | NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated user. | 07/12/2023 |
| CVE-2023-41172 | 中5.4 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4). | 07/12/2023 |
| CVE-2023-41171 | 中5.4 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 3 of 4). | 07/12/2023 |
| CVE-2023-41170 | 中6.1 | NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability. | 07/12/2023 |
| CVE-2023-41169 | 中5.4 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 2 of 4). | 07/12/2023 |
| CVE-2023-41168 | 中5.4 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 1 of 4). | 07/12/2023 |
| CVE-2023-40301 | 緊急9.8 | NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability. | 07/12/2023 |
| CVE-2023-40300 | 緊急9.8 | NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key. | 07/12/2023 |
| CVE-2022-44718 | 低3.5 | An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack Complexity required is | 27/01/2023 |
| CVE-2022-44717 | 低3.1 | An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 1 of 2). After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack Complexity required is | 27/01/2023 |