CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 高危7.5 |
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module. |
| 25/04/2025 |
| CVE-2025-32981 | 高危7.1 | NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File. | 25/04/2025 |
| CVE-2025-32979 | 中危6.5 | NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users. | 25/04/2025 |
| CVE-2023-27000 | 中危6.1 | Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s). | 09/01/2024 |
| CVE-2023-26999 | 严重9.8 | An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file. | 09/01/2024 |
| CVE-2023-26998 | 中危5.4 | Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page. | 09/01/2024 |
| CVE-2023-41905 | 中危5.4 | NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated user. | 07/12/2023 |
| CVE-2023-41172 | 中危5.4 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4). | 07/12/2023 |
| CVE-2023-41171 | 中危5.4 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 3 of 4). | 07/12/2023 |
| CVE-2023-41170 | 中危6.1 | NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability. | 07/12/2023 |
| CVE-2023-41169 | 中危5.4 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 2 of 4). | 07/12/2023 |
| CVE-2023-41168 | 中危5.4 | NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 1 of 4). | 07/12/2023 |
| CVE-2023-40301 | 严重9.8 | NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability. | 07/12/2023 |
| CVE-2023-40300 | 严重9.8 | NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key. | 07/12/2023 |
| CVE-2022-44718 | 低危3.5 | An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack Complexity required is | 27/01/2023 |
| CVE-2022-44717 | 低危3.1 | An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 1 of 2). After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack Complexity required is | 27/01/2023 |