Netscout
Products
7- 37 CVEs
- 3 CVEs
- 1 CVE
- 1 CVE
- 1 CVE
- 1 CVE
- 0 CVEs
Recent CVEs
42| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-32985 | Cri | 0.64 | 9.8 | 0.00 | Apr 25, 2025 | NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files. | ||
| CVE-2025-32980 | Cri | 0.64 | 9.8 | 0.00 | Apr 25, 2025 | NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration. | ||
| CVE-2023-26999 | Cri | 0.64 | 9.8 | 0.01 | Jan 9, 2024 | An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file. | ||
| CVE-2023-40301 | Cri | 0.64 | 9.8 | 0.01 | Dec 7, 2023 | NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability. | ||
| CVE-2023-40300 | Cri | 0.64 | 9.8 | 0.01 | Dec 7, 2023 | NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key. | ||
| CVE-2021-45983 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution. | ||
| CVE-2021-45981 | Cri | 0.64 | 9.8 | 0.01 | Jun 2, 2022 | NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack. | ||
| CVE-2023-40302 | Cri | 0.59 | 9.1 | 0.01 | Dec 7, 2023 | NETSCOUT nGeniusPULSE 3.8 has Weak File Permissions Vulnerability | ||
| CVE-2022-44715 | Hig | 0.57 | 8.8 | 0.01 | Jan 27, 2023 | Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload. | ||
| CVE-2021-45982 | Hig | 0.57 | 8.8 | 0.01 | Jun 2, 2022 | NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user. | ||
| CVE-2020-28251 | Hig | 0.53 | 8.1 | 0.01 | Dec 3, 2020 | NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can be exploited to provide someone with administrative access to a sensor, with credentials to invoke a command to provide root access to the operating system. The… | ||
| CVE-2025-32986 | Hig | 0.49 | 7.5 | 0.00 | Apr 25, 2025 | NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint. | ||
| CVE-2025-32983 | Hig | 0.49 | 7.5 | 0.00 | Apr 25, 2025 | NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace. | ||
| CVE-2025-32982 | Hig | 0.49 | 7.5 | 0.00 | Apr 25, 2025 | NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module. | ||
| CVE-2025-32981 | Hig | 0.46 | 7.1 | 0.00 | Apr 25, 2025 | NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File. | ||
| CVE-2025-32979 | Med | 0.42 | 6.5 | 0.00 | Apr 25, 2025 | NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users. | ||
| CVE-2021-35201 | Med | 0.42 | 6.5 | 0.01 | Sep 30, 2021 | NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity (XXE) attacks. | ||
| CVE-2025-32984 | Med | 0.40 | 6.1 | 0.00 | Apr 25, 2025 | NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter. | ||
| CVE-2023-27000 | Med | 0.40 | 6.1 | 0.01 | Jan 9, 2024 | Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s). | ||
| CVE-2023-41170 | Med | 0.40 | 6.1 | 0.00 | Dec 7, 2023 | NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability. |
- risk 0.64cvss 9.8epss 0.00
NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.
- risk 0.64cvss 9.8epss 0.00
NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration.
- risk 0.64cvss 9.8epss 0.01
An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.
- risk 0.64cvss 9.8epss 0.01
NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability.
- risk 0.64cvss 9.8epss 0.01
NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key.
- risk 0.64cvss 9.8epss 0.01
NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution.
- risk 0.64cvss 9.8epss 0.01
NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack.
- risk 0.59cvss 9.1epss 0.01
NETSCOUT nGeniusPULSE 3.8 has Weak File Permissions Vulnerability
- risk 0.57cvss 8.8epss 0.01
Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload.
- risk 0.57cvss 8.8epss 0.01
NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user.
- risk 0.53cvss 8.1epss 0.01
NETSCOUT AirMagnet Enterprise 11.1.4 build 37257 and earlier has a sensor escalated privileges vulnerability that can be exploited to provide someone with administrative access to a sensor, with credentials to invoke a command to provide root access to the operating system. The…
- risk 0.49cvss 7.5epss 0.00
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint.
- risk 0.49cvss 7.5epss 0.00
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.
- risk 0.49cvss 7.5epss 0.00
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.
- risk 0.46cvss 7.1epss 0.00
NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.
- risk 0.42cvss 6.5epss 0.00
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.
- risk 0.42cvss 6.5epss 0.01
NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity (XXE) attacks.
- risk 0.40cvss 6.1epss 0.00
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.
- risk 0.40cvss 6.1epss 0.01
Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s).
- risk 0.40cvss 6.1epss 0.00
NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability.