← Back

Netscout

netscout

41 CVEs • 11 products

Products (11)

Click to collapse
Toggle
Ngeniusone
ngeniusone
36 CVEs
Ngeniuspulse
ngeniuspulse
3 CVEs
Ngenius Infinistream
ngenius_infinistream
1 CVE
Visualizer
visualizer
1 CVE
Airmagnet Enterprise
airmagnet_enterprise
1 CVE
Sensor4 R1s1w1 E
sensor4-r1s1w1-e
0 CVEs
Sensor4 R2s1 E
sensor4-r2s1-e
0 CVEs
Sensor4 R2s1 I
sensor4-r2s1-i
0 CVEs
Sensor6 R1s0w1 E
sensor6-r1s0w1-e
0 CVEs
Sensor6 R2s1 E
sensor6-r2s1-e
0 CVEs
Sensor6 R2s1 I
sensor6-r2s1-i
0 CVEs

CVEs (41)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-32986
1Netscout
1Ngeniusone
Jun 17, 2026
Apr 25, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint.
CVE-2025-32985
1Netscout
1Ngeniusone
Jun 17, 2026
Apr 25, 2025
N/A· v4
9.8 CRITICAL· v3
N/A· v2
NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.
CVE-2025-32984
1Netscout
1Ngeniusone
Jun 17, 2026
Apr 25, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.
CVE-2025-32983
1Netscout
1Ngeniusone
Jun 17, 2026
Apr 25, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.
CVE-2025-32982
1Netscout
1Ngeniusone
Jun 17, 2026
Apr 25, 2025
N/A· v4
7.5 HIGH· v3
N/A· v2
NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.
CVE-2025-32981
1Netscout
1Ngeniusone
Jun 17, 2026
Apr 25, 2025
N/A· v4
7.1 HIGH· v3
N/A· v2
NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.
CVE-2025-32979
1Netscout
1Ngeniusone
Jun 17, 2026
Apr 25, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.
CVE-2023-27000
1Netscout
1Ngeniusone
Jul 9, 2026
Jan 9, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s).
CVE-2023-26999
1Netscout
1Ngeniusone
Jul 9, 2026
Jan 9, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.
CVE-2023-26998
1Netscout
1Ngeniusone
Jul 9, 2026
Jan 9, 2024
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page.
CVE-2023-41905
1Netscout
1Ngeniusone
Jun 17, 2026
Dec 7, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated user.
CVE-2023-41172
1Netscout
1Ngeniusone
Jun 17, 2026
Dec 7, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4).
CVE-2023-41171
1Netscout
1Ngeniusone
Jun 17, 2026
Dec 7, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 3 of 4).
CVE-2023-41170
1Netscout
1Ngeniusone
Jun 17, 2026
Dec 7, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability.
CVE-2023-41169
1Netscout
1Ngeniusone
Jun 17, 2026
Dec 7, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 2 of 4).
CVE-2023-41168
1Netscout
1Ngeniusone
Jun 17, 2026
Dec 7, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 1 of 4).
CVE-2023-40302
1Netscout
1Ngeniuspulse
Jun 17, 2026
Dec 7, 2023
N/A· v4
9.1 CRITICAL· v3
N/A· v2
NETSCOUT nGeniusPULSE 3.8 has Weak File Permissions Vulnerability
CVE-2023-40301
1Netscout
1Ngeniuspulse
Jun 17, 2026
Dec 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability.
CVE-2023-40300
1Netscout
1Ngeniuspulse
Jun 17, 2026
Dec 7, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key.
CVE-2022-44718
1Netscout
1Ngeniusone
Jun 17, 2026
Jan 27, 2023
N/A· v4
3.5 LOW· v3
N/A· v2
An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfu...Show more
An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack Complexity required is High. Privileges required are administrator, User Interaction is required, and Scope is unchanged. The user must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host.Show less