Vulnerabilities > Netscout > Ngeniusone
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-01-09 | CVE-2023-26998 | Cross-site Scripting vulnerability in Netscout Ngeniusone 6.3.4 Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page. | 5.4 |
| 2024-01-09 | CVE-2023-26999 | XXE vulnerability in Netscout Ngeniusone 6.3.4 An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file. | 9.8 |
| 2024-01-09 | CVE-2023-27000 | Cross-site Scripting vulnerability in Netscout Ngeniusone 6.3.4 Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s). | 6.1 |
| 2023-12-07 | CVE-2023-41168 | Cross-site Scripting vulnerability in Netscout Ngeniusone 6.3.4 NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 1 of 4). | 5.4 |
| 2023-12-07 | CVE-2023-41169 | Cross-site Scripting vulnerability in Netscout Ngeniusone 6.3.4 NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 2 of 4). | 5.4 |
| 2023-12-07 | CVE-2023-41170 | Cross-site Scripting vulnerability in Netscout Ngeniusone 6.3.4 NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability. | 6.1 |
| 2023-12-07 | CVE-2023-41171 | Cross-site Scripting vulnerability in Netscout Ngeniusone 6.3.4 NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 3 of 4). | 5.4 |
| 2023-12-07 | CVE-2023-41172 | Cross-site Scripting vulnerability in Netscout Ngeniusone 6.3.4 NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4). | 5.4 |
| 2023-12-07 | CVE-2023-41905 | Cross-site Scripting vulnerability in Netscout Ngeniusone 6.3.4 NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated user. | 5.4 |
| 2023-01-27 | CVE-2022-44024 | Cross-site Scripting vulnerability in Netscout Ngeniusone 6.3.2 An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. | 6.1 |