Vulnerabilities > Netscout
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-01-27 | CVE-2022-44718 | Open Redirect vulnerability in Netscout Ngeniusone 6.3.2 An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. | 3.5 |
| 2022-06-02 | CVE-2021-45981 | XXE vulnerability in Netscout Ngeniusone 6.3.2 NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack. | 7.5 |
| 2022-06-02 | CVE-2021-45982 | Unrestricted Upload of File with Dangerous Type vulnerability in Netscout Ngeniusone 6.3.2 NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user. | 6.5 |
| 2022-06-02 | CVE-2021-45983 | Unspecified vulnerability in Netscout Ngeniusone 6.3.2 NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution. | 9.8 |
| 2021-09-30 | CVE-2021-35198 | Cross-site Scripting vulnerability in Netscout Ngeniusone NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting (XSS) in the Packet Analysis module. | 3.5 |
| 2021-09-30 | CVE-2021-35199 | Cross-site Scripting vulnerability in Netscout Ngeniusone NETSCOUT nGeniusONE 6.3.0 build 1196 and earlier allows Stored Cross-Site Scripting (XSS) in UploadFile. | 3.5 |
| 2021-09-30 | CVE-2021-35200 | Cross-site Scripting vulnerability in Netscout Ngeniusone 6.3.0 NETSCOUT nGeniusONE 6.3.0 build 1196 allows high-privileged users to achieve Stored Cross-Site Scripting (XSS) in FDSQueryService. | 3.5 |
| 2021-09-30 | CVE-2021-35201 | XXE vulnerability in Netscout Ngeniusone 6.3.0 NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity (XXE) attacks. | 4.3 |
| 2021-09-30 | CVE-2021-35202 | Incorrect Permission Assignment for Critical Resource vulnerability in Netscout Ngeniusone 6.3.0 NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Authorization Bypass (to access an endpoint) in FDSQueryService. | 4.3 |
| 2021-09-30 | CVE-2021-35203 | Files or Directories Accessible to External Parties vulnerability in Netscout Ngeniusone 6.3.0 NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint. | 3.5 |