CVE Feed

    Dashboard / CVE / CVE-2021-35199

    CVE-2021-35199

    NETSCOUT nGeniusONE 6.3.0 build 1196 and earlier allows Stored Cross-Site Scripting (XSS) in UploadFile.

    Published:Sep 30, 2021
    Last Modified:Nov 21, 2024
    EPS:Sep 30, 2021
    EPSS Score:0.00502
    CVSS Score:5.4

    Affected Products

    Vendor
    Netscout
    Product
    Ngeniusone

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-32979 (CVSS 6.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.…
    CVE-2025-32983 (CVSS 7.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.…
    CVE-2025-32984 (CVSS 6.1) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.…
    CVE-2025-32986 (CVSS 7.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an end…
    CVE-2025-32985 (CVSS 9.8) — NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.…
    CVE-2025-32981 (CVSS 7.1) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI …
    CVE-2025-32982 (CVSS 7.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.…
    CVE-2023-27000 (CVSS 6.1) — Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arb…
    CVE-2023-26998 (CVSS 5.4) — Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arb…
    CVE-2023-26999 (CVSS 9.8) — An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a d…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High