CVE Feed

    Dashboard / CVE / CVE-2023-26999

    CVE-2023-26999

    An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.

    Published:Jan 9, 2024
    Last Modified:Jun 16, 2025
    EPS:Jan 9, 2024
    EPSS Score:0.01179
    CVSS Score:9.8

    Affected Products

    Vendor
    Netscout
    Product
    Ngeniusone

    Exploits

    https://piotrryciak.com/posts/netscout-multiple-vulnerabilities/https://piotrryciak.com/posts/netscout-multiple-vulnerabilities/

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-221 Data Serialization External Entities Blowup

    Related CVEs

    CVE-2025-32979 (CVSS 6.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.…
    CVE-2025-32983 (CVSS 7.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.…
    CVE-2025-32984 (CVSS 6.1) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.…
    CVE-2025-32986 (CVSS 7.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an end…
    CVE-2025-32985 (CVSS 9.8) — NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.…
    CVE-2025-32981 (CVSS 7.1) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI …
    CVE-2025-32982 (CVSS 7.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.…
    CVE-2023-27000 (CVSS 6.1) — Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arb…
    CVE-2023-26998 (CVSS 5.4) — Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arb…
    CVE-2023-41905 (CVSS 5.4) — NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authent…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High