CVE Feed

    Dashboard / CVE / CVE-2023-27000

    CVE-2023-27000

    Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s).

    Published:Jan 9, 2024
    Last Modified:Jun 18, 2025
    EPS:Jan 9, 2024
    EPSS Score:0.00772
    CVSS Score:6.1

    Affected Products

    Vendor
    Netscout
    Product
    Ngeniusone

    Exploits

    https://piotrryciak.com/posts/netscout-multiple-vulnerabilities/https://piotrryciak.com/posts/netscout-multiple-vulnerabilities/

    Related CVEs

    CVE-2025-32979 (CVSS 6.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.…
    CVE-2025-32983 (CVSS 7.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.…
    CVE-2025-32984 (CVSS 6.1) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.…
    CVE-2025-32986 (CVSS 7.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an end…
    CVE-2025-32985 (CVSS 9.8) — NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.…
    CVE-2025-32981 (CVSS 7.1) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI …
    CVE-2025-32982 (CVSS 7.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.…
    CVE-2023-26998 (CVSS 5.4) — Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arb…
    CVE-2023-26999 (CVSS 9.8) — An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a d…
    CVE-2023-41905 (CVSS 5.4) — NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authent…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High