CVE Feed

    Dashboard / CVE / CVE-2025-32981

    CVE-2025-32981

    NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.

    Published:Apr 25, 2025
    Last Modified:May 27, 2025
    EPS:Apr 25, 2025
    EPSS Score:0.00017
    CVSS Score:7.1

    Affected Products

    Vendor
    Netscout
    Product
    Ngeniusone

    Exploits

    https://www.netscout.com/securityadvisories

    Common Weakness Enumeration

    CWE-276 Incorrect Default Permissions

    Related CVEs

    CVE-2025-32979 (CVSS 6.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.…
    CVE-2025-32983 (CVSS 7.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.…
    CVE-2025-32984 (CVSS 6.1) — NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.…
    CVE-2025-32986 (CVSS 7.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an end…
    CVE-2025-32985 (CVSS 9.8) — NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.…
    CVE-2025-32982 (CVSS 7.5) — NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.…
    CVE-2023-27000 (CVSS 6.1) — Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arb…
    CVE-2023-26998 (CVSS 5.4) — Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arb…
    CVE-2023-26999 (CVSS 9.8) — An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a d…
    CVE-2023-41905 (CVSS 5.4) — NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authent…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High