Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior

Críticas / altas1449▲ 87 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

37 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2022-44024	Modificada	Media (6.1)	0.35%	—	Netscout Ngeniusone	27/1/2023	17/6/2026	An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 1 of 6.
CVE-2021-45983	Modificada	Crítica (9.8)	1.4%	—	Netscout Ngeniusone	2/6/2022	17/6/2026	NetScout nGeniusONE 6.3.2 allows Java RMI Code Execution.
CVE-2021-45982	Modificada	Alta (8.8)	0.98%	—	Netscout Ngeniusone	2/6/2022	17/6/2026	NetScout nGeniusONE 6.3.2 allows Arbitrary File Upload by a privileged user.
CVE-2021-45981	Modificada	Crítica (9.8)	1.1%	—	Netscout Ngeniusone	2/6/2022	17/6/2026	NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack.
CVE-2021-35205	Modificada	Media (5.4)	0.43%	—	Netscout Ngeniusone	30/9/2021	17/6/2026	NETSCOUT Systems nGeniusONE version 6.3.0 build 1196 allows URL redirection in redirector.
CVE-2021-35204	Modificada	Media (5.4)	0.47%	—	Netscout Ngeniusone	30/9/2021	17/6/2026	NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Reflected Cross-Site Scripting (XSS) in the support endpoint.
CVE-2021-35203	Modificada	Media (5.7)	0.72%	—	Netscout Ngeniusone	30/9/2021	17/6/2026	NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Arbitrary File Read operations via the FDSQueryService endpoint.
CVE-2021-35202	Modificada	Media (4.3)	0.66%	—	Netscout Ngeniusone	30/9/2021	17/6/2026	NETSCOUT Systems nGeniusONE 6.3.0 build 1196 allows Authorization Bypass (to access an endpoint) in FDSQueryService.
CVE-2021-35201	Modificada	Media (6.5)	0.96%	—	Netscout Ngeniusone	30/9/2021	17/6/2026	NEI in NETSCOUT nGeniusONE 6.3.0 build 1196 allows XML External Entity (XXE) attacks.
CVE-2021-35200	Modificada	Media (4.8)	0.46%	—	Netscout Ngeniusone	30/9/2021	17/6/2026	NETSCOUT nGeniusONE 6.3.0 build 1196 allows high-privileged users to achieve Stored Cross-Site Scripting (XSS) in FDSQueryService.
CVE-2021-35199	Modificada	Media (5.4)	0.47%	—	Netscout Ngeniusone	30/9/2021	17/6/2026	NETSCOUT nGeniusONE 6.3.0 build 1196 and earlier allows Stored Cross-Site Scripting (XSS) in UploadFile.
CVE-2021-35198	Modificada	Media (5.4)	0.47%	—	Netscout Ngeniusone	30/9/2021	17/6/2026	NETSCOUT nGeniusONE 6.3.0 build 1004 and earlier allows Stored Cross-Site Scripting (XSS) in the Packet Analysis module.