Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2661▼ 437 respecto a la semana anterior

Críticas / altas1284▼ 85 respecto a la semana anterior

Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)247▼ 271 respecto a la semana anterior

37 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2025-32986	Analizada	Alta (7.5)	0.43%	—	Netscout Ngeniusone	25/4/2025	17/6/2026	NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an endpoint.
CVE-2025-32985	Analizada	Crítica (9.8)	0.44%	—	Netscout Ngeniusone	25/4/2025	17/6/2026	NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.
CVE-2025-32984	Analizada	Media (6.1)	0.25%	—	Netscout Ngeniusone	25/4/2025	17/6/2026	NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.
CVE-2025-32983	Analizada	Alta (7.5)	0.41%	—	Netscout Ngeniusone	25/4/2025	17/6/2026	NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.
CVE-2025-32982	Analizada	Alta (7.5)	0.38%	—	Netscout Ngeniusone	25/4/2025	17/6/2026	NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.
CVE-2025-32981	Analizada	Alta (7.1)	0.22%	—	Netscout Ngeniusone	25/4/2025	17/6/2026	NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File.
CVE-2025-32980	Aplazada	Crítica (9.8)	0.44%	—	Netscout Ngeniusone^AI	25/4/2025	17/6/2026	NETSCOUT nGeniusONE before 6.4.0 P11 b3245 has a Weak Sudo Configuration.
CVE-2025-32979	Analizada	Media (6.5)	0.35%	—	Netscout Ngeniusone	25/4/2025	17/6/2026	NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.
CVE-2023-27000	Modificada	Media (6.1)	0.54%	—	Netscout Ngeniusone	9/1/2024	9/7/2026	Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the name parameter of the Profile and Exclusion List page(s).
CVE-2023-26999	Modificada	Crítica (9.8)	1.1%	—	Netscout Ngeniusone	9/1/2024	9/7/2026	An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.
CVE-2023-26998	Modificada	Media (5.4)	0.51%	—	Netscout Ngeniusone	9/1/2024	9/7/2026	Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page.
CVE-2023-41905	Modificada	Media (5.4)	0.39%	—	Netscout Ngeniusone	7/12/2023	17/6/2026	NETSCOUT nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting (XSS) vulnerability by an authenticated user.
CVE-2023-41172	Modificada	Media (5.4)	0.39%	—	Netscout Ngeniusone	7/12/2023	17/6/2026	NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 4 of 4).
CVE-2023-41171	Modificada	Media (5.4)	0.39%	—	Netscout Ngeniusone	7/12/2023	17/6/2026	NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 3 of 4).
CVE-2023-41170	Modificada	Media (6.1)	0.41%	—	Netscout Ngeniusone	7/12/2023	17/6/2026	NetScout nGeniusONE 6.3.4 build 2298 allows a Reflected Cross-Site scripting vulnerability.
CVE-2023-41169	Modificada	Media (5.4)	0.39%	—	Netscout Ngeniusone	7/12/2023	17/6/2026	NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 2 of 4).
CVE-2023-41168	Modificada	Media (5.4)	0.39%	—	Netscout Ngeniusone	7/12/2023	17/6/2026	NetScout nGeniusONE 6.3.4 build 2298 allows a Stored Cross-Site scripting vulnerability (issue 1 of 4).
CVE-2022-44718	Modificada	Baja (3.5)	0.32%	—	Netscout Ngeniusone	27/1/2023	17/6/2026	An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 2 of 2). After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack Complexity required…
CVE-2022-44717	Modificada	Baja (3.1)	0.28%	—	Netscout Ngeniusone	27/1/2023	17/6/2026	An issue was discovered in NetScout nGeniusONE 6.3.2 build 904. Open Redirection can occur (issue 1 of 2). After successful login, an attacker must visit the vulnerable parameter and inject a crafted payload to successfully redirect to an unknown host. The attack vector is Network, and the Attack Complexity required…
CVE-2022-44715	Modificada	Alta (8.8)	0.73%	—	Netscout Ngeniusone	27/1/2023	17/6/2026	Improper File Permissions in NetScout nGeniusONE 6.3.2 build 904 allows authenticated remote users to gain permissions via a crafted payload.
CVE-2022-44029	Modificada	Media (6.1)	0.35%	—	Netscout Ngeniusone	27/1/2023	17/6/2026	An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 6 of 6.
CVE-2022-44028	Modificada	Media (6.1)	0.35%	—	Netscout Ngeniusone	27/1/2023	17/6/2026	An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 5 of 6.
CVE-2022-44027	Modificada	Media (6.1)	0.35%	—	Netscout Ngeniusone	27/1/2023	17/6/2026	An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 4 of 6.
CVE-2022-44026	Modificada	Media (6.1)	0.35%	—	Netscout Ngeniusone	27/1/2023	17/6/2026	An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 3 of 6.
CVE-2022-44025	Modificada	Media (6.1)	0.35%	—	Netscout Ngeniusone	27/1/2023	17/6/2026	An issue was discovered in NetScout nGeniusONE 6.3.2 before P10. It allows Reflected Cross-Site Scripting (XSS), issue 2 of 6.