PatchTheCVEngeniusone vulnerabilities and fixes
Recent CVEs affecting ngeniusone, with upgrade or downgrade steps. 7 tracked.
ngeniusone has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-04-25. Highest priority: CVE-2025-32985 (score 49/100).
- CVE-2025-32986 HIGH 7.5 UPGRADE NETSCOUT nGeniusONE before 6.4.0 b2350 has a Sensitive File Accessible Without Proper Authentication to an end
- CVE-2025-32985 CRITICAL 9.8 UPGRADE NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.
- CVE-2025-32984 MEDIUM 6.1 UPGRADE NETSCOUT nGeniusONE before 6.4.0 b2350 allows Stored Cross-Site Scripting (XSS) via a certain POST parameter.
- CVE-2025-32983 HIGH 7.5 UPGRADE NETSCOUT nGeniusONE before 6.4.0 b2350 allows Technical Information Disclosure via a Stack Trace.
- CVE-2025-32982 HIGH 7.5 UPGRADE NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module.
- CVE-2025-32981 HIGH 7.1 UPGRADE NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI
- CVE-2025-32979 MEDIUM 6.5 UPGRADE NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.
FAQ
How do I fix ngeniusone vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ngeniusone being exploited right now?
None of the tracked ngeniusone CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ngeniusone CVE should I patch first?
CVE-2025-32985 currently ranks highest (49/100): NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files..