CVE-2023-26998: Netscout Ngeniusone

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability found in NetScoutnGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code via the creator parameter of the Alert Configuration page.

Affected products

• Netscout Ngeniusone: version 6.3.4 only

Published 2024-01-09. Last modified 2026-07-09.