NetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/en_US/domains/add_domain.jsp, which allows remote attackers to gain administrator privileges via a direct request.
NETSCOUT nGeniusONE before 6.4.0 b2350 has Hardcoded Credentials that can be obtained from JAR files.
NETSCOUT nGeniusPULSE 3.8 has a Command Injection Vulnerability.
NetScout nGeniusONE 6.3.2 allows an XML External Entity (XXE) attack.
An issue found in NetScout nGeniusOne v.6.3.4 allows a remote attacker to execute arbitrary code and cause a denial of service via a crafted file.
NETSCOUT nGeniusPULSE 3.8 has a Hardcoded Cryptographic Key.