Lucene search
HistoryJan 09, 2024 - 2:15 p.m.
CVE-2022-28975
cve-2022-28975
stored xss
infoblox nios
vulnerability
web security
nvd
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.0004 Low
EPSS
Percentile
14.0%
A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field.
Affected configurations
Node
infobloxniosMatch8.5.2-409296
| CPE | Name | Operator | Version |
|---|---|---|---|
| infoblox:nios | infoblox nios | eq | 8.5.2-409296 |
Related
nvd
nvd
CVE-2022-28975
2024-01-09 14:15:45
prion
prion
Cross site scripting
2024-01-09 14:15:00
cvelist
cvelist
CVE-2022-28975
2024-01-09 00:00:00
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.0004 Low
EPSS
Percentile
14.0%
Related for CVE-2022-28975