CVE-2022-28975

A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...

CVE-2022-28975

A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...

CVE-2022-28975

A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...

Cross site scripting

A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...

Infoblox NIOS Cross-Site Scripting Vulnerability

Infoblox NIOS is an operating system that powers Infoblox core network services. It ensures uninterrupted operation of the network infrastructure. A cross-site scripting vulnerability exists in Infoblox NIOS version v8.5.2-409296, which originates from a vulnerability that allows an attacker to...

CVE-2022-28975

CVE-2022-28975 affects Infoblox NIOS 8.5.2-409296. It is a stored XSS vulnerability where a crafted payload injected into the VLAN View Name field can cause execution of arbitrary web scripts/HTML. Root cause: lack of proper sanitization/input handling in the VLAN View Name field. Impact: potenti...

CVE-2022-28975

A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...

PT-2024-11547

Name of the Vulnerable Software and Affected Versions Infoblox NIOS version 8.5.2-409296 Description A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field. This enables attackers to potentiall...

CVE-2022-28975: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...

CVE-2023-37249

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access...

Design/Logic Flaw

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access...

Infoblox NIOS 安全漏洞

Infoblox NIOS is an operating system that powers Infoblox core network services. It ensures uninterrupted operation of the network infrastructure. A security vulnerability exists in Infoblox NIOS version 8.5.1 and prior versions, which originates from accepting malicious input without cleaning,...

CVE-2023-37249

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access...

CVE-2023-37249

CVE-2023-37249 affects Infoblox NIOS up to version 8.5.1. A faulty component accepts malicious input without sanitization, resulting in shell access. The NVD entry records a CVSS v3.1 base score of 8.8 (Network, Low effort, Privileges Required: Low, User Interaction: None; Impact: Confidentiality...

CVE-2023-37249

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access...

CVE-2023-37249: Improper Neutralization of Special Elements used in an OS Command

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access...

Unspecified Vulnerability in Infoblox NIOS

Infoblox NIOS is an operating system that powers Infoblox core network services. It ensures uninterrupted operation of the network infrastructure. A security vulnerability exists in Infoblox NIOS versions prior to 8.5.2, which stems from a program that allows entity expansion during an XML upload...

CVE-2020-15303

Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564...

Design/Logic Flaw

Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564...

CVE-2020-15303

Infoblox NIOS before 8.5.2 is affected by an XML entity-expansion vulnerability during XML upload (CVE-2020-15303). The CNVD entry indicates this stems from a program that allows entity expansion, enabling a remote attacker to read files by sending a crafted XML. The issue is fixed in 8.5.2; upgr...