Design/Logic Flaw

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access...

Infoblox NIOS 安全漏洞

Infoblox NIOS is an operating system that powers Infoblox core network services. It ensures uninterrupted operation of the network infrastructure. A security vulnerability exists in Infoblox NIOS version 8.5.1 and prior versions, which originates from accepting malicious input without cleaning,...

CVE-2023-37249

CVE-2023-37249 affects Infoblox NIOS up to version 8.5.1. A faulty component accepts malicious input without sanitization, resulting in shell access. The NVD entry records a CVSS v3.1 base score of 8.8 (Network, Low effort, Privileges Required: Low, User Interaction: None; Impact: Confidentiality...

CVE-2023-37249

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access...

CVE-2023-37249

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access...

Unspecified Vulnerability in Infoblox NIOS

Infoblox NIOS is an operating system that powers Infoblox core network services. It ensures uninterrupted operation of the network infrastructure. A security vulnerability exists in Infoblox NIOS versions prior to 8.5.2, which stems from a program that allows entity expansion during an XML upload...

CVE-2020-15303

Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564...

Design/Logic Flaw

Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564...

CVE-2020-15303

Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564...

CVE-2020-15303

Infoblox NIOS before 8.5.2 is affected by an XML entity-expansion vulnerability during XML upload (CVE-2020-15303). The CNVD entry indicates this stems from a program that allows entity expansion, enabling a remote attacker to read files by sending a crafted XML. The issue is fixed in 8.5.2; upgr...

Infoblox NIOS 安全漏洞

Infoblox NIOS is an operating system that powers Infoblox core network services. It ensures uninterrupted operation of the network infrastructure. A security vulnerability exists in Infoblox NIOS versions prior to 8.5.2, which stems from a program that allows entity expansion during an XML upload...

CVE-2018-10239

A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a locally authenticated administrator to temporarily gain additional privileges on an affected device and perform actions within the super user scope. The vulnerability is due to a...

Privilege escalation

A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a locally authenticated administrator to temporarily gain additional privileges on an affected device and perform actions within the super user scope. The vulnerability is due to a...

CVE-2018-10239

A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a locally authenticated administrator to temporarily gain additional privileges on an affected device and perform actions within the super user scope. The vulnerability is due to a...

CVE-2018-10239

Infoblox NIOS 6.8–8.4.1 has a privilege-escalation in the "+support access" feature. A locally authenticated administrator could temporarily gain super-user scope if they know the current session’s support access code and the algorithm to derive the support password, provided the feature is enabl...