CVE-2022-28975

A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...

CVE-2020-15303

Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564...

Infoblox NIOS Terrapin Attack (000009589)

The version of Infoblox NIOS installed on the remote host is affected by a vulnerability in OpenSSH. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted fr...

CVE-2024-36046

Infoblox NIOS through 8.6.4 executes with more privileges than required...

CVE-2024-36047

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation...

CVE-2024-37566

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids...

CVE-2024-37567

Infoblox NIOS through 8.6.4 has Improper Access Control for Grids...

CVE-2024-37566

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids...

CVE-2024-37566

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids...

CVE-2024-37567

Infoblox NIOS through 8.6.4 has Improper Access Control for Grids...

CVE-2024-36047

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation...

CVE-2024-36046

Infoblox NIOS through 8.6.4 executes with more privileges than required...

CVE-2024-37567

Infoblox NIOS through 8.6.4 has Improper Access Control for Grids...

CVE-2024-37567

Infoblox NIOS

Infoblox NIOS 安全漏洞

Infoblox NIOS is a system for managing and automating network devices and services from the US company Infoblox. It is used to automate the configuration and management of networks and to ensure stable network operation. A security vulnerability exists in Infoblox NIOS version 8.6.4 and prior...

CVE-2024-36047

Infoblox NIOS CVE-2024-36047 affects versions 8.6.4 and 9.x up to 9.0.3 due to Improper Input Validation. Connected sources indicate a potential privilege escalation to root on the appliance, with CVSS v3.1 base score 9.8 (CRITICAL) impacting confidentiality, integrity, and availability. Remediat...

PT-2025-9035 · Infoblox · Infoblox Nios

Name of the Vulnerable Software and Affected Versions: Infoblox NIOS versions prior to 8.6.5 Description: The issue is related to improper authentication for Grids, which could potentially allow unauthorized access. Recommendations: For versions prior to 8.6.5, update to version 8.6.5 or later to...

CVE-2024-37566

Infoblox NIOS (versions up to 8.6.4) is affected by an improper authentication issue for Grids. The vulnerability stems from Grid authentication weaknesses, potentially enabling unauthorized access. Multiple sources corroborate the impact on Infoblox NIOS prior to 8.6.5. A remediation path found ...

PT-2025-9034 · Infoblox · Infoblox Nios

Name of the Vulnerable Software and Affected Versions: Infoblox NIOS versions 8.6.4 and earlier, 9.x through 9.0.3 Description: The issue is related to improper input validation. Recommendations: For Infoblox NIOS versions 8.6.4 and earlier, update to a version later than 8.6.4. For Infoblox NIOS...

PT-2025-9033 · Infoblox · Infoblox Nios

Name of the Vulnerable Software and Affected Versions: Infoblox NIOS versions prior to 8.6.5 Description: The issue allows Infoblox NIOS to execute with more privileges than required. Recommendations: For versions prior to 8.6.5, update to version 8.6.5 or later to resolve the issue...