Lucene search
+L

115 matches found

CVE
CVE
added 2025/02/27 12:0 a.m.72 views

CVE-2024-36047

Infoblox NIOS CVE-2024-36047 affects versions 8.6.4 and 9.x up to 9.0.3 due to Improper Input Validation. Connected sources indicate a potential privilege escalation to root on the appliance, with CVSS v3.1 base score 9.8 (CRITICAL) impacting confidentiality, integrity, and availability. Remediat...

9.8CVSS6.7AI score0.00408EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/02/27 12:0 a.m.8 views

PT-2025-9035 · Infoblox · Infoblox Nios

Name of the Vulnerable Software and Affected Versions: Infoblox NIOS versions prior to 8.6.5 Description: The issue is related to improper authentication for Grids, which could potentially allow unauthorized access. Recommendations: For versions prior to 8.6.5, update to version 8.6.5 or later to...

9.8CVSS6.6AI score0.00424EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2025/02/27 12:0 a.m.9 views

PT-2025-9036 · Infoblox · Infoblox Nios

Name of the Vulnerable Software and Affected Versions: Infoblox NIOS versions prior to 8.6.5 Description: The issue is related to Improper Access Control for Grids, which could potentially allow unauthorized access. Recommendations: For versions prior to 8.6.5, update to version 8.6.5 or later to...

9.1CVSS6.3AI score0.00327EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2025/02/27 12:0 a.m.7 views

CVE-2024-36047

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation...

9.6AI score0.00408EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/02/27 12:0 a.m.8 views

CVE-2024-36046

Infoblox NIOS through 8.6.4 executes with more privileges than required...

9.6AI score0.00378EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/27 12:0 a.m.29 views

CVE-2024-37567

Infoblox NIOS through 8.6.4 has Improper Access Control for Grids...

0.00327EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/27 12:0 a.m.7 views

PT-2025-9033 · Infoblox · Infoblox Nios

Name of the Vulnerable Software and Affected Versions: Infoblox NIOS versions prior to 8.6.5 Description: The issue allows Infoblox NIOS to execute with more privileges than required. Recommendations: For versions prior to 8.6.5, update to version 8.6.5 or later to resolve the issue...

9.8CVSS7.5AI score0.00378EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/02/27 12:0 a.m.8 views

Infoblox NIOS 安全漏洞

Infoblox NIOS is a system for managing and automating network devices and services from the US company Infoblox. It is used to automate the configuration and management of networks and to ensure stable network operation. A security vulnerability exists in Infoblox NIOS version 8.6.4 and prior...

9.8CVSS6.7AI score0.00378EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/02/27 12:0 a.m.17 views

CVE-2024-37566

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids...

0.00424EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/03 12:0 a.m.9 views

Infoblox NIOS Installed

Binary data infobloxniosdetect.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/10/03 12:0 a.m.14 views

Infoblox NIOS Web Interface Detection

Binary data infobloxnioswebinterfacedetect.nbin...

7.3AI score
Exploits0References1
NVD
NVD
added 2024/01/09 2:15 p.m.27 views

CVE-2022-28975

A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...

5.4CVSS5.3AI score0.00346EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2024/01/09 2:15 p.m.3 views

CVE-2022-28975

A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...

5.4CVSS6.2AI score0.00346EPSS
Exploits1References3
OSV
OSV
added 2024/01/09 2:15 p.m.6 views

CVE-2022-28975

A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...

5.4CVSS5.9AI score0.00346EPSS
Exploits1References2
Prion
Prion
added 2024/01/09 2:15 p.m.15 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...

4.9CVSS5.7AI score0.00346EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2024/01/09 12:0 a.m.24 views

CVE-2022-28975

A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...

5.4AI score0.00346EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2024/01/09 12:0 a.m.7 views

PT-2024-11547

Name of the Vulnerable Software and Affected Versions Infoblox NIOS version 8.5.2-409296 Description A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field. This enables attackers to potentiall...

5.4CVSS6.2AI score0.00346EPSS
Exploits1References8
CNNVD
CNNVD
added 2024/01/09 12:0 a.m.9 views

Infoblox NIOS Cross-Site Scripting Vulnerability

Infoblox NIOS is an operating system that powers Infoblox core network services. It ensures uninterrupted operation of the network infrastructure. A cross-site scripting vulnerability exists in Infoblox NIOS version v8.5.2-409296, which originates from a vulnerability that allows an attacker to...

5.4CVSS5.9AI score0.00346EPSS
Exploits1References3
CVE
CVE
added 2024/01/09 12:0 a.m.56 views

CVE-2022-28975

CVE-2022-28975 affects Infoblox NIOS 8.5.2-409296. It is a stored XSS vulnerability where a crafted payload injected into the VLAN View Name field can cause execution of arbitrary web scripts/HTML. Root cause: lack of proper sanitization/input handling in the VLAN View Name field. Impact: potenti...

5.4CVSS5.2AI score0.00346EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2023/08/25 8:15 p.m.25 views

CVE-2023-37249

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access...

8.8CVSS8.7AI score0.00602EPSS
Exploits0References2
Rows per page
Query Builder