115 matches found
CVE-2024-37567
Infoblox NIOS through 8.6.4 has Improper Access Control for Grids...
PT-2025-9036 · Infoblox · Infoblox Nios
Name of the Vulnerable Software and Affected Versions: Infoblox NIOS versions prior to 8.6.5 Description: The issue is related to Improper Access Control for Grids, which could potentially allow unauthorized access. Recommendations: For versions prior to 8.6.5, update to version 8.6.5 or later to...
CVE-2024-37567
Infoblox NIOS
Infoblox NIOS 安全漏洞
Infoblox NIOS is a system for managing and automating network devices and services from the US company Infoblox. It is used to automate the configuration and management of networks and to ensure stable network operation. A security vulnerability exists in Infoblox NIOS version 8.6.4 and prior...
CVE-2024-37566
Infoblox NIOS through 8.6.4 has Improper Authentication for Grids...
CVE-2024-37566
Infoblox NIOS (versions up to 8.6.4) is affected by an improper authentication issue for Grids. The vulnerability stems from Grid authentication weaknesses, potentially enabling unauthorized access. Multiple sources corroborate the impact on Infoblox NIOS prior to 8.6.5. A remediation path found ...
CVE-2024-36047
Infoblox NIOS CVE-2024-36047 affects versions 8.6.4 and 9.x up to 9.0.3 due to Improper Input Validation. Connected sources indicate a potential privilege escalation to root on the appliance, with CVSS v3.1 base score 9.8 (CRITICAL) impacting confidentiality, integrity, and availability. Remediat...
CVE-2024-36046
Infoblox NIOS up to version 8.6.4 is affected by a privilege escalation vulnerability where the process runs with more privileges than required. Affected product: Infoblox NIOS (versions prior to 8.6.5). Impact per sources: potential total impact due to higher-privilege execution. Remediation not...
CVE-2024-36047
Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation...
Infoblox NIOS Installed
Binary data infobloxniosdetect.nbin...
Infoblox NIOS Web Interface Detection
Binary data infobloxnioswebinterfacedetect.nbin...
CVE-2022-28975
A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...
CVE-2022-28975
A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...
CVE-2022-28975
A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...
Cross site scripting
A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...
PT-2024-11547
Name of the Vulnerable Software and Affected Versions Infoblox NIOS version 8.5.2-409296 Description A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field. This enables attackers to potentiall...
Infoblox NIOS Cross-Site Scripting Vulnerability
Infoblox NIOS is an operating system that powers Infoblox core network services. It ensures uninterrupted operation of the network infrastructure. A cross-site scripting vulnerability exists in Infoblox NIOS version v8.5.2-409296, which originates from a vulnerability that allows an attacker to...
CVE-2022-28975
CVE-2022-28975 affects Infoblox NIOS 8.5.2-409296. It is a stored XSS vulnerability where a crafted payload injected into the VLAN View Name field can cause execution of arbitrary web scripts/HTML. Root cause: lack of proper sanitization/input handling in the VLAN View Name field. Impact: potenti...
CVE-2022-28975
A stored cross-site scripting XSS vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field...