CVE-2024-37566

Infoblox NIOS (versions up to 8.6.4) is affected by an improper authentication issue for Grids. The vulnerability stems from Grid authentication weaknesses, potentially enabling unauthorized access. Multiple sources corroborate the impact on Infoblox NIOS prior to 8.6.5. A remediation path found ...

CVE-2024-37567

Infoblox NIOS

CVE-2024-36047

Infoblox NIOS CVE-2024-36047 affects versions 8.6.4 and 9.x up to 9.0.3 due to Improper Input Validation. Connected sources indicate a potential privilege escalation to root on the appliance, with CVSS v3.1 base score 9.8 (CRITICAL) impacting confidentiality, integrity, and availability. Remediat...

CVE-2024-36046

Infoblox NIOS up to version 8.6.4 is affected by a privilege escalation vulnerability where the process runs with more privileges than required. Affected product: Infoblox NIOS (versions prior to 8.6.5). Impact per sources: potential total impact due to higher-privilege execution. Remediation not...

CVE-2018-10239

Infoblox NIOS 6.8–8.4.1 has a privilege-escalation in the "+support access" feature. A locally authenticated administrator could temporarily gain super-user scope if they know the current session’s support access code and the algorithm to derive the support password, provided the feature is enabl...

CVE-2020-15303

Infoblox NIOS before 8.5.2 is affected by an XML entity-expansion vulnerability during XML upload (CVE-2020-15303). The CNVD entry indicates this stems from a program that allows entity expansion, enabling a remote attacker to read files by sending a crafted XML. The issue is fixed in 8.5.2; upgr...

CVE-2023-37249

CVE-2023-37249 affects Infoblox NIOS up to version 8.5.1. A faulty component accepts malicious input without sanitization, resulting in shell access. The NVD entry records a CVSS v3.1 base score of 8.8 (Network, Low effort, Privileges Required: Low, User Interaction: None; Impact: Confidentiality...

CVE-2022-28975

CVE-2022-28975 affects Infoblox NIOS 8.5.2-409296. It is a stored XSS vulnerability where a crafted payload injected into the VLAN View Name field can cause execution of arbitrary web scripts/HTML. Root cause: lack of proper sanitization/input handling in the VLAN View Name field. Impact: potenti...

CVE-2025-61880

Infoblox NIOS up to version 9.0.7 is affected by CVE-2025-61880 due to insecure deserialization that can lead to remote code execution. The publicly documented impact states that an attacker could exploit insecure deserialization to achieve remote code execution, with a CVSS v3.1 base score of 8....

CVE-2025-61879

CVE-2025-61879 affects Infoblox NIOS up to version 9.0.7. The vulnerability allows a High-Privileged User to trigger an arbitrary file write via the account creation mechanism, indicating a remote attack surface over the network with high exploitation difficulty (CVSS v3.1: 7.7, HIGH). Affected c...