CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-52874
https://notcve.org/view.php?id=CVE-2024-52874
22 May 2025 — In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks. • https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2024-52874 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-54188
https://notcve.org/view.php?id=CVE-2024-54188
22 May 2025 — Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read arbitrary files with root access. • https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2024-54188 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 15%CPEs: 1EXPL: 0CVE-2025-32814
https://notcve.org/view.php?id=CVE-2025-32814
22 May 2025 — An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur. • https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2025-32814 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 23%CPEs: 1EXPL: 0CVE-2025-32815
https://notcve.org/view.php?id=CVE-2025-32815
22 May 2025 — An issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded credential can occur. • https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2025-32815 • CWE-287: Improper Authentication •
CVSS: 8.3EPSS: 2%CPEs: 1EXPL: 0CVE-2025-32813
https://notcve.org/view.php?id=CVE-2025-32813
22 May 2025 — An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur. • https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2025-32813 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2022-28975
https://notcve.org/view.php?id=CVE-2022-28975
09 Jan 2024 — A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field. Vulnerabilidad de Cross-Site Scripting (XSS) almacenado en Infoblox NIOS v8.5.2-409296 permite a los atacantes ejecutar scripts web o HTML arbitrarios a través de un payload manipulado inyectadp en el campo VLAN View Name. • http://infoblox.com • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2023-37249
https://notcve.org/view.php?id=CVE-2023-37249
25 Aug 2023 — Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access. • https://community.infoblox.com/t5/trending-kb-articles/nios-is-vulnerable-to-cve-2023-37249/ba-p/32190 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-32972
https://notcve.org/view.php?id=CVE-2022-32972
17 Feb 2023 — Infoblox BloxOne Endpoint for Windows through 2.2.7 allows DLL injection that can result in local privilege escalation. • https://community.infoblox.com/t5/trending-kb-articles/cve-2022-32972-infoblox-bloxone-endpoint-for-windows-local/ba-p/24912 • CWE-427: Uncontrolled Search Path Element •
CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0CVE-2020-15303
https://notcve.org/view.php?id=CVE-2020-15303
28 Jun 2021 — Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564. Infoblox NIOS versiones anteriores a 8.5.2, permite una expansión de entidades durante una operación de carga XML, un problema relacionado con CVE-2003-1564 • https://community.infoblox.com/t5/Security/NIOS-XML-Vulnerability/m-p/22437#M1995 • CWE-776: Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion') •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 0CVE-2018-10239
https://notcve.org/view.php?id=CVE-2018-10239
17 Jun 2019 — A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a locally authenticated administrator to temporarily gain additional privileges on an affected device and perform actions within the super user scope. The vulnerability is due to a weakness in the "support access" password generation algorithm. A locally authenticated administrative user may be able to exploit this vulnerability if the "support access" feature is enabled, they know the support... • https://community.infoblox.com/t5/Security-Blog/10427-NIOS-Privilege-Escalation-Vulnerability/ba-p/17309 • CWE-264: Permissions, Privileges, and Access Controls •