Infoblox

Records27All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high7CVSS 7.0–8.9

Exploited now

Infoblox records in CISA KEV

No Infoblox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Netmri 11 records HIGH Nios 10 records MEDIUM Dns One Appliance 3 records HIGH Bloxone Endpoint 1 record LOW Dns One 1 record LOW

Records

27 records

TI-2025-23845 CVE-2025-32814 · GHSA-gfm6-h4jq-qp9r

An issue was discovered in Infoblox NETMRI before 7.6.1.

HIGH 75

An issue was discovered in Infoblox NETMRI before 7.6.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.37387 Published 2025-05-22 No fix listed CWE-89

TI-2004-00415 CVE-2004-0460 · GHSA-qhjw-939w-vp4h

Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP…

HIGH 72

Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.45333 Published 2004-06-24 No fix listed

TI-2025-23844 CVE-2025-32813 · GHSA-9888-65w8-vw6m

An issue was discovered in Infoblox NETMRI before 7.6.1.

MEDIUM 63

An issue was discovered in Infoblox NETMRI before 7.6.1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.44966 Published 2025-05-22 No fix listed CWE-77

TI-2004-00416 CVE-2004-0461 · GHSA-wmcx-jvg5-m384

The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in…

MEDIUM 60

The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, w…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.16773 Published 2004-06-24 No fix listed

TI-2022-11560 CVE-2022-28975 · GHSA-g2wq-4jp5-xm5p

A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows…

MEDIUM 58

A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00349 Published 2024-01-09 No fix listed CWE-79

TI-2025-23846 CVE-2025-32815 · GHSA-662m-3r43-rvw4

An issue was discovered in Infoblox NETMRI before 7.6.1.

MEDIUM 57

An issue was discovered in Infoblox NETMRI before 7.6.1.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.40777 Published 2025-05-22 No fix listed CWE-287

TI-2024-35378 CVE-2024-52874 · GHSA-ffqf-972q-qhhv

In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks.

MEDIUM 54

In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.11931 Published 2025-05-22 No fix listed CWE-89

TI-2014-02750 CVE-2014-3418 · GHSA-35xc-5p56-vcx8

config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to…

MEDIUM 53

config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07171 Published 2014-07-15 No fix listed CWE-78

TI-2024-25066 CVE-2024-37566 · GHSA-53j9-5hmj-8v9f

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids.

MEDIUM 49

Infoblox NIOS through 8.6.4 has Improper Authentication for Grids.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00459 Published 2025-02-27 No fix listed CWE-284

TI-2024-23901 CVE-2024-36047 · GHSA-jf75-x4f2-r8c9

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation.

MEDIUM 49

Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00442 Published 2025-02-27 No fix listed CWE-20

TI-2024-23900 CVE-2024-36046 · GHSA-v2m3-cppr-8m5q

Infoblox NIOS through 8.6.4 executes with more privileges than required.

MEDIUM 49

Infoblox NIOS through 8.6.4 executes with more privileges than required.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00409 Published 2025-02-27 No fix listed CWE-269

TI-2015-01825 CVE-2015-2033 · GHSA-qf3h-77w9-6prh

Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote…

MEDIUM 48

Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary commands with root privileges via a crafted terminal/anyterm-module request.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02963 Published 2015-02-20 No fix listed CWE-287

TI-2024-25067 CVE-2024-37567 · GHSA-xfxq-4gvm-mf69

Infoblox NIOS through 8.6.4 has Improper Access Control for Grids.

MEDIUM 47

Infoblox NIOS through 8.6.4 has Improper Access Control for Grids.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00354 Published 2025-02-27 No fix listed CWE-284

TI-2026-69557 CVE-2026-107510 · GHSA-hgvr-pf8h-6rjx

Argument injection in Infoblox NIOS enables privilege escalation

MEDIUM 41

An authenticated high privilege user can inject arguments in troubleshooting commands resulting in privilege escalation.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00294 Published 2026-10-08 No fix listed CWE-269

TI-2025-38250 CVE-2025-61880 · GHSA-j33g-vgfm-6pxv

In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution.

MEDIUM 41

In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00659 Published 2026-02-12 No fix listed CWE-502

TI-2023-18879 CVE-2023-37249 · GHSA-gj7g-wm3j-x5fh

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without…

MEDIUM 41

Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00726 Published 2023-08-25 No fix listed CWE-78

TI-2024-36287 CVE-2024-54188 · GHSA-7vx5-gmqw-3wfc

Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to…

LOW 37

Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read arbitrary files with root access.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.10468 Published 2025-05-22 No fix listed CWE-200

TI-2022-14489 CVE-2022-32972 · GHSA-4ppg-c52g-rpx2

Infoblox BloxOne Endpoint for Windows through 2.2.7 allows DLL injection that can result in local privilege escalation.

LOW 35

Infoblox BloxOne Endpoint for Windows through 2.2.7 allows DLL injection that can result in local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00212 Published 2023-02-17 No fix listed CWE-427

TI-2004-00547 CVE-2004-0606 · GHSA-7q44-7gf4-9rcp

Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and…

LOW 34

Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the (1) CLIENTID or (2) HOSTNAME option of a DHCP…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02262 Published 2004-06-30 No fix listed

TI-2025-38249 CVE-2025-61879 · GHSA-8258-fr2h-jgx8

In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File…

LOW 33

In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism.

CVSS 3.1HIGH 7.7 Network High privileges No interaction EPSS 0.00293 Published 2026-02-12 No fix listed CWE-284

TI-2014-02751 CVE-2014-3419 · GHSA-g7gm-5527-72qc

Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL…

LOW 32

Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain access via unspecified vectors.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00459 Published 2014-07-15 No fix listed CWE-255

TI-2016-05558 CVE-2016-6484 · GHSA-35wp-mq65-94rh

CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows…

LOW 31

CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the contentType parameter in a logi…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01831 Published 2017-01-23 No fix listed CWE-93

TI-2020-12058 CVE-2020-15303 · GHSA-p9hm-fgj4-cw8w

Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564.

LOW 30

Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00857 Published 2021-06-28 No fix listed CWE-776

TI-2018-07263 CVE-2018-10239 · GHSA-5x64-6cf8-m3mw

A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8…

LOW 30

A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a locally authenticated administrator to temporarily gain additional privileges on an affected device an…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00379 Published 2019-06-17 No fix listed CWE-264

TI-2018-04898 CVE-2018-6643 · GHSA-x24p-rx49-qj47

Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter.

LOW 29

Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00808 Published 2018-08-28 No fix listed CWE-79

Open these records in search →