Priority MEDIUM 41
In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00649 · Published 2026-02-12 · No fix listed CWE-502
Priority LOW 33
In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism.
CVSS 3.1HIGH 7.7· Network · High privileges · No interaction · EPSS 0.00289 · Published 2026-02-12 · No fix listed CWE-284
Priority MEDIUM 47
Infoblox NIOS through 8.6.4 has Improper Access Control for Grids.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00354 · Published 2025-02-27 · No fix listed CWE-284
Priority MEDIUM 49
Infoblox NIOS through 8.6.4 has Improper Authentication for Grids.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00459 · Published 2025-02-27 · No fix listed CWE-284
Priority MEDIUM 49
Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00442 · Published 2025-02-27 · No fix listed CWE-20
Priority MEDIUM 49
Infoblox NIOS through 8.6.4 executes with more privileges than required.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00409 · Published 2025-02-27 · No fix listed CWE-269
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00349 · Published 2024-01-09 · No fix listed CWE-79
Priority MEDIUM 41
Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00726 · Published 2023-08-25 · No fix listed CWE-78
Priority LOW 30
Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00857 · Published 2021-06-28 · No fix listed CWE-776
Priority LOW 30
A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a locally authenticated administrator to temporarily gain additional privileges on an affected device an…
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00379 · Published 2019-06-17 · No fix listed CWE-264
THREATIST.IORead the docs