Infoblox Nios — known CVE vulnerabilities

Every CVE whose affected-product data names Infoblox Nios, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2024-36046 — CVSS 9.8 (critical): Infoblox NIOS through 8.6.4 executes with more privileges than required.
• CVE-2024-36047 — CVSS 9.8 (critical): Infoblox NIOS through 8.6.4 and 9.x through 9.0.3 has Improper Input Validation.
• CVE-2024-37566 — CVSS 9.8 (critical): Infoblox NIOS through 8.6.4 has Improper Authentication for Grids.
• CVE-2024-37567 — CVSS 9.1 (critical): Infoblox NIOS through 8.6.4 has Improper Access Control for Grids.
• CVE-2025-61880 — CVSS 8.8 (high): In Infoblox NIOS through 9.0.7, insecure deserialization can result in remote code execution.
• CVE-2023-37249 — CVSS 8.8 (high): Infoblox NIOS through 8.5.1 has a faulty component that accepts malicious input without sanitization, resulting in shell access.
• CVE-2025-61879 — CVSS 7.7 (high): In Infoblox NIOS through 9.0.7, a High-Privileged User Can Trigger an Arbitrary File Write via the Account Creation Mechanism.
• CVE-2018-10239 — CVSS 6.7 (medium): A privilege escalation vulnerability in the "support access" feature on Infoblox NIOS 6.8 through 8.4.1 could allow a locally authenticated…
• CVE-2020-15303 — CVSS 6.5 (medium): Infoblox NIOS before 8.5.2 allows entity expansion during an XML upload operation, a related issue to CVE-2003-1564.
• CVE-2022-28975 — CVSS 5.4 (medium): A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML…