CVE Catalog
CVE-2022-28975
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.35%
27th percentile - higher than 27% of all known CVEs
Summary
A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field.
Risk Assessment
An attacker can execute arbitrary scripts in the administrator's browser, leading to session hijacking, configuration changes, or theft of sensitive data.
Recommendation
Upgrade Infoblox NIOS to a patched version immediately. Until then, restrict administrative panel access and apply input filtering.
Original NVD description (English source)
A stored cross-site scripting (XSS) vulnerability in Infoblox NIOS v8.5.2-409296 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the VLAN View Name field.