netbox records

46 published records for vendor netbox.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 18
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')45

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

46 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
36Monitor	CVE-2023-33796No exploit	A vulnerability in Netbox v3.5.1 allows unauthenticated attackers to execute queries against the GraphQL database, granting them access to snetbox · netbox Pre-auth	Critical9.1	—	0.7%	May 24, 2023
28Monitor	CVE-2024-56917No exploit	Netbox Community 4.1.7 is vulnerable to Cross Site Scripting (XSS) via the maintenance banner` in maintenance mode.netbox · netbox · CWE-79 Pre-auth XSS	High7.1	—	0.4%	Jun 24, 2025
26Monitor	CVE-2024-56915No exploit	Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS feed widget.netbox · netbox · CWE-79 Pre-auth XSS	Medium6.5	—	0.5%	Jun 26, 2025
24Monitor	CVE-2024-0948No exploit	NetBox Home Page Configuration config-revisions cross site scriptingnetbox · netbox · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Jan 26, 2024
24Monitor	CVE-2024-40742No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.5%	Jul 9, 2024
24Monitor	CVE-2024-40734No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40733No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40732No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40730No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40729No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40740No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40741No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40739No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40726No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40727No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-38972No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40728No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40731No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40735No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40736No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40737No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-40738No exploit	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Medium6.1	—	0.4%	Jul 9, 2024
24Monitor	CVE-2024-56918No exploit	In Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting (XSS), which allows a privileged, authenticated attacker to netbox · netbox · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Jun 24, 2025
24Monitor	CVE-2024-56916No exploit	In Netbox Community 4.1.7, once authenticated, Configuration History > Add`is vulnerable to cross-site scripting (XSS) due to the `current vnetbox · netbox · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Jun 24, 2025
24Monitor	CVE-2025-57543No exploit	Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms.netbox · netbox · CWE-79 Pre-auth XSS	Medium6.1	—	0.2%	Mar 16, 2026

CVE-2023-33796
36Monitor
A vulnerability in Netbox v3.5.1 allows unauthenticated attackers to execute queries against the GraphQL database, granting them access to s
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
netbox · netboxMay 24, 2023
CVE-2024-56917
28Monitor
Netbox Community 4.1.7 is vulnerable to Cross Site Scripting (XSS) via the maintenance banner` in maintenance mode.
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
netbox · netboxJun 24, 2025
CVE-2024-56915
26Monitor
Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS feed widget.
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- XSS
netbox · netboxJun 26, 2025
CVE-2024-0948
24Monitor
NetBox Home Page Configuration config-revisions cross site scripting
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
netbox · netboxJan 26, 2024
CVE-2024-40742
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40734
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40733
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40732
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40730
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40729
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40740
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40741
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40739
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40726
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40727
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-38972
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40728
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40731
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40735
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40736
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40737
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-40738
24Monitor
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
MediumCVSS 6.1No exploitEPSS 0%
- pre-auth RCE
- XSS
netbox · netboxJul 9, 2024
CVE-2024-56918
24Monitor
In Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting (XSS), which allows a privileged, authenticated attacker to
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
netbox · netboxJun 24, 2025
CVE-2024-56916
24Monitor
In Netbox Community 4.1.7, once authenticated, Configuration History > Add`is vulnerable to cross-site scripting (XSS) due to the `current v
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
netbox · netboxJun 24, 2025
CVE-2025-57543
24Monitor
Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms.
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
netbox · netboxMar 16, 2026