netbox kayıtları

netbox üreticisine ait 46 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren: 0 · %0
Silahlaştırılmış: 0 · %0
Pre-auth RCE: 18
Düzeltme kaydı olan: %0
Yayından KEV’e ortanca: KEV’e giren kayıt yok

Yıllara göre kayıt

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')45

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

Saldırı profili

Tüm kayıtlar

46 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
36İzleyin	CVE-2023-33796İstismar yok	A vulnerability in Netbox v3.5.1 allows unauthenticated attackers to execute queries against the GraphQL database, granting them access to snetbox · netbox Kimlik doğrulamasız	Kritik9,1	—	%0,7	24 May 2023
28İzleyin	CVE-2024-56917İstismar yok	Netbox Community 4.1.7 is vulnerable to Cross Site Scripting (XSS) via the maintenance banner` in maintenance mode.netbox · netbox · CWE-79 Kimlik doğrulamasız XSS	Yüksek7,1	—	%0,4	24 Haz 2025
26İzleyin	CVE-2024-56915İstismar yok	Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS feed widget.netbox · netbox · CWE-79 Kimlik doğrulamasız XSS	Orta6,5	—	%0,5	26 Haz 2025
24İzleyin	CVE-2024-0948İstismar yok	NetBox Home Page Configuration config-revisions cross site scriptingnetbox · netbox · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,5	26 Oca 2024
24İzleyin	CVE-2024-40742İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,5	9 Tem 2024
24İzleyin	CVE-2024-40734İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40733İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40732İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40730İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40729İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40740İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40741İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40739İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40726İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40727İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-38972İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40728İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40731İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40735İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40736İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40737İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-40738İstismar yok	A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload netbox · netbox · CWE-79 pre-auth RCE XSS	Orta6,1	—	%0,4	9 Tem 2024
24İzleyin	CVE-2024-56918İstismar yok	In Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting (XSS), which allows a privileged, authenticated attacker to netbox · netbox · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	24 Haz 2025
24İzleyin	CVE-2024-56916İstismar yok	In Netbox Community 4.1.7, once authenticated, Configuration History > Add`is vulnerable to cross-site scripting (XSS) due to the `current vnetbox · netbox · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,3	24 Haz 2025
24İzleyin	CVE-2025-57543İstismar yok	Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms.netbox · netbox · CWE-79 Kimlik doğrulamasız XSS	Orta6,1	—	%0,2	16 Mar 2026

CVE-2023-33796
36İzleyin
A vulnerability in Netbox v3.5.1 allows unauthenticated attackers to execute queries against the GraphQL database, granting them access to s
KritikCVSS 9,1İstismar yokEPSS %1
- Kimlik doğrulamasız
netbox · netbox24 May 2023
CVE-2024-56917
28İzleyin
Netbox Community 4.1.7 is vulnerable to Cross Site Scripting (XSS) via the maintenance banner` in maintenance mode.
YüksekCVSS 7,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
netbox · netbox24 Haz 2025
CVE-2024-56915
26İzleyin
Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS feed widget.
OrtaCVSS 6,5İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
netbox · netbox26 Haz 2025
CVE-2024-0948
24İzleyin
NetBox Home Page Configuration config-revisions cross site scripting
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
- XSS
netbox · netbox26 Oca 2024
CVE-2024-40742
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40734
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40733
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40732
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40730
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40729
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40740
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40741
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40739
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40726
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40727
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-38972
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40728
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40731
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40735
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40736
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40737
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-40738
24İzleyin
A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload
OrtaCVSS 6,1İstismar yokEPSS %0
- pre-auth RCE
- XSS
netbox · netbox9 Tem 2024
CVE-2024-56918
24İzleyin
In Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting (XSS), which allows a privileged, authenticated attacker to
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
netbox · netbox24 Haz 2025
CVE-2024-56916
24İzleyin
In Netbox Community 4.1.7, once authenticated, Configuration History > Add`is vulnerable to cross-site scripting (XSS) due to the `current v
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
netbox · netbox24 Haz 2025
CVE-2025-57543
24İzleyin
Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms.
OrtaCVSS 6,1İstismar yokEPSS %0
- Kimlik doğrulamasız
- XSS
netbox · netbox16 Mar 2026