Infoblox · Infoblox Nios · CVE-2022-28975
**Name of the Vulnerable Software and Affected Versions**
Infoblox NIOS version 8.5.2-409296
**Description**
A stored cross-site scripting (XSS) issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the `VLAN View Name` field. This enables attackers to potentially manipulate the web application's behavior.
**Recommendations**
For Infoblox NIOS version 8.5.2-409296, consider restricting access to the VLAN View Name field until a patch is available. As a temporary workaround, avoid using the `VLAN View Name` field for any input that may contain malicious scripts. At the moment, there is no information about a newer version that contains a fix for this issue.