CVE-2025-57543 | Medium | 6.1 | 2026-03-16 | Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms. An attacker can inject arbitrary HTML, which will be rendered in the… |
CVE-2025-69848 | Medium | 5.4 | 2026-02-03 | NetBox is an open-source infrastructure resource modeling and IP address management platform. A reflected cross-site scripting (XSS) vulnerability exists in ve… |
CVE-2024-56915 | Medium | 6.5 | 2025-06-26 | Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS feed widget. |
CVE-2024-56917 | High | 7.1 | 2025-06-24 | Netbox Community 4.1.7 is vulnerable to Cross Site Scripting (XSS) via the maintenance banner` in maintenance mode. |
CVE-2024-56916 | Medium | 6.1 | 2025-06-24 | In Netbox Community 4.1.7, once authenticated, Configuration History > Add`is vulnerable to cross-site scripting (XSS) due to the `current value` field renderi… |
CVE-2024-56918 | Medium | 6.1 | 2025-06-24 | In Netbox Community 4.1.7, the login page is vulnerable to cross-site scripting (XSS), which allows a privileged, authenticated attacker to exfiltrate user inp… |
CVE-2024-47226 | Medium | 5.4 | 2024-09-22 | A stored cross-site scripting (XSS) vulnerability exists in NetBox 4.1.0 within the "Configuration History" feature of the "Admin" panel via a /core/config-rev… |
CVE-2024-40742 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the c… |
CVE-2024-40741 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the c… |
CVE-2024-40740 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40739 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40738 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40737 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40736 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40735 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40734 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40733 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40732 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40731 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40730 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40729 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40728 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40727 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-40726 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-38972 | Medium | 6.1 | 2024-07-09 | A cross-site scripting (XSS) vulnerability in netbox v4.0.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the N… |
CVE-2024-0948 | Low | 2.4 | 2024-01-26 | ** DISPUTED ** A vulnerability, which was classified as problematic, has been found in NetBox up to 3.7.0. This issue affects some unknown processing of the fi… |
CVE-2023-36234 | Medium | 5.4 | 2023-09-20 | Cross Site Scripting (XSS) vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function. |
CVE-2023-37625 | Medium | 5.4 | 2023-08-10 | A stored cross-site scripting (XSS) vulnerability in Netbox v3.4.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected int… |
CVE-2023-34565 | Medium | 5.4 | 2023-06-14 | Netbox 3.5.1 is vulnerable to Cross Site Scripting (XSS) in the "Create Wireless LAN Groups" function. |
CVE-2023-33800 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Regions (/dcim/regions/) function of Netbox v3.5.1 allows attackers to execute arbitrary web sc… |
CVE-2023-33799 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Contacts (/tenancy/contacts/) function of Netbox v3.5.1 allows attackers to execute arbitrary w… |
CVE-2023-33798 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Rack (/dcim/rack/) function of Netbox v3.5.1 allows attackers to execute arbitrary web scripts… |
CVE-2023-33797 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Sites (/dcim/sites/) function of Netbox v3.5.1 allows attackers to execute arbitrary web script… |
CVE-2023-33796 | Critical | 9.1 | 2023-05-24 | A vulnerability in Netbox v3.5.1 allows unauthenticated attackers to execute queries against the GraphQL database, granting them access to sensitive data store… |
CVE-2023-33795 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Contact Roles (/tenancy/contact-roles/) function of Netbox v3.5.1 allows attackers to execute a… |
CVE-2023-33794 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Tenants (/tenancy/tenants/) function of Netbox v3.5.1 allows attackers to execute arbitrary web… |
CVE-2023-33793 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Power Panels (/dcim/power-panels/) function of Netbox v3.5.1 allows attackers to execute arbitr… |
CVE-2023-33792 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Site Groups (/dcim/site-groups/) function of Netbox v3.5.1 allows attackers to execute arbitrar… |
CVE-2023-33791 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Provider Accounts (/circuits/provider-accounts/) function of Netbox v3.5.1 allows attackers to… |
CVE-2023-33790 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Locations (/dcim/locations/) function of Netbox v3.5.1 allows attackers to execute arbitrary we… |
CVE-2023-33789 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Contact Groups (/tenancy/contact-groups/) function of Netbox v3.5.1 allows attackers to execute… |
CVE-2023-33788 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Providers (/circuits/providers/) function of Netbox v3.5.1 allows attackers to execute arbitrar… |
CVE-2023-33787 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Tenant Groups (/tenancy/tenant-groups/) function of Netbox v3.5.1 allows attackers to execute a… |
CVE-2023-33786 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Circuit Types (/circuits/circuit-types/) function of Netbox v3.5.1 allows attackers to execute… |
CVE-2023-33785 | Medium | 5.4 | 2023-05-24 | A stored cross-site scripting (XSS) vulnerability in the Create Rack Roles (/dcim/rack-roles/) function of Netbox v3.5.1 allows attackers to execute arbitrary… |
CVE-2019-25011 | Medium | 5.4 | 2020-12-31 | NetBox through 2.6.2 allows an Authenticated User to conduct an XSS attack against an admin via a GFM-rendered field, as demonstrated by /dcim/sites/add/ comme… |