Back
CVE-2004-0606
Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the (1) CLIENTID or (2) HOSTNAME option of a DHCP request.
Published: Dec 6, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (2)
| Vendor | Product | Version |
|---|---|---|
| infoblox | dns_one_appliance | 2.4.0.8 |
| infoblox | dns_one_appliance | 2.4.0.8a |
GitHub Security Advisory GHSA-7q44-7gf4-9rcp
Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier...
References (6)
- http://marc.info/?l=bugtraq&m=108769996925349&w=2
- http://www.securityfocus.com/bid/10573 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16456
- http://marc.info/?l=bugtraq&m=108769996925349&w=2
- http://www.securityfocus.com/bid/10573 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16456
Risk Scores
CVSS Score
6.8 / 10
EPSS Score
2.26%
Top 18% most likely to be exploited
Threat Score
27.9 / 100
Data Sources
NVD
EPSS
GitHub