Infoblox Netmri vulnerabilities
11 vulnerabilities
Known vulnerabilities in Infoblox Netmri, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2018-6643infobloxnetmri
EPSS score0.81%
Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter.CVE-2015-2033infobloxnetmriEPSS score2.96%
Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary commands with root privileges via a crafted terminal/anyterm-module request.CVE-2016-6484infobloxnetmriEPSS score1.83%
CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the contentType parameter in a login action to config/userAdmin/login.tdf.CVE-2025-32815infobloxnetmriEPSS score39.16%
An issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded credential can occur.CVE-2025-32814infobloxnetmriEPSS score35.85%
An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur.CVE-2025-32813infobloxnetmriEPSS score43.28%
An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur.CVE-2014-3418infobloxnetmriEPSS score7.17%
config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.CVE-2014-3419infobloxnetmriEPSS score0.46%
Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain access via unspecified vectors.CVE-2011-5178infobloxnetmriEPSS score1.38%
Multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf in Infoblox NetMRI 6.0.2.42, 6.1.2, 6.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) eulaAccepted or (2) mode parameter.CVE-2024-54188infobloxnetmriEPSS score9.34%
Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read arbitrary files with root access.CVE-2024-52874infobloxnetmriEPSS score10.65%
In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks.