CVE-2025-32815

An issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded credential can occur...

PT-2025-22492 · Infoblox · Infoblox Netmri

Name of the Vulnerable Software and Affected Versions: Infoblox NETMRI versions prior to 7.6.1 Description: An issue was discovered in Infoblox NETMRI. Authentication bypass can occur due to a hardcoded credential. Recommendations: Update Infoblox NETMRI to version 7.6.1 or later...

CVE-2025-32813

Infoblox NetMRI

CVE-2024-54188

Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read arbitrary files with root access...

CVE-2024-54188

Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read arbitrary files with root access...

CVE-2025-32814

An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur...

Infoblox NETMRI 安全漏洞

Infoblox NETMRI is a network management product from US-based Infoblox, Inc. can automate, provide visibility and continuous insight to help organizations intelligently manage their multi-vendor networks. A security vulnerability exists in Infoblox NETMRI versions prior to 7.6.1 that originates...

CVE-2025-32813

An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur...

CVE-2025-32814

Infoblox NETMRI prior to 7.6.1 is affected by an unauthenticated SQL injection in the skipjackUsername parameter. Reports (NVD/NCSC/CIRCL/NT) describe that an unauthenticated actor can exploit this to access sensitive data (including encrypted passwords) and potentially compromise the system. The...

CVE-2025-32814

An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur...

CVE-2025-32815

NetMRI

PT-2025-22490 · Infoblox · Infoblox Netmri

Name of the Vulnerable Software and Affected Versions: Infoblox NETMRI versions prior to 7.6.1 Description: An issue allows for remote, unauthenticated command injection. The vulnerability is related to insufficient data sanitization at the management level. The get saml request function is...

PT-2025-22491 · Infoblox · Infoblox Netmri

Name of the Vulnerable Software and Affected Versions: Infoblox NETMRI versions prior to 7.6.1 Description: An unauthenticated SQL injection issue exists in Infoblox NETMRI. Exploitation of this issue may allow a remote attacker to execute arbitrary code. The vulnerability is related to the lack ...

PT-2025-22487 · Infoblox · Infoblox Netmri

Name of the Vulnerable Software and Affected Versions: Infoblox NETMRI versions prior to 7.6.1 Description: The issue allows remote authenticated users to read arbitrary files with root access. Recommendations: For versions prior to 7.6.1, update to version 7.6.1 or later to resolve the issue...

Infoblox NetMRI Administration Shell Escape and Privilege Escalation Vulnerability

The administrative shell of Infoblox NetMRI is prone to shell escape and privilege escalation vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Infoblox NetMRI 7.1.1 Reflected XSS Vulnerability

Infoblox NetMRI is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2018-6643

Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter...

CVE-2018-6643

Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter...

Cross site scripting

Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter...

CVE-2018-6643

Infoblox NetMRI 7.1.1 is affected by a Reflected Cross-Site Scripting vulnerability (CVE-2018-6643). The issue arises via the /api/docs/index.php query parameter, allowing injection of arbitrary script/HTML into responses. Documented CVSS details indicate a network attack vector with user interac...