CVE-2025-32813

Infoblox NetMRI

CVE-2025-32814

Infoblox NETMRI prior to 7.6.1 is affected by an unauthenticated SQL injection in the skipjackUsername parameter. Reports (NVD/NCSC/CIRCL/NT) describe that an unauthenticated actor can exploit this to access sensitive data (including encrypted passwords) and potentially compromise the system. The...

CVE-2025-32815

NetMRI

CVE-2014-3418

CVE-2014-3418 affects Infoblox NetMRI (Network Automation products) prior to version 6.8.5. The vulnerability is an OS command injection in the web interface, caused by insufficient sanitization of the skipjackUsername parameter in login.tdf, enabling a remote attacker to execute arbitrary comman...

CVE-2014-3419

CVE-2014-3419 concerns Infoblox NetMRI prior to 6.8.5, where a weak local MySQL credential (default root: root) enables an authenticated OS user to access databases, enabling OS command injection through the affected NetMRI components. Connected sources confirm vulnerable product families include...

CVE-2024-52874

An active vulnerability CVE-2024-52874 affects Infoblox NETMRI prior to version 7.6.1. The issue allows authenticated users to perform SQL injection via the product, with the documented impact of high confidentiality, integrity, and availability risks (CVSS v3.1: 8.8). Root cause centers on impro...

CVE-2018-6643

Infoblox NetMRI 7.1.1 is affected by a Reflected Cross-Site Scripting vulnerability (CVE-2018-6643). The issue arises via the /api/docs/index.php query parameter, allowing injection of arbitrary script/HTML into responses. Documented CVSS details indicate a network attack vector with user interac...

CVE-2016-6484

CVE-2016-6484 affects Infoblox Network Automation NetMRI prior to 7.1.1. The vulnerability is a CRLF injection in the contentType parameter used in the login action at config/userAdmin/login.tdf, enabling remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting. Publi...

CVE-2024-54188

Infoblox NETMRI is affected prior to version 7.6.1. The issue allows remote authenticated users to read arbitrary files with root access due to a vulnerability in NETMRI. A fix is available: upgrade to NETMRI 7.6.1 or later. If upgrading is not immediately possible, apply the vendor’s recommended...

CVE-2011-5178

Infoblox NetMRI is affected by CVE-2011-5178: multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf, exploitable via the (1) eulaAccepted or (2) mode parameter. Affected: NetMRI 6.0.2.42, 6.1.2, 6.2.1 and earlier. Root cause is input handling in the login page ...

CVE-2015-2033

CVE-2015-2033 concerns Infoblox Network Automation NetMRI’s Anyterm Daemon, vulnerable before NETMRI-23483. A remote attacker can send a crafted terminal/anyterm-module request to achieve arbitrary command execution with root privileges. The vulnerability stems from how the Anyterm Daemon handles...