CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 0CVE-2024-52874
https://notcve.org/view.php?id=CVE-2024-52874
22 May 2025 — In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks. • https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2024-52874 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0CVE-2024-54188
https://notcve.org/view.php?id=CVE-2024-54188
22 May 2025 — Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read arbitrary files with root access. • https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2024-54188 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 15%CPEs: 1EXPL: 0CVE-2025-32814
https://notcve.org/view.php?id=CVE-2025-32814
22 May 2025 — An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur. • https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2025-32814 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.5EPSS: 23%CPEs: 1EXPL: 0CVE-2025-32815
https://notcve.org/view.php?id=CVE-2025-32815
22 May 2025 — An issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded credential can occur. • https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2025-32815 • CWE-287: Improper Authentication •
CVSS: 8.3EPSS: 2%CPEs: 1EXPL: 0CVE-2025-32813
https://notcve.org/view.php?id=CVE-2025-32813
22 May 2025 — An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur. • https://support.infoblox.com/s/article/Infoblox-NetMRI-is-vulnerable-to-CVE-2025-32813 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2018-6643
https://notcve.org/view.php?id=CVE-2018-6643
28 Aug 2018 — Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter. Infoblox NetMRI 7.1.1 tiene Cross-Site Scripting (XSS) reflejado mediante el parámetro query en /api/docs/index.php. • https://github.com/undefinedmode/CVE-2018-6643 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1CVE-2016-6484 – Infoblox 7.0.1 CRLF Injection / HTTP Response Splitting
https://notcve.org/view.php?id=CVE-2016-6484
07 Sep 2016 — CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the contentType parameter in a login action to config/userAdmin/login.tdf. Vulnerabilidad de inyección CRLF en Infoblox Network Automation NetMRI en versiones anteriores a 7.1.1 permite a atacantes remotos inyectar encabezados HTTP arbitrarios y llevar acabo ataques de división de respuesta HTTP a través del parámetro content... • https://packetstorm.news/files/id/138615 • CWE-93: Improper Neutralization of CRLF Sequences ('CRLF Injection') •
CVSS: 10.0EPSS: 2%CPEs: 1EXPL: 0CVE-2015-2033
https://notcve.org/view.php?id=CVE-2015-2033
20 Feb 2015 — Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary commands with root privileges via a crafted terminal/anyterm-module request. Anyterm Daemon en Infoblox Network Automation NetMRI anterior a NETMRI-23483 permite a atacantes remotos ejecutar comandos arbitrarios con privilegios de root a través de una respuesta terminal/anyterm-module manipulada. • http://unsecurityresearch.com/index.php?option=com_content&view=article&id=46&Itemid=53 • CWE-287: Improper Authentication •
CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 3CVE-2014-3419 – Infoblox 6.8.4.x Weak MySQL Password
https://notcve.org/view.php?id=CVE-2014-3419
09 Jul 2014 — Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain access via unspecified vectors. Infoblox NetMRI anterior a 6.8.5 tiene una contraseña de administración por defecto para la cuenta de la base de datos MySQL 'root', lo que facilita a usuarios locales obtener el acceso a través de vectores no especificados. Infoblox versions 6.4.x.x through 6.8.4.x use a default login of root with password root on their MySQL ins... • https://packetstorm.news/files/id/127410 • CWE-255: Credentials Management Errors •
CVSS: 10.0EPSS: 27%CPEs: 6EXPL: 5CVE-2014-3418 – Infoblox 6.8.2.11 - OS Command Injection
https://notcve.org/view.php?id=CVE-2014-3418
09 Jul 2014 — config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter. config/userAdmin/login.tdf en Infoblox NetMRI anterior a 6.8.5 permite a atacantes remotos ejecutar comandos arbitrarios a través de metacaracteres de shell en el parámetro skipjackUsername. Infoblox versions 6.4.x.x through 6.8.4.x suffer from a remote OS command injection vulnerability. • https://packetstorm.news/files/id/127409 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •