Show filters
7 Total Results
Displaying 1-7 of 7
Sort by:
Attacker Value
Unknown

CVE-2018-6643

Disclosure Date: August 28, 2018 (last updated November 27, 2024)
Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter.
0
0
Attacker Value
Unknown

CVE-2016-6484

Disclosure Date: January 23, 2017 (last updated November 25, 2024)
CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the contentType parameter in a login action to config/userAdmin/login.tdf.
0
0
Attacker Value
Unknown

CVE-2015-2033

Disclosure Date: February 20, 2015 (last updated October 05, 2023)
Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary commands with root privileges via a crafted terminal/anyterm-module request.
0
0
Attacker Value
Unknown

CVE-2014-3419

Disclosure Date: July 15, 2014 (last updated October 05, 2023)
Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain access via unspecified vectors.
0
0
Attacker Value
Unknown

CVE-2014-3418

Disclosure Date: July 15, 2014 (last updated October 05, 2023)
config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.
0
0
Attacker Value
Unknown

CVE-2011-5178

Disclosure Date: September 20, 2012 (last updated October 05, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf in Infoblox NetMRI 6.0.2.42, 6.1.2, 6.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) eulaAccepted or (2) mode parameter.
0
0
Attacker Value
Unknown

CVE-2009-0860

Disclosure Date: March 10, 2009 (last updated October 04, 2023)
Cross-site scripting (XSS) vulnerability in the web user interface in the login application in NetMRI 3.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to error pages.
0
0