Infoblox Netmri — known CVE vulnerabilities

Every CVE whose affected-product data names Infoblox Netmri, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2015-2033 — CVSS 10.0 (critical): Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary commands with root…
• CVE-2014-3418 — CVSS 10.0 (critical): config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters…
• CVE-2025-32814 — CVSS 9.8 (critical): An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur.
• CVE-2024-52874 — CVSS 8.8 (high): In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks.
• CVE-2014-3419 — CVSS 7.2 (high): Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users…
• CVE-2025-32813 — CVSS 7.2 (high): An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur.
• CVE-2025-32815 — CVSS 6.5 (medium): An issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded credential can occur.
• CVE-2018-6643 — CVSS 6.1 (medium): Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter.
• CVE-2016-6484 — CVSS 6.1 (medium): CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers…
• CVE-2024-54188 — CVSS 5.3 (medium): Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read arbitrary files with root access.
• CVE-2011-5178 — CVSS 4.3 (medium): Multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf in Infoblox NetMRI 6.0.2.42, 6.1.2, 6.2.1 and…