Vulnerabilities (CVE)

Filtered by vendor Infoblox Subscribe
Filtered by product Netmri
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-3418 1 Infoblox 1 Netmri 2018-10-09 10.0 HIGH N/A
config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.
CVE-2014-3419 1 Infoblox 1 Netmri 2018-10-09 7.2 HIGH N/A
Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain access via unspecified vectors.
CVE-2015-2033 1 Infoblox 1 Netmri 2016-11-30 10.0 HIGH N/A
Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary commands with root privileges via a crafted terminal/anyterm-module request.
CVE-2011-5178 1 Infoblox 1 Netmri 2012-12-17 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf in Infoblox NetMRI 6.0.2.42, 6.1.2, 6.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) eulaAccepted or (2) mode parameter.