Netmri

Vendor:

First CVE: Sep 20, 2012 · Active for 13 years

11
Total CVEs
More Total CVEs than 90% of tracked products
1.8
Avg CVEs / Year
Higher CVE frequency than 63% of tracked products
7.4
Avg CVSS
Higher Avg CVSS than 51% of tracked products
0.0%
KEV Rate
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Netmri over time

Volume of CVEsAvg CVSS Base Score
First CVE
Sep 20, 2012
13 years ago
Most Recent CVE
May 22, 2025
432 days ago

CVE Severity & Scoring

Netmri11 CVEs
All CVEs353,173 CVEs
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network7 (63.6%)
Unknown4 (36.4%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (45.5%)
High2 (18.2%)
Unknown4 (36.4%)
User Interaction
None5 (45.5%)
Unknown4 (36.4%)
Required2 (18.2%)
Privileges Required
Low2 (18.2%)
High1 (9.1%)
None4 (36.4%)
Unknown4 (36.4%)

Top CVEs

Signals from CVEs in this product scope (11 CVEs).

11 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur.
May 22, 20259.863NOYES
An issue was discovered in Infoblox NETMRI before 7.6.1. Remote Unauthenticated Command Injection can occur.
May 22, 20257.258NOYES
An issue was discovered in Infoblox NETMRI before 7.6.1. Authentication Bypass via a Hardcoded credential can occur.
May 22, 20256.555NOYES
config/userAdmin/login.tdf in Infoblox NetMRI before 6.8.5 allows remote attackers to execute arbitrary commands via shell metacharacters in the skipjackUsername parameter.
Jul 15, 201410.038NOYES
In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks.
May 22, 20258.826NONO
Anyterm Daemon in Infoblox Network Automation NetMRI before NETMRI-23483 allows remote attackers to execute arbitrary commands with root privileges via a crafted terminal/anyterm-m
Feb 20, 201510.025NONO
Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter.
Aug 28, 20186.121NONO
Infoblox NETMRI before 7.6.1 has a vulnerability allowing remote authenticated users to read arbitrary files with root access.
May 22, 20255.319NONO
CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks
Jan 23, 20176.118NONO
Infoblox NetMRI before 6.8.5 has a default password of admin for the "root" MySQL database account, which makes it easier for local users to obtain access via unspecified vectors.
Jul 15, 20147.218NONO

Exploit Exposure

Signals from CVEs in this product scope (11 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
3 CVEs
27.3% of CVEs· 98th percentile
ExploitDB
1 CVE
9.1% of CVEs· 86th percentile

Social Chatter

Signals from CVEs in this product scope (11 CVEs).

Media Mentions

Signals from CVEs in this product scope (11 CVEs).

Top CNAs Publishing CVEs For Netmri

Top CWEs

Versions

VersionCVE CountAvg CVSSAvg EPSSKEVExploits
7.1.116.10.8%00
6.8.2.1128.63.8%01
6.2.1.4837.23.0%01
6.2.128.63.8%01
6.1.237.23.0%01
6.0.2.4237.23.0%01