Unscored severity · published Sep 20, 2012
CVE-2011-5178
Multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf in Infoblox NetMRI 6.0.2.42, 6.1.2, 6.2.1 and earlier allow remote attackers to inject…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in netmri/config/userAdmin/login.tdf in Infoblox NetMRI 6.0.2.42, 6.1.2, 6.2.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) eulaAccepted or (2) mode parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netmri · Infoblox
6.0.2.42; 6.1.2; through 6.2.1; 6.2.1.48 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-5178
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-5178
Exploit
http://foregroundsecurity.com/secure-coding-and-security-qa/111-infoblox-netmri-621-612-and-60242-multiple-cross-site-scripting-xss
Exploit
http://seclists.org/fulldisclosure/2011/Nov/158
Vendor Advisory
http://secunia.com/advisories/46854
Vendor Advisory
http://www.infoblox.com/community/downloads/hotfix-v602-netmri-8831gpg
Vendor Advisory
http://www.infoblox.com/community/downloads/hotfix-v612-netmri-8831gpg
Vendor Advisory
http://www.infoblox.com/community/downloads/hotfix-v621-netmri-8831gpg
More from Netmri
9.8
CVE-2025-32814
An issue was discovered in Infoblox NETMRI before 7.6.1
8.8
CVE-2024-52874
In Infoblox NETMRI before 7.6.1, authenticated users can perform SQL injection attacks
7.2
CVE-2025-32813
An issue was discovered in Infoblox NETMRI before 7.6.1
6.5
CVE-2025-32815
An issue was discovered in Infoblox NETMRI before 7.6.1
6.1
CVE-2018-6643
Infoblox NetMRI 7.1.1 has Reflected Cross-Site Scripting via the /api/docs/index.php query parameter