CVSS 3.0
6.1 mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NCVE-2016-6484
Medium (6.1) in infoblox netmri. EPSS 1.8% chance of exploitation in the next 30 days.
CRLF injection vulnerability in Infoblox Network Automation NetMRI before 7.1.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the contentType parameter in a login action to config/userAdmin/login.tdf.
Severity
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
- CWE
- CWE-93
- Published
- Modified
- Record from
- the NVD, synced
Affected
- infoblox:netmri
References
- http://packetstormsecurity.com/files/138615/Infoblox-7.0.1-CRLF-Injection-HTTP-Response-Splitting.html
- http://www.securityfocus.com/archive/1/539366/100/0/threaded
- http://www.securityfocus.com/bid/92794
- http://www.securitytracker.com/id/1036736
- http://packetstormsecurity.com/files/138615/Infoblox-7.0.1-CRLF-Injection-HTTP-Response-Splitting.html