MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2023-20127

CVSS 6.5v3.1pub. 2023-04-05upd. 2024-11-21

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

  • Cisco Prime Infrastructure

    APP
    Cisco
    3.83.8.13.93.9.1≤ 3.73.10 – 3.10.2 (bez)
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2019-15958CRITICAL9.8ten sam produkt

A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Mana...

CVE-2018-15379CRITICAL9.8ten sam produkt

A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory pe...

CVE-2018-0258CRITICAL9.8ten sam produkt

A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote ...

CVE-2016-1289CRITICAL9.8ten sam produkt

The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allo...

CVE-2016-1291CRITICAL9.8ten sam produkt

Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allo...