The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager software for managing network services, allows a perpetrator to carry out cross-site scripting attacks.

🗓️ 01 Feb 2022 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Vulnerability in Cisco Prime Infrastructure and Network Manager web interfaces enables cross-site scripting.

Reporter	Title	Published	Views	Family All 11
Cisco	Cisco Prime Infrastructure and Evolved Programmable Network Manager Vulnerabilities	12 Jan 202216:00	–	cisco
CNNVD	Cisco Prime Infrastructure 和 Evolved Programmable Network Manager 跨站脚本漏洞	12 Jan 202200:00	–	cnnvd
CVE	CVE-2022-20657	15 Nov 202415:39	–	cve
Cvelist	CVE-2022-20657 Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Cross-Site Scripting Vulnerability	15 Nov 202415:39	–	cvelist
EUVD	EUVD-2022-25907	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Cisco products	13 Jan 202200:00	–	ncsc
NVD	CVE-2022-20657	15 Nov 202416:15	–	nvd
OSV	CVE-2022-20657	15 Nov 202416:15	–	osv
Positive Technologies	PT-2022-1421 · Cisco · Cisco Prime Infrastructure +1	12 Jan 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-20657	22 May 202521:50	–	redhatcve

Vulners

Node

cisco_systems prime_infrastructureRange<3.10

OR

cisco_systems cisco_evolved_programmable_network_managerRange<5.1.3

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-path-trav-zws324yn
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022012414
web	www.web.nvd.nist.gov/view/vuln/detail

08 Feb 2023 00:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 36.5

CVSS 27.8

EPSS0.00242

web interface cross site scripting network manager prime infrastructure vulnerability