The vulnerability in the web interface of the Cisco Evolved Programmable Network Manager (EPNM) and the Cisco Prime Infrastructure monitoring and management system allows a perpetrator to carry out cross-site scripting attacks.

🗓️ 04 Dec 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Cross-site scripting vulnerability in Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure web interfaces enables remote attackers to exploit unprotected page structure.

Reporter	Title	Published	Views	Family All 14
Circl	CVE-2024-20514	6 Nov 202419:10	–	circl
Cisco	Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability	6 Nov 202416:00	–	cisco
Tenable Nessus	Cisco Prime Infrastructure XSS (cisco-sa-epnmpi-sxss-yyf2zkXs)	8 Nov 202400:00	–	nessus
Tenable Nessus	Cisco Evolved Programmable Network Manager XSS (cisco-sa-epnmpi-sxss-yyf2zkXs)	8 Nov 202400:00	–	nessus
CNNVD	Cisco Evolved Programmable Network Manager和Cisco Prime Infrastructure 跨站脚本漏洞	6 Nov 202400:00	–	cnnvd
CNVD	Cisco Evolved Programmable Network Manager Cross-Site Scripting Vulnerability (CNVD-2025-01394)	11 Nov 202400:00	–	cnvd
CVE	CVE-2024-20514	6 Nov 202416:30	–	cve
Cvelist	CVE-2024-20514 Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability	6 Nov 202416:30	–	cvelist
EUVD	EUVD-2024-18229	3 Oct 202520:07	–	euvd
NVD	CVE-2024-20514	6 Nov 202417:15	–	nvd

Vulners

Node

cisco_systems cisco_evolved_programmable_network_managerRange<8.0.0

cisco_systems prime_infrastructureRange3.10–3.10.6

Source	Link
cybersecurity-help	www.cybersecurity-help.cz/vulnerabilities/100088/
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnmpi-sxss-yyf2zkXs
web	www.web.nvd.nist.gov/view/vuln/detail

04 Dec 2024 00:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 35.4

CVSS 25.5

EPSS0.0027