CVE-2016-1291

🗓️ 06 Apr 2016 23:00:00Reported by ciscoType

cve

cve🔗 web.nvd.nist.gov👁 59 Views🌐 WEB

Cisco Prime 1.2.0-2.2(2) & EPNM 1.2 Remote Code Execution CVE-2016-129

Reporter	Title	Published	Views	Family All 18
BDU FSTEC	The vulnerability of the Cisco Evolved Programmable Network Manager, a software tool for managing network services, and the Cisco Prime Infrastructure, a software tool for managing network lifecycles, allows a perpetrator to execute arbitrary code.	20 Apr 201600:00	–	bdu_fstec
Gitee	Exploit for Deserialization of Untrusted Data in Redhat Data_Grid	15 Sep 202009:08	–	gitee
Gitee	Exploit for Deserialization of Untrusted Data in Ibm Sterling_B2B_Integrator	3 Aug 202504:13	–	gitee
Gitee	Exploit for Deserialization of Untrusted Data in Redhat Data_Grid	29 Oct 202013:31	–	gitee
Circl	CVE-2016-1291	11 Dec 202313:42	–	circl
Cisco	Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability	6 Apr 201616:00	–	cisco
Tenable Nessus	Cisco Prime Infrastructure Java Deserialization RCE (cisco-sa-20160406-remcode)	19 Apr 201600:00	–	nessus
CNVD	Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Arbitrary Code Execution Vulnerabilities	7 Apr 201600:00	–	cnvd
Check Point Advisories	Cisco Prime Infrastructure and EPNM Deserialization Code Execution (CVE-2016-1291)	22 Aug 201600:00	–	checkpoint_advisories
Cvelist	CVE-2016-1291	6 Apr 201623:00	–	cvelist

NVD

Node

cisco evolved_programmable_network_managerMatch1.2.0

OR

cisco prime_infrastructureMatch1.2

OR

cisco prime_infrastructureMatch1.2.0.103

OR

cisco prime_infrastructureMatch1.2.1

OR

cisco prime_infrastructureMatch1.3

OR

cisco prime_infrastructureMatch1.3.0.20

OR

cisco prime_infrastructureMatch1.4

OR

cisco prime_infrastructureMatch1.4.0.45

OR

cisco prime_infrastructureMatch1.4.1

OR

cisco prime_infrastructureMatch1.4.2

OR

cisco prime_infrastructureMatch2.0

OR

cisco prime_infrastructureMatch2.1.0

OR

cisco prime_infrastructureMatch2.2

OR

sun opensolarisMatchsnv_124sparc

Source	Link
securitytracker	www.securitytracker.com/id/1035497
blogs	www.blogs.securiteam.com/index.php/archives/2727
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160406-remcode

Parameter	Position	Path	Description	CWE
payload	request body	/xmp_data_handler_service/xmpDataOperationRequestServlet	CVE-2016-1291 deserialization RCE via crafted data in HTTP POST to Cisco Prime Infrastructure / xmp_data_handler_service/xmpDataOperationRequestServlet	CWE-20

17 Jun 2026 00:41Current

9.6High risk

Vulners AI Score9.6

CVSS 29.3

CVSS 39.8

EPSS0.06769

cisco prime epnm remote code execution cve-2016-1291 nvd bug id cscuw03192