CVE-2017-6698

2017-07-0400:00:00

cisco

www.cve.org

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

35.9%

JSON

A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc23892 CSCvc35270 CSCvc35626 CSCvc35630 CSCvc49568. Known Affected Releases: 3.1(1) 2.0(4.0.45B).

CNA Affected

[
  {
    "product": "Cisco Prime Infrastructure and Evolved Programmable Network Manager",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Cisco Prime Infrastructure and Evolved Programmable Network Manager"
      }
    ]
  }
]