Vulnerabilities fixed in Cisco Prime Infrastructure and Evolved Programmable Network Manager (EPNM)

🗓️ 06 Apr 2023 00:00:00Reported by NCSCType

Cisco fixes Prime Infrastructure and Evolved Programmable Network Manager web interface flaws enabling CSRF or XSS to run commands with victim privileges; access required.

Reporter	Title	Published	Views	Family All 47
ATTACKERKB	CVE-2023-20131	5 Apr 202323:00	–	attackerkb
ATTACKERKB	CVE-2023-20127	5 Apr 202323:00	–	attackerkb
ATTACKERKB	CVE-2023-20129	5 Apr 202323:00	–	attackerkb
ATTACKERKB	CVE-2023-20130	5 Apr 202323:00	–	attackerkb
BDU FSTEC	The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a attacker to perform a CSRF attack and carry out arbitrary actions.	10 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a malicious individual to gain unauthorized access to protected information.	10 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface for controlling Cisco Prime Infrastructure monitoring and network equipment allows a attacker to execute XSS attacks.	10 Apr 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a perpetrator to carry out cross-site scripting attacks.	11 Apr 202300:00	–	bdu_fstec
Cisco	Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities	5 Apr 202316:00	–	cisco
Tenable Nessus	Cisco Evolved Programmable Network Manager Multiple Vulnerabilities (cisco-sa-pi-epnm-eRPWAXLe)	6 Apr 202300:00	–	nessus

06 Apr 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 3.16.5

EPSS0.00917

SSVC