Lucene search

[email protected]NVD:CVE-2023-20131

HistoryApr 05, 2023 - 6:15 p.m.

CVE-2023-20131

2023-04-0518:15:07

CWE-27

CWE-79

[email protected]

web.nvd.nist.gov

cisco

prime infrastructure

epnm

web interface

vulnerabilities

remote attacker

privileged information

cross-site scripting

csrf

advisory

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

26.0%

JSON

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory.

Affected configurations

Nvd

Node

ciscoprime_infrastructureRange≤3.7

ciscoprime_infrastructureRange3.10–3.10.2

ciscoprime_infrastructureMatch3.8

ciscoprime_infrastructureMatch3.8.1-

ciscoprime_infrastructureMatch3.9

ciscoprime_infrastructureMatch3.9.1-