Cross site request forgery (csrf)

2023-04-0518:15:00

PRIOn knowledge base

www.prio-n.com

cross site request forgery

cisco prime infrastructure

cisco epnm

remote attacker

privileged information

cross-site scripting

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.2%

JSON

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory.

CPENameOperatorVersion
evolved_programmable_network_managerge6.1
evolved_programmable_network_managerlt6.1.1.1
evolved_programmable_network_managerge6.0
evolved_programmable_network_managerlt6.0.2.1
evolved_programmable_network_managerge5.1
evolved_programmable_network_managerlt5.1.4.2
evolved_programmable_network_managerlt5.0.2.5
prime_infrastructureeq3.8
prime_infrastructureeq3.8.1
prime_infrastructureeq3.9

Name	Operator	Version
evolved_programmable_network_manager	ge	6.1
evolved_programmable_network_manager	lt	6.1.1.1
evolved_programmable_network_manager	ge	6.0
evolved_programmable_network_manager	lt	6.0.2.1
evolved_programmable_network_manager	ge	5.1
evolved_programmable_network_manager	lt	5.1.4.2
evolved_programmable_network_manager	lt	5.0.2.5
prime_infrastructure	eq	3.8
prime_infrastructure	eq	3.8.1
prime_infrastructure	eq	3.9