Lucene search
+L

197 matches found

Vulnrichment
Vulnrichment
•added 2021/08/04 5:20 p.m.•10 views

CVE-2021-34707 Cisco Evolved Programmable Network Manager Sensitive Information Disclosure Vulnerability

A vulnerability in the REST API of Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API...

6.5CVSS6.2AI score0.01095EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/08/04 5:20 p.m.•34 views

CVE-2021-34707 Cisco Evolved Programmable Network Manager Sensitive Information Disclosure Vulnerability

A vulnerability in the REST API of Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API...

6.5CVSS6.4AI score0.01095EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/04 12:00 a.m.•4 views

CVE-2021-34707: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the REST API of Cisco Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API...

6.5CVSS5.9AI score0.01095EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2021/05/24 12:00 a.m.•16 views

The vulnerability of the Cisco Prime Infrastructure monitoring and management system, the Cisco Evolved Programmable Network (EPN) Manager software for managing network services, and the Cisco Identity Services Engine platform for managing connection policies arises from improper external control of file names or paths. This allows attackers to write arbitrary files.

The vulnerability of the Cisco Prime Infrastructure monitoring and management system, the Cisco Evolved Programmable Network EPN Manager software for managing network services, and the Cisco Identity Services Engine connection policy management platform are related to improper external manipulati...

4.4CVSS5.5AI score0.00212EPSS
SaveExploits0References2Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/22 12:00 a.m.•6 views

CVE-2021-1306: External Control of File Name or Path

A vulnerability in the restricted shell of Cisco Evolved Programmable Network EPN Manager, Cisco Identity Services Engine ISE, and Cisco Prime Infrastructure could allow an authenticated, local attacker to identify directories and write arbitrary files to the file system. This vulnerability is du...

4.4CVSS5.9AI score0.00212EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/22 12:00 a.m.•2 views

CVE-2021-1487: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied...

9CVSS6.5AI score0.02115EPSS
SaveExploits0References2
CNVD
CNVD
•added 2021/05/21 12:00 a.m.•10 views

Cisco Prime Infrastructure Operating System Command Injection Vulnerability

Cisco Prime Infrastructure is a software application from Cisco USA. It is used to simplify the management of wireless and wired networks. An operating system command injection vulnerability exists in Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager, which can be exploited ...

9CVSS8.1AI score0.02115EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/05/19 12:00 a.m.•18 views

Cisco 多款产品安全漏洞

Cisco Prime Infrastructure is a software application from Cisco USA. It is used to simplify the management of wireless and wired networks. A security vulnerability exists in several Cisco products, which can be exploited by an attacker to identify directories and write arbitrary files to the file...

4.4CVSS5.2AI score0.00212EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2021/05/19 12:00 a.m.•19 views

Cisco Prime Infrastructure 操作系统命令注入漏洞

Cisco Prime Infrastructure is a software application from Cisco USA. It is used to simplify the management of wireless and wired networks. An operating system command injection vulnerability exists in Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager, which can be exploited ...

9CVSS6.3AI score0.02115EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2019/12/09 12:00 a.m.•18 views

The vulnerability of the REST API interface of the Cisco Prime Infrastructure monitoring and network equipment management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the REST API interface of the Cisco Prime Infrastructure monitoring and network equipment management system, as well as the Cisco Evolved Programmable Network Manager EPNM software for managing network services, is related to insufficient validation of input data. Exploiting...

8.1CVSS7.8AI score0.03286EPSS
SaveExploits1References3Affected Software2
NVD
NVD
•added 2019/11/26 3:15 a.m.•36 views

CVE-2019-15958

A vulnerability in the REST API of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the underlying operating system. The vulnerability is due to insufficient input...

10CVSS8.9AI score0.03286EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2019/11/26 3:11 a.m.•21 views

CVE-2019-15958 Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability

A vulnerability in the REST API of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the underlying operating system. The vulnerability is due to insufficient input...

8.1CVSS8AI score0.03286EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/26 12:00 a.m.•4 views

CVE-2019-15958: Improper Input Validation

A vulnerability in the REST API of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the underlying operating system. The vulnerability is due to insufficient input...

10CVSS8.1AI score0.03286EPSS
SaveExploits1References3
Cisco
Cisco
•added 2019/11/06 4:00 p.m.•118 views

Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerability

A vulnerability in the REST API of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network Manager EPNM could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the underlying operating system. The vulnerability exists because affected devices...

9.8CVSS2.5AI score0.03286EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2019/06/21 12:00 a.m.•9 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network (EPN) Manager software, relates to errors in handling HTTP requests. This vulnerability allows an attacker to gain access to protected information.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network EPN Manager software relates to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to gain access to protected...

6.5CVSS5.5AI score0.13611EPSS
SaveExploits1References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2019/06/21 12:00 a.m.•12 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network (EPN) Manager software, relates to errors in handling HTTP requests. This vulnerability allows an attacker to gain access to protected information.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network EPN Manager software relates to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to gain access to protected...

6.5CVSS5.5AI score0.13611EPSS
SaveExploits1References4Affected Software2
Check Point Advisories
Check Point Advisories
•added 2019/06/20 12:00 a.m.•68 views

Cisco Multiple Products Remote Code Execution (CVE-2019-1821)

A remote code execution vulnerability exists in the web based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager. A remote unauthenticated attacker could exploit this vulnerability to execute code with root level privileges on the target system...

10CVSS3.7AI score0.98051EPSS
SaveExploits13
BDU FSTEC
BDU FSTEC
•added 2019/05/31 12:00 a.m.•17 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network Manager software, allows a malicious actor to execute arbitrary SQL queries.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager software relates to input validation errors. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries by sending specially...

8.5CVSS7.9AI score0.01866EPSS
SaveExploits1References3Affected Software2
OSV
OSV
•added 2019/05/16 1:29 a.m.•12 views

CVE-2019-1818

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to...

6.5CVSS5.8AI score0.13611EPSS
SaveExploits1References2
OSV
OSV
•added 2019/05/16 1:29 a.m.•20 views

CVE-2019-1823

A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because t...

7.2CVSS7.3AI score0.04418EPSS
SaveExploits1References2
Rows per page
Query Builder