Lucene search
+L

844 matches found

CNVD
CNVD
added 2023/03/07 12:0 a.m.38 views

Cisco Prime Infrastructure Cross-Site Scripting Vulnerability (CNVD-2023-93339)

Cisco Prime Infrastructure is a software application from Cisco USA. It is used to simplify the management of wireless and wired networks. A cross-site scripting vulnerability exists in Cisco Prime Infrastructure that stems from insufficient validation of user-supplied input and can be exploited ...

5.4CVSS5.6AI score0.0045EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/03 4:15 p.m.22 views

CVE-2023-20069

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This...

5.4CVSS5.2AI score0.0045EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/03 4:15 p.m.4 views

CVE-2023-20069

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This...

5.4CVSS6.3AI score0.0045EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/03 12:0 a.m.88 views

CVE-2023-20069

Cisco CVE-2023-20069 affects the web-based management interfaces of Cisco Prime Infrastructure and Cisco EPN Manager. The vulnerability is due to insufficient validation of user-supplied input, enabling authenticated users to lure others into a crafted link that could trigger stored XSS in the af...

5.4CVSS5.2AI score0.0045EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2023/03/03 12:0 a.m.31 views

CVE-2023-20069 Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This...

5.4CVSS5.4AI score0.0045EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/03/03 12:0 a.m.5 views

Cisco Prime Infrastructure 跨站脚本漏洞

Cisco Prime Infrastructure is a software application from Cisco USA. It is used to simplify the management of wireless and wired networks. A cross-site scripting vulnerability exists in Cisco Prime Infrastructure that stems from insufficient validation of user-supplied input and can be exploited ...

5.4CVSS5.8AI score0.0045EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2023/03/01 4:0 p.m.2 views

CVE-2023-20069

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This...

5.4CVSS6.3AI score0.0045EPSS
SaveExploits0References2
Cisco
Cisco
added 2023/03/01 4:0 p.m.35 views

Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface on an affected device. This...

5.4CVSS5.1AI score0.0045EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/03/01 12:0 a.m.6 views

PT-2023-2108 · Cisco · Cisco Evolved Programmable Network (Epn) Manager +1

Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network EPN Manager affected versions not specified Description: A vulnerability in the web-based management interface could allow an authenticated, remote...

5.4CVSS5.2AI score0.0045EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2023/02/08 12:0 a.m.9 views

The vulnerability in the web interface of the Cisco Prime Infrastructure network lifecycle management software allows a hacker to perform cross-site scripting attacks.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using a specially created malicious link...

6.4CVSS6AI score0.0047EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/02/03 12:0 a.m.31 views

Cisco Prime Infrastructure Reflected XSS (cisco-sa-cisco-pi-xss-PU6dnfD9)

A vulnerability in the web-based management interface of Cisco Prime Infrastructure Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface on an affected device. Note that Nessus has not tested for this issue...

6.1CVSS5.9AI score0.0047EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/02/02 12:0 a.m.6 views

Cisco Prime Infrastructure Software 跨站脚本漏洞

Cisco Prime Infrastructure Software is the United States Cisco Cisco company's set of basic network lifecycle management solutions. The product integrates the Cisco Prime LAN Management Solution LMS and the Cisco Prime Network Control System NCS. A security vulnerability exists in Cisco Prime...

6.1CVSS6.2AI score0.0047EPSS
SaveExploits0References4
NCSC
NCSC
added 2023/02/02 12:0 a.m.4 views

Vulnerability fixed in Cisco Prime Infrastructure

Cisco has fixed a vulnerability in the Web-based management interface of Prime Infrastructure. An unauthenticated malicious person with access to the management environment can exploit the exploit the vulnerability to perform a cross-site scripting XSS attack. Such an attack can lead to execution...

6.1CVSS6.7AI score0.0047EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2023/02/01 4:0 p.m.4 views

CVE-2023-20068

A vulnerability in the web-based management interface of Cisco Prime Infrastructure Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient...

6.1CVSS6.6AI score0.0047EPSS
SaveExploits0References2
Cisco
Cisco
added 2023/02/01 4:0 p.m.35 views

Cisco Prime Infrastructure Reflected Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the interface on an affected device. This vulnerability is due to insufficient...

6.1CVSS6AI score0.0047EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/02/01 12:0 a.m.5 views

PT-2023-1324 · Cisco · Cisco Prime Infrastructure

Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure Software affected versions not specified Description: The issue is related to insufficient protection of the web page structure in the Cisco Prime Infrastructure system, allowing an unauthenticated, remote attacker ...

6.4CVSS6.1AI score0.0047EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2022/02/22 12:0 a.m.8 views

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and network device management system, as well as the Cisco Evolved Programmable Network Manager software, allows a perpetrator to execute cross-site scripting (XSS) attacks.

The vulnerability of the web interface for managing Cisco Prime Infrastructure network equipment and the Cisco Evolved Programmable Network Manager software lies in the lack of measures to protect input data. Exploiting this vulnerability could allow a malicious actor to perform cross-site...

6.4CVSS6.3AI score0.01233EPSS
SaveExploits0References2Affected Software2
The Hacker News
The Hacker News
added 2022/02/18 5:19 a.m.88 views

Attackers Can Crash Cisco Email Security Appliances by Sending Malicious Emails

Cisco has released security updates to contain three vulnerabilities affecting its products, including one high-severity flaw in its Email Security Appliance ESA that could result in a denial-of-service DoS condition on an affected device. The weakness, assigned the identifier CVE-2022-20653 CVSS...

7.5CVSS1.4AI score0.01833EPSS
SaveExploits0
CNVD
CNVD
added 2022/02/18 12:0 a.m.64 views

Cisco Prime Infrastructure and Cisco EPN Manager跨站脚本漏洞

Cisco Prime Infrastructure is an application from Cisco, Inc. A cross-site scripting vulnerability exists in Cisco Prime Infrastructure and Cisco EPN Manager, which could be exploited by an attacker to execute arbitrary script code or access sensitive browser-based information in the context of t...

6.1CVSS2.6AI score0.01233EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/17 3:15 p.m.6 views

CVE-2022-20659

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. This...

6.1CVSS6AI score0.01233EPSS
SaveExploits0References1
Rows per page
Query Builder