CVE-2021-1487

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied...

CVE-2021-1306

A vulnerability in the restricted shell of Cisco Evolved Programmable Network EPN Manager, Cisco Identity Services Engine ISE, and Cisco Prime Infrastructure could allow an authenticated, local attacker to identify directories and write arbitrary files to the file system. This vulnerability is du...

Input validation

A vulnerability in the restricted shell of Cisco Evolved Programmable Network EPN Manager, Cisco Identity Services Engine ISE, and Cisco Prime Infrastructure could allow an authenticated, local attacker to identify directories and write arbitrary files to the file system. This vulnerability is du...

Input validation

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied...

CVE-2021-1487

Cisco CVE-2021-1487 affects Cisco Prime Infrastructure and Cisco EPN Manager. The web-based management interface fails to sufficiently validate user input, enabling an authenticated remote attacker to inject commands and execute them on the underlying OS with the permissions of a non-root user. I...

CVE-2021-1306

CVE-2021-1306 is a local file inclusion vulnerability in the restricted shell of Cisco EPN Manager, Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure. An authenticated shell user can exploit improper validation of CLI parameters to identify directories and write arbitrary files...

CVE-2021-1306 Cisco ADE-OS Local File Inclusion Vulnerability

A vulnerability in the restricted shell of Cisco Evolved Programmable Network EPN Manager, Cisco Identity Services Engine ISE, and Cisco Prime Infrastructure could allow an authenticated, local attacker to identify directories and write arbitrary files to the file system. This vulnerability is du...

Cisco Prime Infrastructure Operating System Command Injection Vulnerability

Cisco Prime Infrastructure is a software application from Cisco USA. It is used to simplify the management of wireless and wired networks. An operating system command injection vulnerability exists in Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager, which can be exploited ...

Vulnerabilities fixed in Cisco products

Cisco has fixed a local file inclusion vulnerability in ADE-OS as used to deploy Cisco Evolved Programmable Network EPN Manager, Cisco Identity Services Engine ISE and Cisco Prime Infrastructure. The vulnerability with attribute CVE-2021-1306 enables a local, authenticated malicious party to able...

Cisco ADE-OS Local File Inclusion Vulnerability

A vulnerability in the restricted shell of Cisco Evolved Programmable Network EPN Manager, Cisco Identity Services Engine ISE, and Cisco Prime Infrastructure could allow an authenticated, local attacker to identify directories and write arbitrary files to the file system. This vulnerability is du...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied...

Cisco 多款产品安全漏洞

Cisco Prime Infrastructure is a software application from Cisco USA. It is used to simplify the management of wireless and wired networks. A security vulnerability exists in several Cisco products, which can be exploited by an attacker to identify directories and write arbitrary files to the file...

Cisco Prime Infrastructure 操作系统命令注入漏洞

Cisco Prime Infrastructure is a software application from Cisco USA. It is used to simplify the management of wireless and wired networks. An operating system command injection vulnerability exists in Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager, which can be exploited ...

Cisco Prime Infrastructure Virtual Domain Privilege Escalation (cisco-sa-20190619-prime-privescal)

According to its self-reported version, the Cisco Prime Infrastructure application running on the remote host is 2.22.0.78 prior to 3.12.0.0 or 3.50.0 prior to 3.51. It is, therefore, affected by a privilege escalation vulnerability in the Virtual Domain system due to improper validation of API...

Cisco Prime Infrastructure Cross-Site Scripting (cisco-sa-20191002-pi-xss-12713)

According to its self-reported version, Cisco Prime Infrastructure is affected by a cross site scripting vulnerability. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit this...

Cisco Prime Infrastructure Cross-Site Scripting (cisco-sa-20191002-pi-xss-12712)

According to its self-reported version, Cisco Prime Infrastructure is affected by a cross-site scripting vulnerability. The vulnerability is due to insufficient validation of user-supplied input in multiple sections of the web-based management interface of the affected software. An attacker could...

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system allows a malicious actor to execute arbitrary SQL queries.

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Cisco Prime Infrastructure Software SQL Injection Vulnerability

Cisco Prime Infrastructure Software is the United States Cisco Cisco company's set of basic network lifecycle management solutions. The product integrates Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS. An SQL injection vulnerability exists in the web-based...

CVE-2020-3339

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this...

CVE-2020-3339

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this...