CVE-2019-1825: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-supplie...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager software path traversal vulnerability

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager software are both products of Cisco, Inc.Cisco Prime Infrastructure is a network management tool that supports full lifecycle management of the entire network infrastructure from a single Cisco Prime Infrastructure is a...

PT-2019-2151

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions affected versions not specified Cisco Evolved Programmable Network Manager versions affected versions not specified Description The issue is related to improper validation of user-supplied input in the...

PT-2019-2149

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network Manager affected versions not specified Description A vulnerability in the web-based management interface of the affected software could allow an...

PT-2019-2153

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitra...

PT-2019-2154

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitra...

PT-2017-17226

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions 1.1 through 3.1.6 Cisco Evolved Programmable Network Manager versions 1.2, 2.0, 2.1 Description A vulnerability in the web-based user interface of Cisco Prime Infrastructure and Evolved Programmable Network...

CVE-2017-6662: Improper Input Validation

A vulnerability in the web-based user interface of Cisco Prime Infrastructure PI and Evolved Programmable Network Manager EPNM could allow an authenticated, remote attacker read and write access to information stored in the affected system as well as perform remote code execution. The attacker mu...

CVE-2017-3884: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to access sensitive data. The attacker does not need administrator credentials and could use this information to conduct additional...

PT-2017-1797

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions 2.04.0.45D through 3.20.0 Cisco Evolved Programmable Network EPN Manager versions 2.04.0.45D through 3.20.0 Description A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved...

Design/Logic Flaw

The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticated users to bypass intended RBAC restrictions and obtain sensitive information, and consequently gain privileges, via crafted JSON data, aka Bug ID...

CVE-2016-1406: Improper Access Control

The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticated users to bypass intended RBAC restrictions and obtain sensitive information, and consequently gain privileges, via crafted JSON data, aka Bug ID...

PT-2016-2114

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions prior to 3.1 Cisco Evolved Programmable Network Manager versions prior to 1.2.4 Description The issue is related to a lack of proper access control in the API web interface, allowing remote authenticated use...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager JSON Privilege Escalation Vulnerability

A vulnerability in the application programming interface API web interface of the Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager could allow an authenticated, remote attacker to perform privilege escalation on the affected device. The attacker can escalate privileges to...

The vulnerability of the Cisco Evolved Programmable Network Manager and the Cisco Prime Infrastructure network lifecycle management software allows attackers to circumvent existing RBAC restrictions and increase their privileges.

The vulnerability of the Cisco Evolved Programmable Network Manager and the Cisco Prime Infrastructure network lifecycle management software is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing RBAC restrictions and increase their...

Cisco Prime Infrastructure elevation of privilege vulnerability (CNVD-2016-02072)

Cisco Prime Infrastructure is the United States Cisco Cisco company's set of wireless management through the Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control System NCS technology solutions. An elevation of privilege vulnerability exists in Cisco Prime Infrastructure 1.2.0...

PT-2016-1646

Name of the Vulnerable Software and Affected Versions Cisco Evolved Programmable Network Manager versions 1.2 Cisco Prime Infrastructure versions 1.2.0 through 2.22 Description The issue exists due to insufficient input validation, allowing a remote attacker to execute arbitrary code by sending a...

CVE-2016-1290: Undefined Security Weakness

The web API in Cisco Prime Infrastructure 1.2.0 through 2.22 and Cisco Evolved Programmable Network Manager EPNM 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent with a pattern filter, aka Bug ID CSCuy10227...

CVE-2016-1291: Improper Input Validation

Cisco Prime Infrastructure 1.2.0 through 2.22 and Cisco Evolved Programmable Network Manager EPNM 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192...

PT-2016-1647

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure versions 1.2.0 through 2.22 Cisco Evolved Programmable Network Manager EPNM version 1.2 Description The issue is related to insufficient access control in the web API, allowing remote authenticated users to bypass...