Cisco Prime Infrastructure Multiple Vulnerabilities (cisco-sa-pi-epnm-eRPWAXLe)

The version of Cisco Prime Infrastructure installed on the remote host is prior to 3.7.1, 3.8.1, 3.9.1 or 3.10.2. It is, therefore, affected by multiple vulnerabilities as referenced in the cisco-sa-pi-epnm-eRPWAXLe advisory: - An information disclosure vulnerability in the web-based management...

CVE-2023-20131

CVE-2023-20131 affects Cisco Prime Infrastructure and Cisco EPNM via the web-based management interface, enabling XSS and CSRF due to insufficient input validation and CSRF protections. The issue is part of multiple vulnerabilities described in Cisco advisory cisco-sa-pi-epnm-eRPWAXLe, with relat...