CVE-2019-1824 Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerabilities

A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-supplie...

CVE-2019-1825 Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerabilities

A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-supplie...

CVE-2019-1825

Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager web-based management interfaces are affected by CVE-2019-1825 due to improper validation of user-supplied input in SQL queries. The vulnerability could allow an authenticated, remote attacker to execute arbitrary...

CVE-2019-1825 Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerabilities

A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-supplie...

The vulnerability of the Web interface of the Cisco Application Policy Infrastructure Controller allows a perpetrator to execute arbitrary code within the context of the vulnerable interface or gain access to confidential information.

The vulnerability of the Cisco Application Policy Infrastructure Controller web interface exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the vulnerable interface or gain...

The vulnerability of the FUSE file system implementation in the Cisco Application Policy Infrastructure Controller, which allows a hacker to elevate their privileges to root level.

The vulnerability of the FUSE file system implementation in the Cisco Application Policy Infrastructure Controller information infrastructure is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

Cisco Prime Infrastructure HA HealthMonitor TarArchive Directory Traversal Remote Code Execution

A vulnerability in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because t...

Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to...

Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow a remote attacker to gain the ability to execute arbitrary code with elevated privileges on the underlying operating system. One of these...

Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to...

Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to...

Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure PI and Cisco Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. These vulnerabilities exist because the software improperly validates...

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager software path traversal vulnerability

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager software are both products of Cisco, Inc.Cisco Prime Infrastructure is a network management tool that supports full lifecycle management of the entire network infrastructure from a single Cisco Prime Infrastructure is a...

Cisco Prime Infrastructure Software and Cisco Evolved Programmable Network Manager Path Traversal Vulnerabilities

Cisco Prime Infrastructure Software and Cisco Evolved Programmable Network Manager are both products of the U.S. company Cisco Cisco.Cisco Prime Infrastructure Software is a set of software for wireless management through the Cisco Prime LAN Management Solution LMS and Cisco Prime Network Control...

PT-2019-2411 · Cisco · Cisco Evolved Programmable Network (Epn) Manager +1

Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure and Cisco Evolved Programmable Network EPN Manager affected versions not specified Description: The issue is related to errors in processing HTTP requests in the web-based management interface of the affected...

PT-2019-2413 · Cisco · Cisco Prime Infrastructure +1

Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure versions affected versions not specified Cisco Evolved Programmable Network EPN Manager versions affected versions not specified Description: The issue is related to errors in processing HTTP requests in the web-bas...

PT-2019-2412 · Cisco · Cisco Prime Infrastructure +1

Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure versions affected versions not specified Cisco Evolved Programmable Network EPN Manager versions affected versions not specified Description: The issue is related to errors in processing HTTP requests in the web-bas...

PT-2019-2150 · Cisco · Cisco Evolved Programmable Network Manager +1

Name of the Vulnerable Software and Affected Versions: Cisco Prime Infrastructure affected versions not specified Cisco Evolved Programmable Network Manager affected versions not specified Description: The issue is related to improper validation of user-supplied input in the web-based management...

Cisco Prime Infrastructure Health Monitor TarArchive Directory Traversal Vulnerability

This module exploits a vulnerability found in Cisco Prime Infrastructure. The issue is that the TarArchive Java class the HA Health Monitor component uses does not check for any directory traversals while unpacking a Tar file, which can be abused by a remote user to leverage the UploadServlet cla...

Moderate: Red Hat Security Advisory: Satellite 6.5 Release

Red Hat Satellite 6.5 for RHEL 7 is now available containing security fixes, bug fixes, and enhancements. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...