Lucene search

K
CiscoEvolved Programmable Network Manager*

29 matches found

CVE
CVE
added 2021/12/10 10:15 a.m.5637 views

CVE-2021-44228

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message ...

10CVSS10AI score0.94358EPSS
CVE
CVE
added 2019/05/16 1:29 a.m.201 views

CVE-2019-1821

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because...

10CVSS8.2AI score0.93259EPSS
CVE
CVE
added 2021/05/22 7:15 a.m.79 views

CVE-2021-1306

A vulnerability in the restricted shell of Cisco Evolved Programmable Network (EPN) Manager, Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to identify directories and write arbitrary files to the file system. This vulnerability is ...

4.4CVSS4.4AI score0.00039EPSS
CVE
CVE
added 2021/05/22 7:15 a.m.76 views

CVE-2021-1487

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied ...

9CVSS9.1AI score0.00684EPSS
CVE
CVE
added 2019/11/26 3:15 a.m.70 views

CVE-2019-15958

A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the underlying operating system. The vulnerability is due to insufficient input v...

10CVSS8.9AI score0.02481EPSS
CVE
CVE
added 2023/04/05 7:15 p.m.70 views

CVE-2023-20121

Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to escape the restricted shell and gain root privileges on the underlying operatin...

6.7CVSS6.5AI score0.00071EPSS
CVE
CVE
added 2022/02/17 3:15 p.m.68 views

CVE-2022-20659

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnera...

6.1CVSS6.1AI score0.00307EPSS
CVE
CVE
added 2023/03/03 4:15 p.m.67 views

CVE-2023-20069

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vu...

5.4CVSS5.2AI score0.00096EPSS
CVE
CVE
added 2019/05/16 1:29 a.m.66 views

CVE-2019-1819

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to i...

6.5CVSS6.3AI score0.14498EPSS
CVE
CVE
added 2019/05/16 1:29 a.m.61 views

CVE-2019-1818

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to i...

6.5CVSS6.3AI score0.14498EPSS
CVE
CVE
added 2019/05/16 1:29 a.m.61 views

CVE-2019-1820

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to i...

6.5CVSS6.3AI score0.14498EPSS
CVE
CVE
added 2021/08/04 6:15 p.m.59 views

CVE-2021-34707

A vulnerability in the REST API of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to access sensitive data on an affected system. This vulnerability exists because the application does not sufficiently protect sensitive data when responding to an API...

6.5CVSS6.2AI score0.00237EPSS
CVE
CVE
added 2023/08/16 10:15 p.m.55 views

CVE-2023-20203

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected devic...

5.4CVSS5.1AI score0.00088EPSS
CVE
CVE
added 2023/08/16 10:15 p.m.55 views

CVE-2023-20222

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface on an affected device. The vulnera...

6.1CVSS5.9AI score0.00072EPSS
CVE
CVE
added 2019/05/16 1:29 a.m.53 views

CVE-2019-1822

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because...

9CVSS7.2AI score0.03105EPSS
CVE
CVE
added 2019/05/16 1:29 a.m.52 views

CVE-2019-1824

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-suppl...

8.1CVSS8.3AI score0.00334EPSS
CVE
CVE
added 2024/01/17 5:15 p.m.51 views

CVE-2023-20257

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct cross-site scripting attacks. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could...

4.8CVSS5.4AI score0.0006EPSS
CVE
CVE
added 2023/08/16 10:15 p.m.49 views

CVE-2023-20205

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected devic...

5.4CVSS5.1AI score0.00088EPSS
CVE
CVE
added 2024/01/17 5:15 p.m.49 views

CVE-2023-20260

A vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper processing of command line arguments to application scripts. An attack...

6.7CVSS6.7AI score0.00021EPSS
CVE
CVE
added 2021/11/04 4:15 p.m.48 views

CVE-2021-34784

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of ...

5.4CVSS5.2AI score0.0026EPSS
CVE
CVE
added 2019/05/16 1:29 a.m.45 views

CVE-2019-1823

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because...

9CVSS7.2AI score0.02149EPSS
CVE
CVE
added 2021/09/02 3:15 a.m.45 views

CVE-2021-34733

A vulnerability in the CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, local attacker to access sensitive information stored on the underlying file system of an affected system. This vulnerability exists because sensitive informat...

5.5CVSS5.4AI score0.00047EPSS
CVE
CVE
added 2019/05/16 1:29 a.m.43 views

CVE-2019-1825

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-suppl...

8.1CVSS8.3AI score0.00334EPSS
CVE
CVE
added 2023/08/16 10:15 p.m.43 views

CVE-2023-20201

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected devic...

5.4CVSS5.1AI score0.0005EPSS
CVE
CVE
added 2024/01/17 5:15 p.m.43 views

CVE-2023-20271

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of user-su...

6.5CVSS6.6AI score0.00087EPSS
CVE
CVE
added 2023/04/05 6:15 p.m.41 views

CVE-2023-20129

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For...

6.5CVSS6.5AI score0.00133EPSS
CVE
CVE
added 2023/04/05 6:15 p.m.41 views

CVE-2023-20130

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For...

6.5CVSS6.5AI score0.00075EPSS
CVE
CVE
added 2023/04/05 6:15 p.m.40 views

CVE-2023-20131

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For...

6.5CVSS5.8AI score0.00113EPSS
CVE
CVE
added 2024/01/17 5:15 p.m.40 views

CVE-2023-20258

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper processing of serialized Java objects by the affected application...

7.2CVSS7.3AI score0.00048EPSS