Lucene search

K
CiscoPrime Infrastructure2.2(2)

10 matches found

CVE
CVE
added 2017/07/04 12:29 a.m.71 views

CVE-2017-6725

A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65833 CSCuw65837. Known Affected Releases: 2.2(2).

6.1CVSS5.9AI score0.00349EPSS
CVE
CVE
added 2016/05/25 1:59 a.m.51 views

CVE-2016-1406

The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticated users to bypass intended RBAC restrictions and obtain sensitive information, and consequently gain privileges, via crafted JSON data, aka Bug ID CSC...

8.8CVSS8.3AI score0.00268EPSS
CVE
CVE
added 2016/08/08 12:59 a.m.51 views

CVE-2016-1474

Cisco Prime Infrastructure 2.2(2) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCuw65846, a different ...

4.3CVSS4.7AI score0.00427EPSS
CVE
CVE
added 2017/04/20 10:59 p.m.50 views

CVE-2017-6611

A vulnerability in the web framework code of Cisco Prime Infrastructure 2.2(2) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against the user of the web interface of the affected system. The vulnerability is due to insufficient input validation of so...

6.1CVSS6AI score0.00194EPSS
CVE
CVE
added 2017/06/26 7:29 a.m.47 views

CVE-2017-6662

A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker read and write access to information stored in the affected system as well as perform remote code execution. The attacker ...

8CVSS7.9AI score0.00946EPSS
CVE
CVE
added 2017/04/07 5:59 p.m.46 views

CVE-2017-3848

A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Information: CSCuw63001 CSCuw63003. Known Affected...

6.1CVSS5.9AI score0.00293EPSS
CVE
CVE
added 2016/01/08 2:59 a.m.44 views

CVE-2015-6434

Cisco Prime Infrastructure does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a "cross-frame scripting (XFS)" issue, aka Bug ID CSCux64856.

6.1CVSS4.9AI score0.00243EPSS
CVE
CVE
added 2016/07/02 2:59 p.m.39 views

CVE-2016-1289

The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain sensitive management information via a crafted HTTP request, as demonstrated by discovering managed-device credentials, aka Bug ID CS...

10CVSS9.5AI score0.06314EPSS
CVE
CVE
added 2016/07/02 2:59 p.m.37 views

CVE-2016-1408

Cisco Prime Infrastructure 1.2 through 3.1 and Evolved Programmable Network Manager (EPNM) 1.2 and 2.0 allow remote authenticated users to execute arbitrary commands or upload files via a crafted HTTP request, aka Bug ID CSCuz01488.

8.8CVSS8.7AI score0.00267EPSS
CVE
CVE
added 2016/10/27 9:59 p.m.37 views

CVE-2016-6443

A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability. More Information: CSCva...

8.8CVSS8.6AI score0.0187EPSS