Lucene search

K
CiscoPrime Infrastructure

8 matches found

CVE
CVE
added 2019/05/16 1:29 a.m.52 views

CVE-2019-1824

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-suppl...

8.1CVSS8.3AI score0.00334EPSS
CVE
CVE
added 2016/05/25 1:59 a.m.51 views

CVE-2016-1406

The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticated users to bypass intended RBAC restrictions and obtain sensitive information, and consequently gain privileges, via crafted JSON data, aka Bug ID CSC...

8.8CVSS8.3AI score0.00268EPSS
CVE
CVE
added 2017/06/26 7:29 a.m.47 views

CVE-2017-6662

A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker read and write access to information stored in the affected system as well as perform remote code execution. The attacker ...

8CVSS7.9AI score0.00946EPSS
CVE
CVE
added 2019/05/16 1:29 a.m.43 views

CVE-2019-1825

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-suppl...

8.1CVSS8.3AI score0.00334EPSS
CVE
CVE
added 2016/03/03 10:59 p.m.40 views

CVE-2016-1359

Cisco Prime Infrastructure 3.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP request that is mishandled during viewing of a log file, aka Bug ID CSCuw81494.

8.8CVSS8.6AI score0.00508EPSS
CVE
CVE
added 2016/07/02 2:59 p.m.37 views

CVE-2016-1408

Cisco Prime Infrastructure 1.2 through 3.1 and Evolved Programmable Network Manager (EPNM) 1.2 and 2.0 allow remote authenticated users to execute arbitrary commands or upload files via a crafted HTTP request, aka Bug ID CSCuz01488.

8.8CVSS8.7AI score0.00267EPSS
CVE
CVE
added 2016/10/27 9:59 p.m.37 views

CVE-2016-6443

A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability. More Information: CSCva...

8.8CVSS8.6AI score0.0187EPSS
CVE
CVE
added 2016/04/06 11:59 p.m.35 views

CVE-2016-1290

The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an HTTP request that is inconsistent with a pattern filter, aka Bug ID CSCuy10227.

8.1CVSS7.8AI score0.00165EPSS