Lucene search

K
CiscoPrime Infrastructure

7 matches found

CVE
CVE
added 2024/11/15 4:15 p.m.78 views

CVE-2022-20656

A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the system. This vulnerability is due t...

6.5CVSS6.6AI score0.00125EPSS
CVE
CVE
added 2024/11/15 4:15 p.m.71 views

CVE-2022-20657

A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an unauthenticated, remote attacker to conduct an XSS attack against a user of the interface of an affected device.This vulnerability exists because the web-based management interface does not properly vali...

6.1CVSS6.4AI score0.00088EPSS
CVE
CVE
added 2024/01/17 5:15 p.m.51 views

CVE-2023-20257

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct cross-site scripting attacks. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could...

4.8CVSS5.4AI score0.0006EPSS
CVE
CVE
added 2024/01/17 5:15 p.m.49 views

CVE-2023-20260

A vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager could allow an authenticated, local attacker to gain escalated privileges. This vulnerability is due to improper processing of command line arguments to application scripts. An attack...

6.7CVSS6.7AI score0.00021EPSS
CVE
CVE
added 2024/01/17 5:15 p.m.43 views

CVE-2023-20271

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of user-su...

6.5CVSS6.6AI score0.00087EPSS
CVE
CVE
added 2024/01/17 5:15 p.m.40 views

CVE-2023-20258

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper processing of serialized Java objects by the affected application...

7.2CVSS7.3AI score0.00048EPSS
CVE
CVE
added 2024/11/06 5:15 p.m.35 views

CVE-2024-20514

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, low-privileged, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnera...

5.4CVSS5.3AI score0.00074EPSS