CVE-2016-1388

CVE-2016-1388 affects Cisco Prime Network Analysis Module (NAM) and Prime Virtual Network Analysis Module (vNAM). Affected versions allow remote attackers to execute arbitrary OS commands via a crafted HTTP request due to improper input handling. Exploitation status is not detailed in the provide...

CVE-2016-1391

Cisco NAM and vNAM are affected by CVE-2016-1391: an authenticated attacker can trigger remote code execution by sending a crafted HTTP request due to insufficient input sanitization in the web interface. Affected versions include Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-...

CVE-2016-1390

Cisco Prime Network Analysis Module (NAM) and Cisco Prime Virtual Network Analysis Module (vNAM) are affected by CVE-2016-1390. The issue arises from insufficient sanitization of CLI input, allowing a local, authenticated attacker to obtain root privileges by crafting input that is processed by t...