Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory.
References
Link | Resource |
---|---|
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
11 Apr 2023, 19:42
Type | Values Removed | Values Added |
---|---|---|
First Time |
Cisco prime Infrastructure
Cisco |
|
References | (CISCO) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe - Vendor Advisory | |
CWE | NVD-CWE-noinfo | |
CPE | cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:prime_infrastructure:3.8.1:-:*:*:*:*:*:* cpe:2.3:a:cisco:prime_infrastructure:3.8:*:*:*:*:*:*:* cpe:2.3:a:cisco:prime_infrastructure:3.9:*:*:*:*:*:*:* cpe:2.3:a:cisco:prime_infrastructure:3.9.1:-:*:*:*:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
05 Apr 2023, 19:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-04-05 18:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-20127
Mitre link : CVE-2023-20127
CVE.ORG link : CVE-2023-20127
JSON object : View
Products Affected
cisco
- prime_infrastructure
CWE