Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory.
References
| Link | Resource |
|---|---|
| https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
11 Apr 2023, 19:48
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 | |
| References | (CISCO) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe - Vendor Advisory | |
| First Time |
Cisco prime Infrastructure
Cisco Cisco evolved Programmable Network Manager |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| CPE | cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:prime_infrastructure:3.8.1:-:*:*:*:*:*:* cpe:2.3:a:cisco:prime_infrastructure:3.8:*:*:*:*:*:*:* cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:prime_infrastructure:3.9:*:*:*:*:*:*:* cpe:2.3:a:cisco:prime_infrastructure:3.9.1:-:*:*:*:*:*:* |
05 Apr 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-05 18:15
Updated : 2023-12-10 15:01
NVD link : CVE-2023-20131
Mitre link : CVE-2023-20131
CVE.ORG link : CVE-2023-20131
JSON object : View
Products Affected
cisco
- prime_infrastructure
- evolved_programmable_network_manager