Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory.
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
History
21 Nov 2024, 07:40
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe - Vendor Advisory |
11 Apr 2023, 19:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | (CISCO) https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe - Vendor Advisory | |
| CPE | cpe:2.3:a:cisco:prime_infrastructure:3.8:*:*:*:*:*:*:* cpe:2.3:a:cisco:prime_infrastructure:3.8.1:-:*:*:*:*:*:* cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:* cpe:2.3:a:cisco:prime_infrastructure:3.9:*:*:*:*:*:*:* cpe:2.3:a:cisco:prime_infrastructure:3.9.1:-:*:*:*:*:*:* cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:* |
|
| First Time |
Cisco evolved Programmable Network Manager
Cisco Cisco prime Infrastructure |
|
| CWE | CWE-22 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
05 Apr 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-05 18:15
Updated : 2024-11-21 07:40
NVD link : CVE-2023-20129
Mitre link : CVE-2023-20129
CVE.ORG link : CVE-2023-20129
JSON object : View
Products Affected
cisco
- prime_infrastructure
- evolved_programmable_network_manager