Skip to content
OpenAdvisories
Medium WID-SEC-2023-0533 1 CVE

Cisco Prime Infrastructure: Schwachstelle ermöglicht Cross-Site Scripting

Published Mar 1, 2023 · Updated Mar 1, 2023 · de-DE

Vendor: Cisco Product: Prime Infrastructure < 3.10.3

Summary

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Cisco Prime Infrastructure ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.

Product

Cisco Prime Infrastructure kombiniert die Wireless-Fähigkeiten von Cisco Prime Network Control System (NCS) und die drahtgebundenen Fähigkeiten von Cisco Prime LAN Management Solution (LMS) mit den Applikations- Performance-Monitoring- und Troubleshooting-Fähigkeiten von Cisco Prime Assurance Manager.

Vulnerabilities 1

  • Medium 5.4
    CVE-2023-20069

    Cisco Prime Infrastructure and Evolved Programmable Network Manager Stored Cross-Site Scripting Vulnerability

    A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the …

    Cisco Cisco Prime Infrastructure Network devices

Revision history

  1. #1

    Initiale Fassung

References