Skip to content
OpenAdvisories
Medium WID-SEC-2023-0865 4 CVEs

Cisco Prime Infrastructure: Mehrere Schwachstellen

Published Apr 5, 2023 · Updated Apr 5, 2023 · de-DE

Vendor: Cisco Product: Prime Infrastructure Product: Prime Infrastructure < 3.10.2 Product: Prime Infrastructure < 3.7.1 update 07 Product: Prime Infrastructure < 3.8.1 update 04 Product: Prime Infrastructure < 3.9.1 update 03

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Prime Infrastructure ausnutzen, um Informationen offenzulegen und um Cross-Site Scripting, sowie Cross-Site Request Forgery Angriffe durchzuführen.

Product

Cisco Prime Infrastructure kombiniert die Wireless-Fähigkeiten von Cisco Prime Network Control System (NCS) und die drahtgebundenen Fähigkeiten von Cisco Prime LAN Management Solution (LMS) mit den Applikations- Performance-Monitoring- und Troubleshooting-Fähigkeiten von Cisco Prime Assurance Manager.

Vulnerabilities 4

  • Medium 6.5
    CVE-2023-20127

    Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-…

    Cisco Cisco Prime Infrastructure Network devices
  • Medium 6.5
    CVE-2023-20129

    Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-…

    Cisco Cisco Prime Infrastructure Network devices
  • Medium 6.5
    CVE-2023-20130

    Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-…

    Cisco Cisco Prime Infrastructure Network devices
  • Medium 6.5
    CVE-2023-20131

    Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities

    Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-…

    Cisco Cisco Prime Infrastructure Network devices

Revision history

  1. #1

    Initiale Fassung

References