Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Evolved Programmable Network Manager und Cisco Prime Infrastructure ausnutzen, um Informationen offenzulegen und Cross-Site-Scripting-Angriffe durchzuführen.
Product
Der Cisco Evolved Programmable Network (EPN) Manager ist eine All-in-One-Managementlösung für die Konvergenz von paketorientierten und optischen Netzwerken.
Cisco Prime Infrastructure kombiniert die Wireless-Fähigkeiten von Cisco Prime Network Control System (NCS) und die drahtgebundenen Fähigkeiten von Cisco Prime LAN Management Solution (LMS) mit den Applikations- Performance-Monitoring- und Troubleshooting-Fähigkeiten von Cisco Prime Assurance Manager.
Vulnerabilities 2
-
Medium 4.8
Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the …
-
Medium 4.3
Cisco Evolved Programmable Network Manager Information Disclosure Vulnerability
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to obtain sensitive information from an affected system. This vulnerability…
Revision history
-
#1
Initiale Fassung
References
-
Cisco Security Advisory cisco-sa-epnm-info-dis-zhPPMfgz vom 2025-09-03
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-info-dis-zhPPMfgz
-
Cisco Security Advisory cisco-sa-epnm-pi-stored-xss-XjQZsyCP vom 2025-09-03
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-pi-stored-xss-XjQZsyCP