CVE Vulnerabilities

CVE-2023-20127

Published: Apr 05, 2023 | Modified: Nov 07, 2023
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory.

Affected Software

Name Vendor Start Version End Version
Prime_infrastructure Cisco * 3.7
Prime_infrastructure Cisco 3.10 *
Prime_infrastructure Cisco 3.8 3.8
Prime_infrastructure Cisco 3.8.1 3.8.1
Prime_infrastructure Cisco 3.9 3.9
Prime_infrastructure Cisco 3.9.1 3.9.1

References