cisco evolved programmable network manager 3.1 vulnerabilities and exploits

(subscribe to this query)

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote malicious user to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based ...

Cisco Evolved Programmable Network Manager 2.0.0 Cisco Evolved Programmable Network Manager 2.0(4.0.45b)Cisco Evolved Programmable Network Manager 2.0(4.0.45d)Cisco Prime Infrastructure 3.1.1 Cisco Prime Infrastructure 3.1(0.128)Cisco Prime Infrastructure 3.1

Cisco Prime Infrastructure 1.2 up to and including 3.1 and Evolved Programmable Network Manager (EPNM) 1.2 and 2.0 allow remote authenticated users to execute arbitrary commands or upload files via a crafted HTTP request, aka Bug ID CSCuz01488.

The API web interface in Cisco Prime Infrastructure prior to 3.1 and Cisco Evolved Programmable Network Manager prior to 1.2.4 allows remote authenticated users to bypass intended RBAC restrictions and obtain sensitive information, and consequently gain privileges, via crafted JS...

Cisco Evolved Programmable Network Manager 1.2.1.3 Cisco Prime Infrastructure 1.4.2 Cisco Prime Infrastructure 2.2 Cisco Prime Infrastructure 1.2.1 Cisco Prime Infrastructure 2.1.0 Cisco Evolved Programmable Network Manager 1.2.0 Cisco Prime Infrastructure 1.3.0.20 Cisco Evolved Programmable Network Manager 1.2.300 Cisco Evolved Programmable Network Manager 1.2.200 Cisco Prime Infrastructure 1.2.0.103 Cisco Prime Infrastructure 2.2(2)Cisco Prime Infrastructure 1.4.0.45 Cisco Prime Infrastructure 1.4.1 Cisco Prime Infrastructure 1.2 Cisco Prime Infrastructure 1.3 Cisco Prime Infrastructure 1.4 Cisco Prime Infrastructure 3.0 Cisco Prime Infrastructure 2.0

A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote malicious user to access sensitive data. The attacker does not need administrator credentials and could use this informatio...

Cisco Prime Infrastructure 3.1(4.0)Cisco Prime Infrastructure 2.2 Cisco Evolved Programmable Network Manager 2.0(4.0.45d)Cisco Prime Infrastructure 3.2(0.0)Cisco Prime Infrastructure 2.2(3)Cisco Prime Infrastructure 3.1(5.0)Cisco Prime Infrastructure 3.1(0.128)Cisco Prime Infrastructure 3.0 Cisco Prime Infrastructure 3.1

A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote malicious user to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability...

Cisco Prime Infrastructure 1.4.2 Cisco Prime Infrastructure 2.2 Cisco Prime Infrastructure 1.2.1 Cisco Prime Infrastructure 3.1.1 Cisco Prime Infrastructure 2.1.0 Cisco Prime Infrastructure 1.3.0.20 Cisco Prime Infrastructure 1.2.0.103 Cisco Prime Infrastructure 2.2(2)Cisco Prime Infrastructure 1.4.0.45 Cisco Prime Infrastructure 1.4.1 Cisco Evolved Programmable Network Manager 1.2 Cisco Evolved Programmable Network Manager 2.0 Cisco Prime Infrastructure 1.2 Cisco Prime Infrastructure 1.3 Cisco Prime Infrastructure 1.4 Cisco Prime Infrastructure 3.0 Cisco Prime Infrastructure 3.1 Cisco Prime Infrastructure 2.0

A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, remote malicious user to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka...

Cisco Prime Infrastructure 3.1(1)Cisco Prime Infrastructure 2.0(4.0.45b)

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote malicious user to conduct a Document Object Model (DOM) based (environment or client-side) cross-site sc...

Cisco Prime Infrastructure 3.1(1)Cisco Prime Infrastructure 2.0(4.0.45b)

A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker read and write access to information stored in the affected system as well as perform remote code execu...

Cisco Evolved Programmable Network Manager 1.2.1.3 Cisco Evolved Programmable Network Manager 1.2.500 Cisco Evolved Programmable Network Manager 2.0.0 Cisco Prime Infrastructure 1.4.2 Cisco Prime Infrastructure 3.1(4.0)Cisco Prime Infrastructure 2.2 Cisco Prime Infrastructure 3.2 Base Cisco Evolved Programmable Network Manager 2.0(4.0.45d)Cisco Prime Infrastructure 1.2.1 Cisco Prime Infrastructure 3.2(0.0)Cisco Prime Infrastructure 3.1.1 Cisco Prime Infrastructure 2.2(3)Cisco Prime Infrastructure 2.1.0 Cisco Evolved Programmable Network Manager 1.2.0 Cisco Prime Infrastructure 1.3.0.20 Cisco Evolved Programmable Network Manager 1.2.300 Cisco Evolved Programmable Network Manager 1.2.200 Cisco Prime Infrastructure 3.1(5.0)Cisco Evolved Programmable Network Manager 1.2.400 Cisco Prime Infrastructure 1.2.0.103 Cisco Prime Infrastructure 2.2(2)Cisco Prime Infrastructure 3.1(0.128)

A vulnerability in the restricted shell of Cisco Evolved Programmable Network (EPN) Manager, Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local malicious user to identify directories and write arbitrary files to the file syste...

Cisco Identity Services Engine 2.7.0 Cisco Identity Services Engine 3.0.0 Cisco Identity Services Engine Cisco Evolved Programmable Network Manager Cisco Prime Infrastructure 3.8.1 Cisco Prime Infrastructure

Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...

2 Metasploit modules1217 Github repositories29 Articles

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook