Vulnerabilities > CVE-2023-20127 - Unspecified vulnerability in Cisco Prime Infrastructure

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

cisco

NVD

Published: 2023-04-05

Updated: 2023-11-07

Summary

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory.

Vulnerable Configurations

Part	Description	Count
Application	Cisco Cisco Prime Infrastructure 3.8 Cisco Prime Infrastructure 3.8.1 Cisco Prime Infrastructure 3.9 Cisco Prime Infrastructure 3.10 Cisco Prime Infrastructure - Cisco Prime Infrastructure 1.1 Cisco Prime Infrastructure 1.2 Cisco Prime Infrastructure 1.2.0 Cisco Prime Infrastructure 1.2.0.103 Cisco Prime Infrastructure 1.2.1 Cisco Prime Infrastructure 1.2.12 Cisco Prime Infrastructure 1.3 Cisco Prime Infrastructure 1.3.0 Cisco Prime Infrastructure 1.3.0.20 Cisco Prime Infrastructure 1.3.0.20-2 Cisco Prime Infrastructure 1.4 Cisco Prime Infrastructure 1.4.0 Cisco Prime Infrastructure 1.4.0.45 Cisco Prime Infrastructure 1.4.0.45-2 Cisco Prime Infrastructure 1.4.1 Cisco Prime Infrastructure 1.4.2 Cisco Prime Infrastructure 2.0 Cisco Prime Infrastructure 2.0\(4.0.45B\) Cisco Prime Infrastructure 2.0.0 Cisco Prime Infrastructure 2.0.0.0.294-2 Cisco Prime Infrastructure 2.0.0.30 Cisco Prime Infrastructure 2.1 Cisco Prime Infrastructure 2.1.0 Cisco Prime Infrastructure 2.1.1 Cisco Prime Infrastructure 2.1.2 Cisco Prime Infrastructure 2.2 Cisco Prime Infrastructure 2.2\(2\) Cisco Prime Infrastructure 2.2\(3\) Cisco Prime Infrastructure 2.2.0 Cisco Prime Infrastructure 2.2.1 Cisco Prime Infrastructure 2.2.2 Cisco Prime Infrastructure 2.2.3 Cisco Prime Infrastructure 3.0 Cisco Prime Infrastructure 3.0.0 Cisco Prime Infrastructure 3.0.1 Cisco Prime Infrastructure 3.0.2 Cisco Prime Infrastructure 3.0.3 Cisco Prime Infrastructure 3.0_Base Cisco Prime Infrastructure 3.1 Cisco Prime Infrastructure 3.1\(0.0\) Cisco Prime Infrastructure 3.1\(0.128\) Cisco Prime Infrastructure 3.1\(1\) Cisco Prime Infrastructure 3.1\(4.0\) Cisco Prime Infrastructure 3.1\(5.0\) Cisco Prime Infrastructure 3.1.0 Cisco Prime Infrastructure 3.1.1 Cisco Prime Infrastructure 3.1.3 Cisco Prime Infrastructure 3.1.4 Cisco Prime Infrastructure 3.1.5 Cisco Prime Infrastructure 3.1.6 Cisco Prime Infrastructure 3.1.7 Cisco Prime Infrastructure 3.1_Base Cisco Prime Infrastructure 3.2 Cisco Prime Infrastructure 3.2\(0.0\) Cisco Prime Infrastructure 3.2\(1.0\) Cisco Prime Infrastructure 3.2\(2.0\) Cisco Prime Infrastructure 3.2.0 Cisco Prime Infrastructure 3.2.1 Cisco Prime Infrastructure 3.2.2 Cisco Prime Infrastructure 3.2_Base Cisco Prime Infrastructure 3.3 Cisco Prime Infrastructure 3.3\(0.0\) Cisco Prime Infrastructure 3.3.1 Cisco Prime Infrastructure 3.4 Cisco Prime Infrastructure 3.4\(0.0\) Cisco Prime Infrastructure 3.4.1 Cisco Prime Infrastructure 3.4.2 Cisco Prime Infrastructure 3.5 Cisco Prime Infrastructure 3.5\(0.0\) Cisco Prime Infrastructure 3.5.1 Cisco Prime Infrastructure 3.6 Cisco Prime Infrastructure 3.7 Cisco Prime Infrastructure 3.9.1	79

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe