Vulnerabilities > Cisco > Evolved Programmable Network Manager > 2.0.0

DATE CVE VULNERABILITY TITLE RISK
2017-07-04 CVE-2017-6699 Cross-site Scripting vulnerability in Cisco products
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.
network
low complexity
cisco CWE-79
6.1
2017-06-26 CVE-2017-6662 XXE vulnerability in Cisco products
A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker read and write access to information stored in the affected system as well as perform remote code execution.
network
low complexity
cisco CWE-611
8.0