Vulnerabilities > Cisco > Prime Infrastructure > 3.2

DATE CVE VULNERABILITY TITLE RISK
2019-02-21 CVE-2019-1659 Improper Certificate Validation vulnerability in Cisco Prime Infrastructure
A vulnerability in the Identity Services Engine (ISE) integration feature of Cisco Prime Infrastructure (PI) could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer (SSL) tunnel established between ISE and PI.
network
cisco CWE-295
5.8
2018-10-05 CVE-2018-15433 Information Exposure vulnerability in Cisco Prime Infrastructure 3.2
A vulnerability in the server backup function of Cisco Prime Infrastructure could allow an authenticated, remote attacker to view sensitive information.
network
low complexity
cisco CWE-200
4.0
2018-10-05 CVE-2018-15432 Information Exposure vulnerability in Cisco Prime Infrastructure 3.2
A vulnerability in the server backup function of Cisco Prime Infrastructure could allow an authenticated, remote attacker to view sensitive information.
network
low complexity
cisco CWE-200
4.0
2018-10-05 CVE-2018-15379 Incorrect Permission Assignment for Critical Resource vulnerability in Cisco Prime Infrastructure
A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory permissions could allow an unauthenticated, remote attacker to upload an arbitrary file.
network
low complexity
cisco CWE-732
7.5