Vulnerabilities > Cisco > Prime Infrastructure > 3.3.1

DATE CVE VULNERABILITY TITLE RISK
2019-05-16 CVE-2019-1818 Path Traversal vulnerability in Cisco Prime Infrastructure
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted.
network
low complexity
cisco CWE-22
6.5
6.5
2019-02-21 CVE-2019-1659 Improper Certificate Validation vulnerability in Cisco Prime Infrastructure
A vulnerability in the Identity Services Engine (ISE) integration feature of Cisco Prime Infrastructure (PI) could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer (SSL) tunnel established between ISE and PI.
network
high complexity
cisco CWE-295
7.4
7.4