cisco-sa-pi-epnm-xss-P8fBz2FW: Cisco Prime Infrastructure and Evolved Programmable Network Manager Cross-Site Scripting Vulnerability
First published: Wed Feb 16 2022(Updated: )
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-xss-P8fBz2FW
Credit: Dan Marin Deloitte
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Prime Infrastructure | =Earlier than 3.10<3.10 | 3.10 |
| Cisco Evolved Programmable Network Manager |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Cisco Prime Infrastructure and Evolved Programmable Network Manager vulnerability?
The vulnerability ID for this vulnerability is cisco-sa-pi-epnm-xss-P8fBz2FW.
What is the severity level of the cisco-sa-pi-epnm-xss-P8fBz2FW vulnerability?
The severity level of the cisco-sa-pi-epnm-xss-P8fBz2FW vulnerability is medium.
How does the cisco-sa-pi-epnm-xss-P8fBz2FW vulnerability affect Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager?
The cisco-sa-pi-epnm-xss-P8fBz2FW vulnerability affects the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager.
What is the impact of the cisco-sa-pi-epnm-xss-P8fBz2FW vulnerability?
The cisco-sa-pi-epnm-xss-P8fBz2FW vulnerability allows an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device.
How can I mitigate the cisco-sa-pi-epnm-xss-P8fBz2FW vulnerability?
To mitigate the cisco-sa-pi-epnm-xss-P8fBz2FW vulnerability, Cisco recommends upgrading to version 3.10 or later of Cisco Prime Infrastructure.
- agent/title
- agent/type
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- agent/tags
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- vendor/cisco
- canonical/cisco prime infrastructure
- version/cisco prime infrastructure/earlier than 3.10
- canonical/cisco evolved programmable network manager