Skip to content
fr Sign in
4.8 Medium

CVE-2023-20257 A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote…

Description

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct cross-site scripting attacks. This vulnerability is due to improper validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by submitting malicious input containing script or HTML content within requests that would stored within the application interface. A successful exploit could allow the attacker to conduct cross-site scripting attacks against other users of the affected application.

Affected products and versions

Product Affected versions Fixed in
Cisco Prime Infrastructure 3.10 3.10.0 → 3.10.4 No fix stated
Cisco Prime Infrastructure 3.9 3.9.0 → 3.9.1 No fix stated
Cisco Prime Infrastructure 3.8 3.8.0 → 3.8.1 No fix stated
Cisco Prime Infrastructure 3.7 3.7.0 → 3.7.1 No fix stated
Cisco Prime Infrastructure 3.6.0 No fix stated
Cisco Prime Infrastructure 3.5 3.5.0 → 3.5.1 No fix stated
Cisco Prime Infrastructure 3.4 3.4.0 → 3.4.2 No fix stated
Cisco Prime Infrastructure 3.3 3.3.0 → 3.3.1 No fix stated
Cisco Prime Infrastructure 3.2 3.2 → 3.2.2 No fix stated
Show the 18 other branches
Product Affected versions Fixed in
Cisco Prime Infrastructure 3.1 3.1.0 → 3.1.7 No fix stated
Cisco Prime Infrastructure 3.0 3.0.0 → 3.0.7 No fix stated
Cisco Prime Infrastructure 2.2 2.2 → 2.2.10 No fix stated
Cisco Prime Infrastructure 2.1 2.1 → 2.1.56 No fix stated
Cisco Prime Infrastructure 2.0 2.0.0 → 2.0.39 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 7.0.0 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 6.1 6.1 → 6.1.2 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 6.0 6.0.0 → 6.0.3.1 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 5.1 5.1 → 5.1.4.4 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 5.0 5.0 → 5.0.2.6 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 4.1 4.1 → 4.1.1.2 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 4.0 4.0 → 4.0.3.1 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 3.1 3.1 → 3.1.3 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 3.0 3.0 → 3.0.3 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 2.2 2.2 → 2.2.5 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 2.1 2.1 → 2.1.4 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 2.0 2.0 → 2.0.4.2 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 1.2 1.2 → 1.2.7 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Prime Infrastructure

The 50 CVEs of Cisco Prime Infrastructure →
CVE-2026-20189 A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow… 4.3 Medium CVE-2026-20123 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco… 4.3 Medium CVE-2026-20111 A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote… 4.8 Medium CVE-2026-20075 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco… 4.8 Medium
Track this CVE