6.5
Moyenne
CVE-2023-20258 A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote…
Description
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system. This vulnerability is due to improper processing of serialized Java objects by the affected application. An attacker could exploit this vulnerability by uploading a document containing malicious serialized Java objects to be processed by the affected application. A successful exploit could allow the attacker to cause the application to execute arbitrary commands.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Prime Infrastructure 3.10 | 3.10.0 → 3.10.4 | Pas de correctif indiqué |
| Cisco Prime Infrastructure 3.9 | 3.9.0 → 3.9.1 | Pas de correctif indiqué |
| Cisco Prime Infrastructure 3.8 | 3.8.0 → 3.8.1 | Pas de correctif indiqué |
| Cisco Prime Infrastructure 3.7 | 3.7.0 → 3.7.1 | Pas de correctif indiqué |
| Cisco Prime Infrastructure | 3.6.0 | Pas de correctif indiqué |
| Cisco Prime Infrastructure 3.5 | 3.5.0 → 3.5.1 | Pas de correctif indiqué |
| Cisco Prime Infrastructure 3.4 | 3.4.0 → 3.4.2 | Pas de correctif indiqué |
| Cisco Prime Infrastructure 3.3 | 3.3.0 → 3.3.1 | Pas de correctif indiqué |
| Cisco Prime Infrastructure 3.2 | 3.2 → 3.2.2 | Pas de correctif indiqué |
Afficher les 5 autres branches Masquer les 5 autres branches
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Prime Infrastructure 3.1 | 3.1.0 → 3.1.7 | Pas de correctif indiqué |
| Cisco Prime Infrastructure 3.0 | 3.0.0 → 3.0.7 | Pas de correctif indiqué |
| Cisco Prime Infrastructure 2.2 | 2.2 → 2.2.10 | Pas de correctif indiqué |
| Cisco Prime Infrastructure 2.1 | 2.1 → 2.1.56 | Pas de correctif indiqué |
| Cisco Prime Infrastructure 2.0 | 2.0.0 → 2.0.39 | Pas de correctif indiqué |
Références
- cisco-sa-pi-epnm-wkZJeyeq sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Prime Infrastructure
Les 50 CVE de Cisco Prime Infrastructure →
CVE-2026-20189
A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow…
4.3
Moyenne
CVE-2026-20123
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco…
4.3
Moyenne
CVE-2026-20111
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote…
4.8
Moyenne
CVE-2026-20075
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco…
4.8
Moyenne