CVE-2023-20127

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory.

Score
CVSS 3.1 6.5 Medium
Status
Modified - psirt@cisco.com
Published
2023-04-05
Last modified
2024-10-25
Weaknesses
CWE-27

Affected products

References