CVE-2023-20131
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Modified - psirt@cisco.com
- Published
- 2023-04-05
- Last modified
- 2024-10-25
- Weaknesses
- CWE-27, CWE-79
Affected products
- Cisco Prime Infrastructure (Cisco)
- Evolved Programmable Network Manager (Cisco)
- Prime Infrastructure (Cisco)
References
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe