CVE-2023-20271
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Summary
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain and modify sensitive information that is stored in the underlying database.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Cisco | Cisco Prime Infrastructure | 2.0.0 | affected |
| Cisco | Cisco Prime Infrastructure | 2.0.10 | affected |
| Cisco | Cisco Prime Infrastructure | 2.0.39 | affected |
| Cisco | Cisco Prime Infrastructure | 2.1.0 | affected |
| Cisco | Cisco Prime Infrastructure | 2.1.1 | affected |
| Cisco | Cisco Prime Infrastructure | 2.1.2 | affected |
| Cisco | Cisco Prime Infrastructure | 2.1.56 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.0 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.1 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.2 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.3 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.10 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.8 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.4 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.7 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.5 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.9 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.1 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.2 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.2 Update 04 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.3 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.3 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.3 Update 04 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.3 Update 05 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2.3 Update 06 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.6 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.5 | affected |
| Cisco | Cisco Prime Infrastructure | 3.0.7 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.7 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.5 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1.6 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2.0-FIPS | affected |
| Cisco | Cisco Prime Infrastructure | 3.2.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3.0 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4.1 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4.1 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4.2 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.0 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.0 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.0 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.1 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.1 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5.1 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.6.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.6.0 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.6.0 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.6.0 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.6.0 Update 04 | affected |
| Cisco | Cisco Prime Infrastructure | 2.1 | affected |
| Cisco | Cisco Prime Infrastructure | 2.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP7 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP10 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP5 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP15 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP11 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP8 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3_DP4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7_DP2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.6_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP16 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5_DP4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3_DP3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2_DP2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP14 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP6 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP9 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP6 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2_DP3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.4_DP9 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3_DP2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP10 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.3_DP1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP13 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5_DP2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP12 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.5_DP3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP8 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP7 | affected |
| Cisco | Cisco Prime Infrastructure | 3.2_DP4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP11 | affected |
| Cisco | Cisco Prime Infrastructure | 3.1_DP5 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 04 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 06 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 07 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.0 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.7.1 Update 05 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.1 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.1 Update 04 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.1 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.1 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.0 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.8.0 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.1 Update 02 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.1 Update 03 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.1 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.1 Update 04 | affected |
| Cisco | Cisco Prime Infrastructure | 3.9.0 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10.0 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10.3 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10.1 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10.2 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10 Update 01 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10.4 | affected |
| Cisco | Cisco Prime Infrastructure | 3.10.4 Update 01 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.6 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.5 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.7 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.2.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 1.2.4.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.2.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.4.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.0.4.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.1.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.1.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.2.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.2.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.3.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.3.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.3.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.3.5 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.1.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.1.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.1.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 2.2.5 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.0.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.0.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.0.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.0 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.1.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.1.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.1.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.0.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.0.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.0.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.0 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 4.0.3.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2.5 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.0.2.6 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.4.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.4.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.4.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.3.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.3.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 5.1.4.4 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 7.0.0 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.0 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.2.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.3 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.0.3.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.1.1.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.1 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.1.2 | affected |
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 6.1.1.2.2 | affected |
Weaknesses
- CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
ADP Enrichment
CVE Program Container
Additional References
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.