PI
Product
Prime Infrastructure
88
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 14Medium 57Low 1
Watch
Add Prime Infrastructure to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-15958 | 9.8 | Nov 26 | A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated remote attacker to execute… Affected: before 3.4.2; 3.5 before 3.5.1; 3.6 |
| CVE-2019-1821 | 9.8 | May 16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote… Affected: before 3.4.1 |
| CVE-2018-15379 | 9.8 | Oct 5 | A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory permissions could allow an unauthenticated, remote attacker to upload… Affected: 3.2; 3.2; 3.2(0.0); 3.2(1.0); 3.2(2.0); 3.3; +4 more |
| CVE-2018-0258 | 9.8 | May 2 | A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary files to any directory of a vulnerable… Affected: 3.3(0.0) |
| CVE-2016-1289 | 9.8 | Jul 2 | The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain sensitive… Affected: 1.2; 1.2.0.103; 1.2.1; 1.3; 1.3.0.20; 1.4; +7 more |
| CVE-2016-1291 | 9.8 | Apr 6 | Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized… Affected: 1.2; 1.2.0.103; 1.2.1; 1.3; 1.3.0.20; 1.4; +6 more |
| CVE-2021-1487 | 8.8 | May 22 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to… Affected: before 3.9 |
| CVE-2016-6443 | 8.8 | Oct 27 | A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system… Affected: 1.2; 1.2.0.103; 1.2.1; 1.3; 1.3.0.20; 1.4; +10 more |
| CVE-2016-1442 | 8.8 | Jul 7 | The administrative web interface in Cisco Prime Infrastructure (PI) before 3.1.1 allows remote authenticated users to execute arbitrary commands via crafted field values, aka Bug… Affected: 3.0; 3.1 |
| CVE-2016-1408 | 8.8 | Jul 2 | Cisco Prime Infrastructure 1.2 through 3.1 and Evolved Programmable Network Manager (EPNM) 1.2 and 2.0 allow remote authenticated users to execute arbitrary commands or upload… Affected: 1.2; 1.2.0.103; 1.2.1; 1.3; 1.3.0.20; 1.4; +9 more |
| CVE-2016-1406 | 8.8 | May 25 | The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticated users to bypass intended… Affected: 1.2; 1.2.0.103; 1.2.1; 1.3; 1.3.0.20; 1.4; +8 more |
| CVE-2016-1359 | 8.8 | Mar 3 | Cisco Prime Infrastructure 3.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP request that is mishandled during viewing of a log file, aka Bug ID… Affected: 3.0 |
| CVE-2019-1825 | 8.1 | May 16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote… Affected: before 3.4.1 |
| CVE-2019-1824 | 8.1 | May 16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote… Affected: before 3.4.1 |
| CVE-2016-1290 | 8.1 | Apr 6 | The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC… Affected: 1.2; 1.2.0.103; 1.2.1; 1.3; 1.3.0.20; 1.4; +6 more |
| CVE-2017-6662 | 8.0 | Jun 26 | A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker… Affected: 1.2; 1.2.0.103; 1.2.1; 1.3; 1.3.0.20; 1.4; +16 more |
| CVE-2019-1659 | 7.4 | Feb 21 | Cisco Prime Infrastructure Certificate Validation Vulnerability Affected: 2.2 through 3.4.0 |
| CVE-2023-20258 | 7.2 | Jan 17 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to execute arbitrary commands on the underlying… Affected: before 3.10.4; 3.10.4; 3.10.4 |
| CVE-2019-1823 | 7.2 | May 16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote… Affected: before 3.4.1 |
| CVE-2019-1822 | 7.2 | May 16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote… Affected: before 3.4.1 |
| CVE-2023-20260 | 6.7 | Jan 17 | A vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager could allow an authenticated, local attacker to gain escalated… Affected: before 3.10.4; 3.10.4; 3.10.4 |
| CVE-2023-20121 | 6.7 | Apr 5 | Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could… Affected: before 3.10.4 |
| CVE-2025-20270 | 6.5 | Sep 3 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote… Affected: through 3.9; 3.10 through 3.10.6 |
| CVE-2025-20269 | 6.5 | Aug 20 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated,… Affected: through 3.9; 3.10 through 3.10.6; 3.10.6 |
| CVE-2022-20656 | 6.5 | Nov 15 | A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an authenticated, remote attacker to conduct a path traversal attack on an… Affected: 2.0.0; 2.1; 2.2; 3.0.0; 3.1.0; 3.1.5; +9 more |
| CVE-2023-20271 | 6.5 | Jan 17 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote… Affected: before 3.10.4; 3.10.4; 3.10.4 |
| CVE-2023-20130 | 6.5 | Apr 5 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to… Affected: through 3.7; 3.10 before 3.10.2; 3.8; 3.8.1; 3.9; 3.9.1 |
| CVE-2023-20129 | 6.5 | Apr 5 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to… Affected: through 3.7; 3.10 before 3.10.2; 3.8; 3.8.1; 3.9; 3.9.1 |
| CVE-2023-20127 | 6.5 | Apr 5 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to… Affected: through 3.7; 3.10 before 3.10.2; 3.8; 3.8.1; 3.9; 3.9.1 |
| CVE-2019-1906 | 6.5 | Jun 20 | A vulnerability in the Virtual Domain system of Cisco Prime Infrastructure (PI) could allow an authenticated, remote attacker to change the virtual domain configuration, which… Affected: 3.6 |
| CVE-2019-1820 | 6.5 | May 16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated,… Affected: before 3.4 |
| CVE-2019-1819 | 6.5 | May 16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated,… Affected: before 3.4 |
| CVE-2019-1818 | 6.5 | May 16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated,… Affected: before 3.4 |
| CVE-2017-3884 | 6.5 | Apr 7 | A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to access… Affected: 2.2; 2.2(3); 3.0; 3.1; 3.1(0.128); 3.1(4.0); +2 more |
| CVE-2016-1358 | 6.4 | Mar 3 | Cisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external… Affected: 2.2; 3.0; 3.1 |
| CVE-2026-20123 | 6.1 | Feb 4 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Open Redirect Vulnerability Affected: before 3.10.6; 3.10.6; 3.10.6 |
| CVE-2025-20120 | 6.1 | Apr 2 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote… Affected: 2.0.0; 2.0.10; 2.0.39; 2.1; 2.1.0; 2.1.1; +34 more |
| CVE-2022-20657 | 6.1 | Nov 15 | A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an unauthenticated, remote attacker to conduct an XSS attack against a user… Affected: 2.0.0; 2.1; 2.2; 3.0.0; 3.1.0; 3.1.5; +9 more |
| CVE-2023-20222 | 6.1 | Aug 16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote… Affected: through 3.10 |
| CVE-2023-20068 | 6.1 | Apr 5 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: before 3.10.3 |
| CVE-2022-20659 | 6.1 | Feb 17 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an unauthenticated, remote… Affected: before 3.10 |
| CVE-2019-12713 | 6.1 | Oct 2 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: 3.5 |
| CVE-2019-12712 | 6.1 | Oct 2 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: 3.7 |
| CVE-2019-1643 | 6.1 | Jan 23 | Cisco Prime Infrastructure Cross-Site Scripting Vulnerability Affected: 3.2.0 |
| CVE-2018-15457 | 6.1 | Jan 10 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: 3.5 |
| CVE-2018-0097 | 6.1 | Jan 18 | A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect Affected: All versions, or not specified |
| CVE-2017-6725 | 6.1 | Jul 4 | A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: 2.2(2) |
| CVE-2017-6724 | 6.1 | Jul 4 | A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: 3.1(0.0) |
| CVE-2017-6700 | 6.1 | Jul 4 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote… Affected: 2.0(4.0.45b); 3.1(1) |
| CVE-2017-6699 | 6.1 | Jul 4 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote… Affected: 3.1; 3.1(0.128); 3.1.1 |