PI
Product
Prime Infrastructure
88
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 14Medium 57Low 1
Watch
Add Prime Infrastructure to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-6611 | 6.1 | Apr 20 | A vulnerability in the web framework code of Cisco Prime Infrastructure 2.2(2) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: 2.2(2) |
| CVE-2017-3848 | 6.1 | Apr 7 | A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 2.2(2); 3.0 |
| CVE-2015-6434 | 6.1 | Jan 8 | Cisco Prime Infrastructure does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other… Affected: 2.2(2) |
| CVE-2018-0096 | 5.9 | Jan 18 | A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to perform a privilege escalation… Affected: 3.2(0.0); 3.3(0.0) |
| CVE-2021-34733 | 5.5 | Sep 2 | A vulnerability in the CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, local attacker to access sensitive… Affected: before 3.8 |
| CVE-2024-20514 | 5.4 | Nov 6 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated,… Affected: before 3.10.6 |
| CVE-2023-20205 | 5.4 | Aug 16 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated,… Affected: before 3.10.4 |
| CVE-2023-20203 | 5.4 | Aug 16 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated,… Affected: before 3.10.4 |
| CVE-2023-20201 | 5.4 | Aug 16 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated,… Affected: before 3.10.4 |
| CVE-2023-20131 | 5.4 | Apr 5 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to… Affected: through 3.7; 3.10 before 3.10.2; 3.8; 3.8.1; 3.9; 3.9.1 |
| CVE-2023-20069 | 5.4 | Mar 3 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote… Affected: before 3.10.3 |
| CVE-2021-34784 | 5.4 | Nov 4 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote… Affected: before 3.10 |
| CVE-2020-3339 | 5.4 | Jun 3 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected… Affected: through 3.7.1; 3.8 |
| CVE-2018-0482 | 5.4 | Jan 10 | A vulnerability in the web-based management interface of Cisco Prime Network Control System could allow an authenticated, remote attacker to conduct a stored cross-site scripting… Affected: 3.5(0.0) |
| CVE-2017-6782 | 5.4 | Aug 17 | A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to modify a page in the web interface of the… Affected: 3.2(0.0) |
| CVE-2017-6698 | 5.4 | Jul 4 | A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, remote attacker to… Affected: 2.0(4.0.45b); 3.1(1) |
| CVE-2017-3869 | 5.4 | Mar 17 | An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to… Affected: 3.1(1) |
| CVE-2026-20111 | 4.8 | Feb 4 | Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability Affected: before 3.10.6; 3.10.6; 3.10.6 |
| CVE-2026-20075 | 4.8 | Jan 15 | Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability Affected: through 3.9; 3.10.0 through 3.10.6 |
| CVE-2025-20280 | 4.8 | Sep 3 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote… Affected: through 3.9; 3.10 through 3.10.6 |
| CVE-2025-20203 | 4.8 | Apr 2 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote… Affected: 2.0.0; 2.0.10; 2.0.39; 2.1; 2.1.0; 2.1.1; +34 more |
| CVE-2023-20257 | 4.8 | Jan 17 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct cross-site scripting attacks Affected: before 3.10.4; 3.10.4; 3.10.4 |
| CVE-2026-20189 | 4.3 | May 6 | Cisco Prime Infrastructure Information Disclosure Vulnerability Affected: before 3.10.6; 3.10.6; 3.10.6; 3.10.6 |
| CVE-2025-20272 | 4.3 | Jul 16 | A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, low-privileged, remote… Affected: before 3.10.6; 3.10.6; 3.10.6 |
| CVE-2018-15433 | 4.3 | Oct 5 | A vulnerability in the server backup function of Cisco Prime Infrastructure could allow an authenticated, remote attacker to view sensitive information Affected: 3.2 |
| CVE-2018-15432 | 4.3 | Oct 5 | A vulnerability in the server backup function of Cisco Prime Infrastructure could allow an authenticated, remote attacker to view sensitive information Affected: 3.2 |
| CVE-2016-1474 | 4.3 | Aug 8 | Cisco Prime Infrastructure 2.2(2) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified… Affected: 2.2(2) |
| CVE-2021-1306 | 3.4 | May 22 | A vulnerability in the restricted shell of Cisco Evolved Programmable Network (EPN) Manager, Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an… Affected: before 3.8.1; 3.8.1 |
| CVE-2015-6332 | – | Oct 13 | Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service (daemon hang) by sending many SSL renegotiation requests, aka Bug ID CSCuv56830 Affected: 2.2 |
| CVE-2015-6262 | – | Aug 25 | Cross-site request forgery (CSRF) vulnerability in Cisco Prime Infrastructure 1.2(0.103) and 2.0(0.0) allows remote attackers to hijack the authentication of arbitrary users, aka… Affected: 1.2.0.103; 2.0 |
| CVE-2015-4331 | – | Aug 22 | Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username… Affected: through 1.4.0.45 |
| CVE-2014-2153 | – | Feb 12 | Multiple cross-site scripting (XSS) vulnerabilities in INSERT pages in Cisco Prime Infrastructure allow remote attackers to inject arbitrary web script or HTML via unspecified… Affected: All versions, or not specified |
| CVE-2014-2152 | – | Feb 12 | Cross-site request forgery (CSRF) vulnerability in the INSERT page in Cisco Prime Infrastructure (PI) allows remote attackers to hijack the authentication of arbitrary users, aka… Affected: All versions, or not specified |
| CVE-2014-2147 | – | Feb 12 | The web interface in Cisco Prime Infrastructure 2.1 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct… Affected: through 2.1 |
| CVE-2014-8007 | – | Dec 20 | Cisco Prime Infrastructure allows remote authenticated users to read device-discovery passwords by examining the HTML source code of the Quick Discovery options page, aka Bug ID… Affected: All versions, or not specified |
| CVE-2014-0679 | – | Feb 27 | Cisco Prime Infrastructure 1.2 and 1.3 before 1.3.0.20-2, 1.4 before 1.4.0.45-2, and 2.0 before 2.0.0.0.294-2 allows remote authenticated users to execute arbitrary commands with… Affected: 1.2; 1.2.1; 1.3; 1.4; 1.4.1; 2.0 |
| CVE-2013-1247 | – | May 31 | Cross-site scripting (XSS) vulnerability in the wireless configuration module in Cisco Prime Infrastructure allows remote attackers to inject arbitrary web script or HTML via an… Affected: All versions, or not specified |
| CVE-2013-1153 | – | Mar 7 | Cross-site request forgery (CSRF) vulnerability in the web interface in Cisco Prime Infrastructure allows remote attackers to hijack the authentication of arbitrary users, aka Bug… Affected: All versions, or not specified |