PI
Product
Prime Infrastructure
88
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 14Medium 57Low 1
Watch
Add Prime Infrastructure to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-20260 | 6.7 | Jan 17 | A vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager could allow an authenticated, local attacker to gain escalated… Affected: before 3.10.4; 3.10.4; 3.10.4 |
| CVE-2023-20121 | 6.7 | Apr 5 | Multiple vulnerabilities in the restricted shell of Cisco Evolved Programmable Network Manager (EPNM), Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could… Affected: before 3.10.4 |
| CVE-2025-20270 | 6.5 | Sep 3 | Cisco Evolved Programmable Network Manager Information Disclosure Vulnerability Affected: through 3.9; 3.10 through 3.10.6 |
| CVE-2025-20269 | 6.5 | Aug 20 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated,… Affected: through 3.9; 3.10 through 3.10.6; 3.10.6 |
| CVE-2022-20656 | 6.5 | Nov 15 | A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an authenticated, remote attacker to conduct a path traversal attack on an… Affected: 2.0.0; 2.1; 2.2; 3.0.0; 3.1.0; 3.1.5; +9 more |
| CVE-2023-20271 | 6.5 | Jan 17 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote… Affected: before 3.10.4; 3.10.4; 3.10.4 |
| CVE-2023-20130 | 6.5 | Apr 5 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to… Affected: through 3.7; 3.10 before 3.10.2; 3.8; 3.8.1; 3.9; 3.9.1 |
| CVE-2023-20129 | 6.5 | Apr 5 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to… Affected: through 3.7; 3.10 before 3.10.2; 3.8; 3.8.1; 3.9; 3.9.1 |
| CVE-2023-20127 | 6.5 | Apr 5 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to… Affected: through 3.7; 3.10 before 3.10.2; 3.8; 3.8.1; 3.9; 3.9.1 |
| CVE-2019-1906 | 6.5 | Jun 20 | A vulnerability in the Virtual Domain system of Cisco Prime Infrastructure (PI) could allow an authenticated, remote attacker to change the virtual domain configuration, which… Affected: 3.6 |
| CVE-2019-1820 | 6.5 | May 16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated,… Affected: before 3.4 |
| CVE-2019-1819 | 6.5 | May 16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated,… Affected: before 3.4 |
| CVE-2019-1818 | 6.5 | May 16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated,… Affected: before 3.4 |
| CVE-2017-3884 | 6.5 | Apr 7 | A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to access… Affected: 2.2; 2.2(3); 3.0; 3.1; 3.1(0.128); 3.1(4.0); +2 more |
| CVE-2016-1358 | 6.4 | Mar 3 | Cisco Prime Infrastructure 2.2, 3.0, and 3.1(0.0) allows remote authenticated users to read arbitrary files or cause a denial of service via an XML document containing an external… Affected: 2.2; 3.0; 3.1 |
| CVE-2026-20123 | 6.1 | Feb 4 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Open Redirect Vulnerability Affected: before 3.10.6; 3.10.6; 3.10.6 |
| CVE-2025-20120 | 6.1 | Apr 2 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote… Affected: 2.0.0; 2.0.10; 2.0.39; 2.1; 2.1.0; 2.1.1; +34 more |
| CVE-2022-20657 | 6.1 | Nov 15 | A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an unauthenticated, remote attacker to conduct an XSS attack against a user… Affected: 2.0.0; 2.1; 2.2; 3.0.0; 3.1.0; 3.1.5; +9 more |
| CVE-2023-20222 | 6.1 | Aug 16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote… Affected: through 3.10 |
| CVE-2023-20068 | 6.1 | Apr 5 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site… Affected: before 3.10.3 |
| CVE-2022-20659 | 6.1 | Feb 17 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an unauthenticated, remote… Affected: before 3.10 |
| CVE-2019-12713 | 6.1 | Oct 2 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: 3.5 |
| CVE-2019-12712 | 6.1 | Oct 2 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: 3.7 |
| CVE-2019-1643 | 6.1 | Jan 23 | Cisco Prime Infrastructure Cross-Site Scripting Vulnerability Affected: 3.2.0 |
| CVE-2018-15457 | 6.1 | Jan 10 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: 3.5 |
| CVE-2018-0097 | 6.1 | Jan 18 | A vulnerability in the web interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect Affected: All versions, or not specified |
| CVE-2017-6725 | 6.1 | Jul 4 | A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: 2.2(2) |
| CVE-2017-6724 | 6.1 | Jul 4 | A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a… Affected: 3.1(0.0) |
| CVE-2017-6700 | 6.1 | Jul 4 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote… Affected: 2.0(4.0.45b); 3.1(1) |
| CVE-2017-6699 | 6.1 | Jul 4 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote… Affected: 3.1; 3.1(0.128); 3.1.1 |
| CVE-2017-6611 | 6.1 | Apr 20 | A vulnerability in the web framework code of Cisco Prime Infrastructure 2.2(2) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack… Affected: 2.2(2) |
| CVE-2017-3848 | 6.1 | Apr 7 | A vulnerability in the HTTP web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS)… Affected: 2.2(2); 3.0 |
| CVE-2015-6434 | 6.1 | Jan 8 | Cisco Prime Infrastructure does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other… Affected: 2.2(2) |
| CVE-2018-0096 | 5.9 | Jan 18 | A vulnerability in the role-based access control (RBAC) functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to perform a privilege escalation… Affected: 3.2(0.0); 3.3(0.0) |
| CVE-2021-34733 | 5.5 | Sep 2 | A vulnerability in the CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, local attacker to access sensitive… Affected: before 3.8 |
| CVE-2024-20514 | 5.4 | Nov 6 | A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated,… Affected: before 3.10.6 |
| CVE-2023-20205 | 5.4 | Aug 16 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated,… Affected: before 3.10.4 |
| CVE-2023-20203 | 5.4 | Aug 16 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated,… Affected: before 3.10.4 |
| CVE-2023-20201 | 5.4 | Aug 16 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated,… Affected: before 3.10.4 |
| CVE-2023-20131 | 5.4 | Apr 5 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to… Affected: through 3.7; 3.10 before 3.10.2; 3.8; 3.8.1; 3.9; 3.9.1 |
| CVE-2023-20069 | 5.4 | Mar 3 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote… Affected: before 3.10.3 |
| CVE-2021-34784 | 5.4 | Nov 4 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote… Affected: before 3.10 |
| CVE-2020-3339 | 5.4 | Jun 3 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected… Affected: through 3.7.1; 3.8 |
| CVE-2018-0482 | 5.4 | Jan 10 | A vulnerability in the web-based management interface of Cisco Prime Network Control System could allow an authenticated, remote attacker to conduct a stored cross-site scripting… Affected: 3.5(0.0) |
| CVE-2017-6782 | 5.4 | Aug 17 | A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to modify a page in the web interface of the… Affected: 3.2(0.0) |
| CVE-2017-6698 | 5.4 | Jul 4 | A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, remote attacker to… Affected: 2.0(4.0.45b); 3.1(1) |
| CVE-2017-3869 | 5.4 | Mar 17 | An API Credentials Management vulnerability in the APIs for Cisco Prime Infrastructure could allow an authenticated, remote attacker to access an API that should be restricted to… Affected: 3.1(1) |
| CVE-2026-20111 | 4.8 | Feb 4 | Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability Affected: before 3.10.6; 3.10.6; 3.10.6 |
| CVE-2026-20075 | 4.8 | Jan 15 | Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability Affected: through 3.9; 3.10.0 through 3.10.6 |
| CVE-2025-20280 | 4.8 | Sep 3 | Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability Affected: through 3.9; 3.10 through 3.10.6 |