CVE-2026-20075Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability
Beschreibung
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an affected system. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious code into specific data fields in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, an attacker must have valid administrative credentials.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Cisco | Cisco Evolved Programmable Network Manager (EPNM) | 3.0.1, 3.1.2, 1.2, 3.1.1, 3.1.3, 3.1, 3.0.3, 3.0.2, 3.0, 2.2, 1.1, 2.1, 2.0, 4.1, 4.1.1, 4.0.3, 4.0.1, 4.0.2, 4.0, 5.0, 5.0.1, 5.1.1, 5.1, 5.0.2, 5.1.2, 5.1.3, 5.1.4, 6.1.1, 6.1, 6.0.0, 6.0.1, 6.0.2, 7.0.0, 1.2.5, 1.2.6, 2.0.1, 1.2.2, 1.2.3, 1.2.4, 1.2.7, 1.2.1.2, 2.2.1, 2.1.3, 2.0.2, 2.0.3, 2.1.2, 2.0.4, 2.1.1, 5.0.2.5, 5.1.4.3, 6.0.2.1, 6.1.1.1, 5.0.2.1, 5.0.2.2, 5.0.2.3, 5.0.2.4, 5.1.4.1, 5.1.4.2, 2.1.4, 2.2.4, 2.2.3, 2.2.5, 5.1.3.2, 5.1.3.1, 6.0.1.1, 4.1.1.2, 4.1.1.1, 4.0.3.1, 2.0.1.1, 2.1.1.3, 2.1.1.1, 2.1.1.4, 2.0.4.2, 2.0.4.1, 2.1.2.2, 2.1.2.3, 2.0.2.1, 2.1.3.4, 2.1.3.3, 2.1.3.2, 2.1.3. | |
| Cisco | Cisco Prime Infrastructure | 3.0.0, 3.1.0, 3.1.5, 2.1, 2.0.0, 3.6.0, 3.7.0, 3.4.0, 3.3.0, 3.2, 3.5.0, 3.2.0-FIPS, 2.2, 3.8.0-FED, 3.9.0, 3.8.0, 3.10.0, 3.1.1, 2.1.2, 2.2.1, 2.2.0, 3.0.2, 3.0.3, 3.0.1, 2.2.2, 2.2.3, 2.1.0, 2.1.1, 3.9.1, 2.0.10, 3.8.1, 3.7.1, 3.5.1, 3.4.2, 3.3.1, 3.1.7, 3.2.1, 3.2.2, 3.1.6, 3.1.2, 3.4.1, 3.1.3, 3.1.4, 3.0.6, 2.2.10, 3.0.4, 3.0.5, 2.1.56, 2.2.4, 2.2.9, 2.2.8, 2.2.5, 2.2.7, 2.0.39, 3.8_DP1, 3.9_DP1, 3.7_DP2, 3.6_DP1, 3.5_DP4, 3.5_DP2, 3.4_DP10, 3.7_DP1, 3.5_DP3, 3.4_DP11, 3.5_DP1, 3.4_DP8, 3.4_DP1, 3.4_DP3, 3.4_DP5, 3.4_DP2, 3.4_DP7, 3.4_DP6, 3.3_DP4, 3.4_DP4, 3.4_DP9, 3.1_DP16, 3.3_DP2, 3.3_ | |
| cisco | evolved programmable network manager | ≤ 7.0 | |
| cisco | prime infrastructure | ≤ 3.9 |
Referenzen und Patches
- cisco-sa-epnm-pi-stored-xss-GEkX8yWK Vendor Advisory
CPE-Treffer (NVD) (6)
cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*≤ 7.0cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*≥ 7.1.0 < 7.1.4.1cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*≥ 8.1.0 ≤ 8.1.2.1cpe:2.3:a:cisco:evolved_programmable_network_manager:8.0.0:*:*:*:*:*:*:*cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*≤ 3.9cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*≥ 3.10.0 ≤ 3.10.6