GCVE - cpe:2.3:a:cisco:prime_infrastructure:3.8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:prime_infrastructure:3.8:*:*:*:*:*:*:*

part: a version: 3.8 update: *

Vendor	Cisco (`e1b3baff-aaf9-56a6-a68a-41e28ce616a5`)
Product	Prime Infrastructure (`f8fffb67-260d-542a-8aa5-93ac7f4ea9c3`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-20131`	vulnerable	2026-06-08 05:52:40.413319	Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities MEDIUM (6.5) Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2023-04-05T00:00:00.000Z Updated: 2024-10-25T16:00:51.219Z Open on db.gcve.eu Reference links https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20130`	vulnerable	2026-06-08 05:52:40.412729	Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities MEDIUM (6.5) Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2023-04-05T00:00:00.000Z Updated: 2024-10-25T16:01:07.105Z Open on db.gcve.eu Reference links https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20129`	vulnerable	2026-06-08 05:52:40.412051	Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities MEDIUM (6.5) Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2023-04-05T00:00:00.000Z Updated: 2024-10-25T16:01:15.745Z Open on db.gcve.eu Reference links https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-20127`	vulnerable	2026-06-08 05:52:40.408270	Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities MEDIUM (6.5) Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory. Published: 2023-04-05T00:00:00.000Z Updated: 2024-10-25T16:01:24.242Z Open on db.gcve.eu Reference links https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-eRPWAXLe	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-3339`	vulnerable	2026-06-08 05:25:54.770051	Cisco Prime Infrastructure SQL Injection Vulnerability MEDIUM (5.4) A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain and modify sensitive information that is stored in the underlying database. Published: 2020-06-03T17:56:37.568Z Updated: 2024-11-15T17:10:10.130Z Open on db.gcve.eu Reference links https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-sql-inj-KGLLsFw8	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.