Known vulnerabilities in Cisco Prime Infrastructure - page 3

Software CPE: cpe:2.3:a:cisco_systems:cisco_prime_infrastructure:*:*:*:*:*:*:*:*
Total vulnerabilities: 59
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Prime Infrastructure Cisco Prime Infrastructure is affected by 59 known vulnerabilities: 1 critical, 1 high, 15 medium, 42 low Critical High Medium Low

Vulnerabilities (59)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU18526 - Improper input validation
CVE-2019-1822
CWE-20 Medium
No
No
3.4.1 19.05.2019 SB2019051901
#VU18525 - Improper input validation
CVE-2019-1821
CWE-20 High
Available
No
3.4.1 19.05.2019 SB2019051901
#VU17840 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2019-1659
CWE-300 Low
No
No
- 22.02.2019 SB2019022206
#VU17198 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-1643
CWE-79 Low
No
No
3.5.0.0 23.01.2019 SB2019012413
#VU16933 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-15457
CWE-79 Low
No
No
- 09.01.2019 SB2019011015
#VU15217 - Exposure of sensitive information to an unauthorized actor
CVE-2018-15432
CWE-200 Low
No
No
- 09.10.2018 SB2018100310
#VU15215 - Command injection
CWE-77 Low
No
No
- 09.10.2018 SB2018100310
#VU15214 - Command injection
CVE-2018-15379
CWE-77 Low
Available
No
- 09.10.2018 SB2018100310
#VU15216 - Exposure of sensitive information to an unauthorized actor
CVE-2018-15433
CWE-200 Low
No
No
- 03.10.2018 SB2018100310
#VU10117 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-0097
CWE-601 Low
No
No
- 19.01.2018 SB2018011908
#VU10116 - Permissions, Privileges, and Access Controls
CVE-2018-0096
CWE-264 Low
No
No
- 19.01.2018 SB2018011908
#VU7979 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6782
CWE-79 Low
No
No
- 17.08.2017 SB2017081708
#VU7164 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-6662
CWE-611 Medium
No
No
- 22.06.2017 SB2017062203
SB2017062205
#VU7163 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2017-6698
CWE-89 Medium
No
No
- 22.06.2017 SB2017062203
SB2017062205
#VU7162 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6699
CWE-79 Low
No
No
- 22.06.2017 SB2017062203
SB2017062205
#VU7161 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6700
CWE-79 Low
No
No
- 22.06.2017 SB2017062203
SB2017062205
#VU7160 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6725
CWE-79 Low
No
No
- 22.06.2017 SB2017062203
#VU7159 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-6724
CWE-79 Low
No
No
- 22.06.2017 SB2017062203
#VU106 - Overly Permissive Cross-domain Whitelist
CVE-2016-1442
CWE-78 Critical
No
No
- 08.07.2016 SB2016070704


Showing elements 41 - 60 out of 59