Priority CRITICAL 100KEV
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.99999 · Published 2021-12-10 · Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority CRITICAL 88
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.98051 · Published 2019-05-16 · No fix listed CWE-20
Priority MEDIUM 52
Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06769 · Published 2016-04-06 · No fix listed CWE-20
Priority MEDIUM 51
The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain sensitive management information via a crafted HTTP re…
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.06153 · Published 2016-07-02 · No fix listed CWE-119
Priority MEDIUM 49
A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on th…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03286 · Published 2019-11-26 · No fix listed CWE-20
Priority MEDIUM 47
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.04418 · Published 2019-05-16 · No fix listed CWE-20
Priority MEDIUM 44
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affecte…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02115 · Published 2021-05-22 · No fix listed CWE-78
Priority MEDIUM 44
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files w…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.13611 · Published 2019-05-16 · No fix listed CWE-22
Priority MEDIUM 44
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files w…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.13611 · Published 2019-05-16 · No fix listed CWE-22
Priority MEDIUM 44
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files w…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.13611 · Published 2019-05-16 · No fix listed CWE-22
Priority MEDIUM 43
A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of ar…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02975 · Published 2016-10-27 · No fix listed CWE-89
Priority MEDIUM 43
Cisco Prime Infrastructure 1.2 through 3.1 and Evolved Programmable Network Manager (EPNM) 1.2 and 2.0 allow remote authenticated users to execute arbitrary commands or upload files via a crafted HTTP request, aka Bug ID…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0249 · Published 2016-07-02 · No fix listed CWE-20
Priority MEDIUM 41
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries…
CVSS 3.0HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01866 · Published 2019-05-16 · No fix listed CWE-89
Priority MEDIUM 41
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries…
CVSS 3.0HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01866 · Published 2019-05-16 · No fix listed CWE-89
Priority MEDIUM 41
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.04418 · Published 2019-05-16 · No fix listed CWE-20
Priority MEDIUM 41
The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticated users to bypass intended RBAC restrictions and obtain sensitive infor…
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0162 · Published 2016-05-25 · No fix listed CWE-284
Priority LOW 39
A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker read and write access to information stored…
CVSS 3.0HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.02359 · Published 2017-06-26 · No fix listed CWE-20
Priority LOW 38
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to upload arbitrary files to an affected device.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00324 · Published 2025-09-03 · No fix listed CWE-434
Priority LOW 38
The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an H…
CVSS 3.0HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01493 · Published 2016-04-06 · No fix listed CWE-264
Priority LOW 37
A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are n…
CVSS 3.1HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.00275 · Published 2026-04-01 · No fix listed CWE-862
Priority LOW 35
A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00695 · Published 2024-01-17 · No fix listed
Priority LOW 33
A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to access sensitive data.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02078 · Published 2017-04-07 · No fix listed CWE-200
Priority LOW 32
A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01694 · Published 2024-11-15 · No fix listed CWE-24
Priority LOW 31
A vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager could allow an authenticated, local attacker to gain escalated privileges.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00175 · Published 2024-01-17 · No fix listed CWE-284
Priority LOW 31
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduc…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00917 · Published 2023-04-05 · No fix listed CWE-27
Load more