Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

51 records in Evolved Programmable Network Manager · all components

Priority CRITICAL 100KEV

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other J…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.99999 Published 2021-12-10 Partial fix · 2.15.0, 2.3.1 +5 CWE-20
Priority CRITICAL 88

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.98051 Published 2019-05-16 No fix listed CWE-20
Priority MEDIUM 52

Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06769 Published 2016-04-06 No fix listed CWE-20
Priority MEDIUM 51

The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain sensitive management information via a crafted HTTP re…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.06153 Published 2016-07-02 No fix listed CWE-119
Priority MEDIUM 49

A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on th…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03286 Published 2019-11-26 No fix listed CWE-20
Priority MEDIUM 47

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.04418 Published 2019-05-16 No fix listed CWE-20
Priority MEDIUM 44

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affecte…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02115 Published 2021-05-22 No fix listed CWE-78
Priority MEDIUM 44

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files w…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.13611 Published 2019-05-16 No fix listed CWE-22
Priority MEDIUM 44

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files w…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.13611 Published 2019-05-16 No fix listed CWE-22
Priority MEDIUM 44

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files w…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.13611 Published 2019-05-16 No fix listed CWE-22
Priority MEDIUM 43

A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of ar…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02975 Published 2016-10-27 No fix listed CWE-89
Priority MEDIUM 43

Cisco Prime Infrastructure 1.2 through 3.1 and Evolved Programmable Network Manager (EPNM) 1.2 and 2.0 allow remote authenticated users to execute arbitrary commands or upload files via a crafted HTTP request, aka Bug ID…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0249 Published 2016-07-02 No fix listed CWE-20
Priority MEDIUM 41

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries…

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01866 Published 2019-05-16 No fix listed CWE-89
Priority MEDIUM 41

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries…

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01866 Published 2019-05-16 No fix listed CWE-89
Priority MEDIUM 41

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.04418 Published 2019-05-16 No fix listed CWE-20
Priority MEDIUM 41

The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticated users to bypass intended RBAC restrictions and obtain sensitive infor…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.0162 Published 2016-05-25 No fix listed CWE-284
Priority LOW 39

A vulnerability in the web-based user interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker read and write access to information stored…

CVSS 3.0HIGH 8.0 Network Low privileges User interaction EPSS 0.02359 Published 2017-06-26 No fix listed CWE-20
Priority LOW 38

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to upload arbitrary files to an affected device.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00324 Published 2025-09-03 No fix listed CWE-434
Priority LOW 38

The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC restrictions and gain privileges via an H…

CVSS 3.0HIGH 8.1 Network Low privileges No interaction EPSS 0.01493 Published 2016-04-06 No fix listed CWE-264
Priority LOW 37

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privileges to access sensitive information that they are n…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00275 Published 2026-04-01 No fix listed CWE-862
Priority LOW 31

A vulnerability in the application CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager could allow an authenticated, local attacker to gain escalated privileges.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00175 Published 2024-01-17 No fix listed CWE-284
Priority LOW 31

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduc…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00917 Published 2023-04-05 No fix listed CWE-27
Load more
Open these records in search →