Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2975▼ 108 respecto a la semana anterior
Críticas / altas1449▲ 87 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior
89 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 0.92% | — | Cisco Prime InfrastructureCisco Evolved Programmable Network Manager | 5/4/2023 | 17/6/2026 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information… | |
| Modificada | Media (6.5) | 0.92% | — | Cisco Prime Infrastructure | 5/4/2023 | 17/6/2026 | Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information… | |
| Modificada | Media (6.1) | 0.47% | — | Cisco Prime Infrastructure | 5/4/2023 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure Software could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation of… | |
| Modificada | Media (5.4) | 0.45% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 3/3/2023 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability is due… | |
| Modificada | Media (6.1) | 1.2% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 17/2/2022 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability exists… | |
| Modificada | Media (5.4) | 0.60% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 4/11/2021 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device.… | |
| Modificada | Media (5.5) | 0.22% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 2/9/2021 | 17/6/2026 | A vulnerability in the CLI of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, local attacker to access sensitive information stored on the underlying file system of an affected system. This vulnerability exists because sensitive information is not… | |
| Modificada | Alta (8.8) | 2.1% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 22/5/2021 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied input to the… | |
| Modificada | Baja (3.4) | 0.21% | — | Cisco Evolved Programmable Network ManagerCisco Identity Services EngineCisco Prime Infrastructure | 22/5/2021 | 17/6/2026 | A vulnerability in the restricted shell of Cisco Evolved Programmable Network (EPN) Manager, Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to identify directories and write arbitrary files to the file system. This vulnerability is due to improper… | |
| Modificada | Media (5.4) | 1.1% | — | Cisco Prime Infrastructure | 3/6/2020 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this vulnerability by… | |
| Modificada | Crítica (9.8) | 3.3% | — | Cisco Prime InfrastructureCisco Evolved Programmable Network Manager | 26/11/2019 | 17/6/2026 | A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager (EPNM) could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on the underlying operating system. The vulnerability is due to insufficient input validation during the… | |
| Modificada | Media (6.1) | 1.1% | — | Cisco Prime Infrastructure | 2/10/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of… | |
| Modificada | Media (6.1) | 1.1% | — | Cisco Prime Infrastructure | 2/10/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of… | |
| Modificada | Media (6.5) | 1.3% | — | Cisco Prime Infrastructure | 20/6/2019 | 17/6/2026 | A vulnerability in the Virtual Domain system of Cisco Prime Infrastructure (PI) could allow an authenticated, remote attacker to change the virtual domain configuration, which could lead to privilege escalation. The vulnerability is due to improper validation of API requests. An attacker could exploit this… | |
| Modificada | Alta (8.1) | 1.9% | — | Cisco Evolved Programmable Network ManagerCisco Network Level ServiceCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-supplied input in SQL… | |
| Modificada | Alta (8.1) | 1.9% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-supplied input in SQL… | |
| Modificada | Alta (7.2) | 4.4% | — | Cisco Evolved Programmable Network ManagerCisco Network Level ServiceCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software… | |
| Modificada | Alta (7.2) | 4.4% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software… | |
| Modificada | Crítica (9.8) | 98% | 💥 Exploit | Cisco Evolved Programmable Network ManagerCisco Network Level ServiceCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute code with root-level privileges on the underlying operating system. This vulnerability exist because the software… | |
| Modificada | Media (6.5) | 14% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to improper sanitization… | |
| Modificada | Media (6.5) | 14% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to improper sanitization… | |
| Modificada | Media (6.5) | 14% | — | Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure | 16/5/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to download and view files within the application that should be restricted. This vulnerability is due to improper sanitization… | |
| Modificada | Alta (7.4) | 0.85% | — | Cisco Prime Infrastructure | 21/2/2019 | 17/6/2026 | A vulnerability in the Identity Services Engine (ISE) integration feature of Cisco Prime Infrastructure (PI) could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against the Secure Sockets Layer (SSL) tunnel established between ISE and PI. The vulnerability is due to improper… | |
| Modificada | Media (6.1) | 1.2% | — | Cisco Prime Infrastructure | 23/1/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of the affected software. The vulnerability is due to insufficient validation of… | |
| Modificada | Media (6.1) | 1.2% | — | Cisco Prime Infrastructure | 10/1/2019 | 17/6/2026 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface of an affected system. The vulnerability is due to insufficient validation of… |