Stored Cross-Site Scripting Vulnerability in Cisco Prime Infrastructure and EPNM
CVE-2023-20205
5.4MEDIUM
Key Information:
- Vendor
Cisco
- Vendor
- CVE Published:
- 16 August 2023
What is CVE-2023-20205?
Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) stem from inadequate validation of user-supplied input. An attacker with valid credentials can execute a stored cross-site scripting (XSS) attack by tricking a user to view a page that includes malicious HTML or script content. This exploit could allow the attacker to run arbitrary script code in the context of the affected interface, potentially accessing sensitive browser-based information.
Affected Version(s)
Cisco Evolved Programmable Network Manager (EPNM) 1.2.6
Cisco Evolved Programmable Network Manager (EPNM) 1.2.2
Cisco Evolved Programmable Network Manager (EPNM) 1.2.3