CVE-2023-20130

cisco prime infrastructure, cisco evolved programmable network manager

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2023-20130

Katalog CVE

CVSS 6.5 · Medium EPSS 0,38%

Kerentanan Path Traversal: 'dir/../../filename' pada cisco prime infrastructure, cisco evolved programmable network manager. Skor CVSS 3.1 6.5 (Medium) menurut NVD.

Deskripsi (NVD)

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow a remote attacker to obtain privileged information and conduct cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. For more information about these vulnerabilities, see the Details section of this advisory.

Rincian

Terbit di NVD
5 April 2023
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.5 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-27: Path Traversal: 'dir/../../filename'
CWE-352: Cross-Site Request Forgery (CSRF)
EPSS (30 hari)
0,38% peluang dieksploitasi; lebih tinggi dari 30,2% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco prime infrastructure Semua versi hingga 3.7
cisco prime infrastructure Versi 3.10 hingga sebelum 3.10.2
cisco prime infrastructure Versi 3.8
cisco prime infrastructure Versi 3.8.1
cisco prime infrastructure Versi 3.9
cisco prime infrastructure Versi 3.9.1
cisco evolved programmable network manager Semua versi sebelum 5.0.2.5
cisco evolved programmable network manager Versi 5.1 hingga sebelum 5.1.4.2
cisco evolved programmable network manager Versi 6.0 hingga sebelum 6.0.2.1
cisco evolved programmable network manager Versi 6.1 hingga sebelum 6.1.1.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.