The version of Cisco Prime Infrastructure installed on the remote host is prior to 3.10.4. It is, therefore, affected by multiple vulnerabilities:
  - A vulnerability in the web-based management interface of Cisco Prime Infrastructure   could allow an authenticated, remote attacker to execute arbitrary commands on the   underlying operating system. This vulnerability is due to improper processing of   serialized Java objects by the affected application. (CVE-2023-20258)

  - A vulnerability in the web-based management interface of Cisco EPNM and Cisco Prime   Infrastructure could allow an authenticated, remote attacker to conduct SQL injection   attacks on an affected system. This vulnerability is due to improper validation of   user-submitted parameters. (CVE-2023-20271)

  - A vulnerability in the application CLI of Cisco EPNM and Cisco Prime Infrastructure   could allow an authenticated, local attacker to gain elevated privileges. This   vulnerability is due to improper processing of command line arguments to application   scripts. (CVE-2023-20260)

  -A vulnerability in the web-based management interface of Cisco EPNM and Cisco Prime   Infrastructure could allow an authenticated, remote attacker to conduct XSS attacks.   This vulnerability is due to improper validation of user-supplied input to the   web-based management interface. (CVE-2023-20257)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Cisco Prime Infrastructure Multiple Vulnerabilities (cisco-sa-pi-epnm-wkZJeyeq)

high Nessus Plugin ID 188003

Version 1.3