A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc24616 CSCvc35363 CSCvc49574. Known Affected Releases: 3.1(1) 2.0(4.0.45B).
[
{
"product": "Cisco Prime Infrastructure and Evolved Programmable Network Manager",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Cisco Prime Infrastructure and Evolved Programmable Network Manager"
}
]
}
]