CVE-2017-6698 in Prime Infrastructureinfo

Summary

A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc23892 CSCvc35270 CSCvc35626 CSCvc35630 CSCvc49568. Known Affected Releases: 3.1(1) 2.0(4.0.45B).

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

03/09/2017

Disclosure

07/03/2017

CPE

ready

CVSS

5.9

EPSS

0.00197

Activities

Very Low

Sources

Want to know what is going to be exploited?

We predict KEV entries!