{ "data_version": "4.0", "data_type": "CVE", "data_format": "MITRE", "CVE_data_meta": { "ID": "CVE-2023-20205", "ASSIGNER": "psirt@cisco.com", "STATE": "PUBLIC" }, "description": { "description_data": [ { "lang": "eng", "value": "Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected device.\r\n\r These vulnerabilities are due to insufficient validation of user-supplied input. An attacker could exploit these vulnerabilities by persuading a user of an affected interface to view a page containing malicious HTML or script content. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, the attacker must have valid credentials to access the web-based management interface of the affected device." } ] }, "problemtype": { "problemtype_data": [ { "description": [ { "lang": "eng", "value": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "cweId": "CWE-79" } ] } ] }, "affects": { "vendor": { "vendor_data": [ { "vendor_name": "Cisco", "product": { "product_data": [ { "product_name": "Cisco Prime Infrastructure", "version": { "version_data": [ { "version_affected": "=", "version_value": "2.0.0" }, { "version_affected": "=", "version_value": "2.0.10" }, { "version_affected": "=", "version_value": "2.0.39" }, { "version_affected": "=", "version_value": "2.1.0" }, { "version_affected": "=", "version_value": "2.1.1" }, { "version_affected": "=", "version_value": "2.1.2" }, { "version_affected": "=", "version_value": "2.1.56" }, { "version_affected": "=", "version_value": "2.2.0" }, { "version_affected": "=", "version_value": "2.2.1" }, { "version_affected": "=", "version_value": "2.2.2" }, { "version_affected": "=", "version_value": "2.2.3" }, { "version_affected": "=", "version_value": "2.2.10" }, { "version_affected": "=", "version_value": "2.2.8" }, { "version_affected": "=", "version_value": "2.2.4" }, { "version_affected": "=", "version_value": "2.2.7" }, { "version_affected": "=", "version_value": "2.2.5" }, { "version_affected": "=", "version_value": "2.2.9" }, { "version_affected": "=", "version_value": "2.2.1 Update 01" }, { "version_affected": "=", "version_value": "2.2.2 Update 03" }, { "version_affected": "=", "version_value": "2.2.2 Update 04" }, { "version_affected": "=", "version_value": "2.2.3 Update 02" }, { "version_affected": "=", "version_value": "2.2.3 Update 03" }, { "version_affected": "=", "version_value": "2.2.3 Update 04" }, { "version_affected": "=", "version_value": "2.2.3 Update 05" }, { "version_affected": "=", "version_value": "2.2.3 Update 06" }, { "version_affected": "=", "version_value": "3.0.0" }, { "version_affected": "=", "version_value": "3.0.1" }, { "version_affected": "=", "version_value": "3.0.2" }, { "version_affected": "=", "version_value": "3.0.3" }, { "version_affected": "=", "version_value": "3.0.4" }, { "version_affected": "=", "version_value": "3.0.6" }, { "version_affected": "=", "version_value": "3.0.5" }, { "version_affected": "=", "version_value": "3.0.7" }, { "version_affected": "=", "version_value": "3.1.0" }, { "version_affected": "=", "version_value": "3.1.1" }, { "version_affected": "=", "version_value": "3.1.7" }, { "version_affected": "=", "version_value": "3.1.5" }, { "version_affected": "=", "version_value": "3.1.2" }, { "version_affected": "=", "version_value": "3.1.3" }, { "version_affected": "=", "version_value": "3.1.4" }, { "version_affected": "=", "version_value": "3.1.6" }, { "version_affected": "=", "version_value": "3.2.2" }, { "version_affected": "=", "version_value": "3.2.0-FIPS" }, { "version_affected": "=", "version_value": "3.2.1" }, { "version_affected": "=", "version_value": "3.3.0" }, { "version_affected": "=", "version_value": "3.3.1" }, { "version_affected": "=", "version_value": "3.3.0 Update 01" }, { "version_affected": "=", "version_value": "3.4.0" }, { "version_affected": "=", "version_value": "3.4.1" }, { "version_affected": "=", "version_value": "3.4.2" }, { "version_affected": "=", "version_value": "3.4.1 Update 01" }, { "version_affected": "=", "version_value": "3.4.1 Update 02" }, { "version_affected": "=", "version_value": "3.4.2 Update 01" }, { "version_affected": "=", "version_value": "3.5.0" }, { "version_affected": "=", "version_value": "3.5.1" }, { "version_affected": "=", "version_value": "3.5.0 Update 01" }, { "version_affected": "=", "version_value": "3.5.0 Update 02" }, { "version_affected": "=", "version_value": "3.5.0 Update 03" }, { "version_affected": "=", "version_value": "3.5.1 Update 01" }, { "version_affected": "=", "version_value": "3.5.1 Update 02" }, { "version_affected": "=", "version_value": "3.5.1 Update 03" }, { "version_affected": "=", "version_value": "3.6.0" }, { "version_affected": "=", "version_value": "3.6.0 Update 01" }, { "version_affected": "=", "version_value": "3.6.0 Update 02" }, { "version_affected": "=", "version_value": "3.6.0 Update 03" }, { "version_affected": "=", "version_value": "3.6.0 Update 04" }, { "version_affected": "=", "version_value": "2.1" }, { "version_affected": "=", "version_value": "2.2" }, { "version_affected": "=", "version_value": "3.2" }, { "version_affected": "=", "version_value": "3.4_DP1" }, { "version_affected": "=", "version_value": "3.4_DP3" }, { "version_affected": "=", "version_value": "3.4_DP2" }, { "version_affected": "=", "version_value": "3.5_DP1" }, { "version_affected": "=", "version_value": "3.4_DP7" }, { "version_affected": "=", "version_value": "3.4_DP10" }, { "version_affected": "=", "version_value": "3.4_DP5" }, { "version_affected": "=", "version_value": "3.1_DP15" }, { "version_affected": "=", "version_value": "3.4_DP11" }, { "version_affected": "=", "version_value": "3.4_DP8" }, { "version_affected": "=", "version_value": "3.7_DP1" }, { "version_affected": "=", "version_value": "3.3_DP4" }, { "version_affected": "=", "version_value": "3.10_DP1" }, { "version_affected": "=", "version_value": "3.8_DP1" }, { "version_affected": "=", "version_value": "3.7_DP2" }, { "version_affected": "=", "version_value": "3.6_DP1" }, { "version_affected": "=", "version_value": "3.1_DP16" }, { "version_affected": "=", "version_value": "3.5_DP4" }, { "version_affected": "=", "version_value": "3.3_DP3" }, { "version_affected": "=", "version_value": "3.2_DP2" }, { "version_affected": "=", "version_value": "3.4_DP4" }, { "version_affected": "=", "version_value": "3.1_DP14" }, { "version_affected": "=", "version_value": "3.1_DP6" }, { "version_affected": "=", "version_value": "3.1_DP9" }, { "version_affected": "=", "version_value": "3.4_DP6" }, { "version_affected": "=", "version_value": "3.2_DP3" }, { "version_affected": "=", "version_value": "3.4_DP9" }, { "version_affected": "=", "version_value": "3.3_DP2" }, { "version_affected": "=", "version_value": "3.2_DP1" }, { "version_affected": "=", "version_value": "3.1_DP10" }, { "version_affected": "=", "version_value": "3.9_DP1" }, { "version_affected": "=", "version_value": "3.3_DP1" }, { "version_affected": "=", "version_value": "3.1_DP13" }, { "version_affected": "=", "version_value": "3.5_DP2" }, { "version_affected": "=", "version_value": "3.1_DP12" }, { "version_affected": "=", "version_value": "3.1_DP4" }, { "version_affected": "=", "version_value": "3.5_DP3" }, { "version_affected": "=", "version_value": "3.1_DP8" }, { "version_affected": "=", "version_value": "3.1_DP7" }, { "version_affected": "=", "version_value": "3.2_DP4" }, { "version_affected": "=", "version_value": "3.1_DP11" }, { "version_affected": "=", "version_value": "3.1_DP5" }, { "version_affected": "=", "version_value": "3.7.0" }, { "version_affected": "=", "version_value": "3.7.1" }, { "version_affected": "=", "version_value": "3.7.1 Update 04" }, { "version_affected": "=", "version_value": "3.7.1 Update 06" }, { "version_affected": "=", "version_value": "3.7.1 Update 07" }, { "version_affected": "=", "version_value": "3.7.1 Update 03" }, { "version_affected": "=", "version_value": "3.7.0 Update 03" }, { "version_affected": "=", "version_value": "3.7.1 Update 01" }, { "version_affected": "=", "version_value": "3.7.1 Update 02" }, { "version_affected": "=", "version_value": "3.7.1 Update 05" }, { "version_affected": "=", "version_value": "3.8.0" }, { "version_affected": "=", "version_value": "3.8.1" }, { "version_affected": "=", "version_value": "3.8.1 Update 02" }, { "version_affected": "=", "version_value": "3.8.1 Update 04" }, { "version_affected": "=", "version_value": "3.8.1 Update 01" }, { "version_affected": "=", "version_value": "3.8.1 Update 03" }, { "version_affected": "=", "version_value": "3.8.0 Update 01" }, { "version_affected": "=", "version_value": "3.8.0 Update 02" }, { "version_affected": "=", "version_value": "3.9.0" }, { "version_affected": "=", "version_value": "3.9.1" }, { "version_affected": "=", "version_value": "3.9.1 Update 02" }, { "version_affected": "=", "version_value": "3.9.1 Update 03" }, { "version_affected": "=", "version_value": "3.9.1 Update 01" }, { "version_affected": "=", "version_value": "3.9.1 Update 04" }, { "version_affected": "=", "version_value": "3.9.0 Update 01" }, { "version_affected": "=", "version_value": "3.10.0" }, { "version_affected": "=", "version_value": "3.10.3" }, { "version_affected": "=", "version_value": "3.10.1" }, { "version_affected": "=", "version_value": "3.10.2" }, { "version_affected": "=", "version_value": "3.10 Update 01" } ] } }, { "product_name": "Cisco Evolved Programmable Network Manager (EPNM)", "version": { "version_data": [ { "version_affected": "=", "version_value": "1.2.6" }, { "version_affected": "=", "version_value": "1.2.2" }, { "version_affected": "=", "version_value": "1.2.3" }, { "version_affected": "=", "version_value": "1.2.5" }, { "version_affected": "=", "version_value": "1.2.1.2" }, { "version_affected": "=", "version_value": "1.2.4" }, { "version_affected": "=", "version_value": "1.2.7" }, { "version_affected": "=", "version_value": "1.2" }, { "version_affected": "=", "version_value": "1.2.2.4" }, { "version_affected": "=", "version_value": "1.2.4.2" }, { "version_affected": "=", "version_value": "2.0.2" }, { "version_affected": "=", "version_value": "2.0.4" }, { "version_affected": "=", "version_value": "2.0.3" }, { "version_affected": "=", "version_value": "2.0.1" }, { "version_affected": "=", "version_value": "2.0" }, { "version_affected": "=", "version_value": "2.0.1.1" }, { "version_affected": "=", "version_value": "2.0.2.1" }, { "version_affected": "=", "version_value": "2.0.4.1" }, { "version_affected": "=", "version_value": "2.0.4.2" }, { "version_affected": "=", "version_value": "2.1.2" }, { "version_affected": "=", "version_value": "2.1.3" }, { "version_affected": "=", "version_value": "2.1.1" }, { "version_affected": "=", "version_value": "2.1" }, { "version_affected": "=", "version_value": "2.1.1.1" }, { "version_affected": "=", "version_value": "2.1.1.3" }, { "version_affected": "=", "version_value": "2.1.1.4" }, { "version_affected": "=", "version_value": "2.1.2.2" }, { "version_affected": "=", "version_value": "2.1.2.3" }, { "version_affected": "=", "version_value": "2.1.3.2" }, { "version_affected": "=", "version_value": "2.1.3.3" }, { "version_affected": "=", "version_value": "2.1.3.4" }, { "version_affected": "=", "version_value": "2.1.3.5" }, { "version_affected": "=", "version_value": "2.1.4" }, { "version_affected": "=", "version_value": "2.2.1" }, { "version_affected": "=", "version_value": "2.2" }, { "version_affected": "=", "version_value": "2.2.1.1" }, { "version_affected": "=", "version_value": "2.2.1.2" }, { "version_affected": "=", "version_value": "2.2.1.3" }, { "version_affected": "=", "version_value": "2.2.1.4" }, { "version_affected": "=", "version_value": "2.2.3" }, { "version_affected": "=", "version_value": "2.2.4" }, { "version_affected": "=", "version_value": "2.2.5" }, { "version_affected": "=", "version_value": "3.0.1" }, { "version_affected": "=", "version_value": "3.0.2" }, { "version_affected": "=", "version_value": "3.0.3" }, { "version_affected": "=", "version_value": "3.0" }, { "version_affected": "=", "version_value": "3.1.1" }, { "version_affected": "=", "version_value": "3.1.2" }, { "version_affected": "=", "version_value": "3.1.3" }, { "version_affected": "=", "version_value": "3.1" }, { "version_affected": "=", "version_value": "4.1.1" }, { "version_affected": "=", "version_value": "4.1" }, { "version_affected": "=", "version_value": "4.1.1.1" }, { "version_affected": "=", "version_value": "4.1.1.2" }, { "version_affected": "=", "version_value": "4.0.3" }, { "version_affected": "=", "version_value": "4.0.1" }, { "version_affected": "=", "version_value": "4.0.2" }, { "version_affected": "=", "version_value": "4.0" }, { "version_affected": "=", "version_value": "4.0.3.1" }, { "version_affected": "=", "version_value": "5.0.1" }, { "version_affected": "=", "version_value": "5.0.2" }, { "version_affected": "=", "version_value": "5.0.2.5" }, { "version_affected": "=", "version_value": "5.0.2.3" }, { "version_affected": "=", "version_value": "5.0.2.4" }, { "version_affected": "=", "version_value": "5.0.2.1" }, { "version_affected": "=", "version_value": "5.0.2.2" }, { "version_affected": "=", "version_value": "5.0" }, { "version_affected": "=", "version_value": "5.1.1" }, { "version_affected": "=", "version_value": "5.1.2" }, { "version_affected": "=", "version_value": "5.1.3" }, { "version_affected": "=", "version_value": "5.1.4" }, { "version_affected": "=", "version_value": "5.1.4.2" }, { "version_affected": "=", "version_value": "5.1.4.1" }, { "version_affected": "=", "version_value": "5.1.4.3" }, { "version_affected": "=", "version_value": "5.1" }, { "version_affected": "=", "version_value": "5.1.3.1" }, { "version_affected": "=", "version_value": "5.1.3.2" }, { "version_affected": "=", "version_value": "7.0.0" }, { "version_affected": "=", "version_value": "6.0.0" }, { "version_affected": "=", "version_value": "6.0.2" }, { "version_affected": "=", "version_value": "6.0.1" }, { "version_affected": "=", "version_value": "6.0.2.1" }, { "version_affected": "=", "version_value": "6.0.1.1" }, { "version_affected": "=", "version_value": "6.0.3" }, { "version_affected": "=", "version_value": "6.1.1" }, { "version_affected": "=", "version_value": "6.1.1.1" }, { "version_affected": "=", "version_value": "6.1" } ] } } ] } } ] } }, "references": { "reference_data": [ { "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-BFjSRJP5", "refsource": "MISC", "name": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-BFjSRJP5" } ] }, "source": { "advisory": "cisco-sa-pi-epnm-BFjSRJP5", "discovery": "INTERNAL", "defects": [ "CSCwf29121", "CSCwe77122" ] }, "exploit": [ { "lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory." } ] }