CVE-2016-1291

Published: Apr 6, 2016Modified: May 6, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP POST request, aka Bug ID CSCuw03192.

Affected (14)

Products: Cisco: Evolved Programmable Network Manager, Prime Infrastructure · Sun: Opensolaris

Cisco

2 products

Evolved Programmable Network Manager

Prime Infrastructure

Sun

1 product

Opensolaris

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Cisco Evolved Programmable Network Manager	Version 1.2.0
Cisco Prime Infrastructure	Version 1.2.0.103
Cisco Prime Infrastructure	Version 1.2.1
Cisco Prime Infrastructure	Version 1.2
Cisco Prime Infrastructure	Version 1.3.0.20
Cisco Prime Infrastructure	Version 1.3
Cisco Prime Infrastructure	Version 1.4.0.45
Cisco Prime Infrastructure	Version 1.4.1
Cisco Prime Infrastructure	Version 1.4.2
Cisco Prime Infrastructure	Version 1.4
Cisco Prime Infrastructure	Version 2.0
Cisco Prime Infrastructure	Version 2.1.0
Cisco Prime Infrastructure	Version 2.2
Sun Opensolaris	Version snv_124