CVE-2016-6443

Published: Oct 27, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability. More Information: CSCva27038, CSCva28335. Known Affected Releases: 3.1(0.128), 1.2(400), 2.0(1.0.34A).

Affected (18)

Products: Cisco: Evolved Programmable Network Manager, Prime Infrastructure

Cisco

2 products

Evolved Programmable Network Manager

Prime Infrastructure

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Cisco Evolved Programmable Network Manager	Version 1.2
Cisco Evolved Programmable Network Manager	Version 2.0
Cisco Prime Infrastructure	Version 1.2.0.103
Cisco Prime Infrastructure	Version 1.2.1
Cisco Prime Infrastructure	Version 1.2
Cisco Prime Infrastructure	Version 1.3.0.20
Cisco Prime Infrastructure	Version 1.3
Cisco Prime Infrastructure	Version 1.4.0.45
Cisco Prime Infrastructure	Version 1.4.1
Cisco Prime Infrastructure	Version 1.4.2
Cisco Prime Infrastructure	Version 1.4
Cisco Prime Infrastructure	Version 2.0
Cisco Prime Infrastructure	Version 2.1.0
Cisco Prime Infrastructure	Version 2.2
Cisco Prime Infrastructure	Version 2.2(2)
Cisco Prime Infrastructure	Version 3.0
Cisco Prime Infrastructure	Version 3.1.1
Cisco Prime Infrastructure	Version 3.1