CVE-2017-3884

Published: Apr 7, 2017Modified: May 13, 2026

6.5

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A vulnerability in the web interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to access sensitive data. The attacker does not need administrator credentials and could use this information to conduct additional reconnaissance attacks. More Information: CSCvc60031 (Fixed) CSCvc60041 (Fixed) CSCvc60095 (Open) CSCvc60102 (Open). Known Affected Releases: 2.2 2.2(3) 3.0 3.1(0.0) 3.1(0.128) 3.1(4.0) 3.1(5.0) 3.2(0.0) 2.0(4.0.45D).

Affected (9)

Products: Cisco: Evolved Programmable Network Manager, Prime Infrastructure

Cisco

2 products

Evolved Programmable Network Manager

Prime Infrastructure

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Cisco Evolved Programmable Network Manager	Version 2.0(4.0.45d)
Cisco Prime Infrastructure	Version 2.2
Cisco Prime Infrastructure	Version 2.2(3)
Cisco Prime Infrastructure	Version 3.0
Cisco Prime Infrastructure	Version 3.1
Cisco Prime Infrastructure	Version 3.1(0.128)
Cisco Prime Infrastructure	Version 3.1(4.0)
Cisco Prime Infrastructure	Version 3.1(5.0)
Cisco Prime Infrastructure	Version 3.2(0.0)