CVE-2017-6699

Published: Jul 4, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the web-based management interface of an affected device. More Information: CSCvc24616 CSCvc35363 CSCvc49574. Known Affected Releases: 3.1(1) 2.0(4.0.45B).

Affected (6)

Products: Cisco: Evolved Programmable Network Manager, Prime Infrastructure

Cisco

2 products

Evolved Programmable Network Manager

Prime Infrastructure

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Cisco Evolved Programmable Network Manager	Version 2.0.0
Cisco Evolved Programmable Network Manager	Version 2.0(4.0.45b)
Cisco Evolved Programmable Network Manager	Version 2.0(4.0.45d)
Cisco Prime Infrastructure	Version 3.1.1
Cisco Prime Infrastructure	Version 3.1
Cisco Prime Infrastructure	Version 3.1(0.128)