CVE-2023-20271 (GCVE-0-2023-20271)
Vulnerability from cvelistv5 – Published: 2024-01-17 16:56 – Updated: 2025-06-17 21:19
VLAI?
Summary
A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain and modify sensitive information that is stored in the underlying database.
Severity ?
6.5 (Medium)
CWE
- CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Assigner
References
Impacted products
| Vendor | Product | Version | |||||||
|---|---|---|---|---|---|---|---|---|---|
| Cisco | Cisco Prime Infrastructure |
Affected:
2.0.0
Affected: 2.0.10 Affected: 2.0.39 Affected: 2.1.0 Affected: 2.1.1 Affected: 2.1.2 Affected: 2.1.56 Affected: 2.2.0 Affected: 2.2.1 Affected: 2.2.2 Affected: 2.2.3 Affected: 2.2.10 Affected: 2.2.8 Affected: 2.2.4 Affected: 2.2.7 Affected: 2.2.5 Affected: 2.2.9 Affected: 2.2.1 Update 01 Affected: 2.2.2 Update 03 Affected: 2.2.2 Update 04 Affected: 2.2.3 Update 02 Affected: 2.2.3 Update 03 Affected: 2.2.3 Update 04 Affected: 2.2.3 Update 05 Affected: 2.2.3 Update 06 Affected: 3.0.0 Affected: 3.0.1 Affected: 3.0.2 Affected: 3.0.3 Affected: 3.0.4 Affected: 3.0.6 Affected: 3.0.5 Affected: 3.0.7 Affected: 3.1.0 Affected: 3.1.1 Affected: 3.1.7 Affected: 3.1.5 Affected: 3.1.2 Affected: 3.1.3 Affected: 3.1.4 Affected: 3.1.6 Affected: 3.2.2 Affected: 3.2.0-FIPS Affected: 3.2.1 Affected: 3.3.0 Affected: 3.3.1 Affected: 3.3.0 Update 01 Affected: 3.4.0 Affected: 3.4.1 Affected: 3.4.2 Affected: 3.4.1 Update 01 Affected: 3.4.1 Update 02 Affected: 3.4.2 Update 01 Affected: 3.5.0 Affected: 3.5.1 Affected: 3.5.0 Update 01 Affected: 3.5.0 Update 02 Affected: 3.5.0 Update 03 Affected: 3.5.1 Update 01 Affected: 3.5.1 Update 02 Affected: 3.5.1 Update 03 Affected: 3.6.0 Affected: 3.6.0 Update 01 Affected: 3.6.0 Update 02 Affected: 3.6.0 Update 03 Affected: 3.6.0 Update 04 Affected: 2.1 Affected: 2.2 Affected: 3.2 Affected: 3.4_DP1 Affected: 3.4_DP3 Affected: 3.4_DP2 Affected: 3.5_DP1 Affected: 3.4_DP7 Affected: 3.4_DP10 Affected: 3.4_DP5 Affected: 3.1_DP15 Affected: 3.4_DP11 Affected: 3.4_DP8 Affected: 3.7_DP1 Affected: 3.3_DP4 Affected: 3.10_DP1 Affected: 3.8_DP1 Affected: 3.7_DP2 Affected: 3.6_DP1 Affected: 3.1_DP16 Affected: 3.5_DP4 Affected: 3.3_DP3 Affected: 3.2_DP2 Affected: 3.4_DP4 Affected: 3.1_DP14 Affected: 3.1_DP6 Affected: 3.1_DP9 Affected: 3.4_DP6 Affected: 3.2_DP3 Affected: 3.4_DP9 Affected: 3.3_DP2 Affected: 3.2_DP1 Affected: 3.1_DP10 Affected: 3.9_DP1 Affected: 3.3_DP1 Affected: 3.1_DP13 Affected: 3.5_DP2 Affected: 3.1_DP12 Affected: 3.1_DP4 Affected: 3.5_DP3 Affected: 3.1_DP8 Affected: 3.1_DP7 Affected: 3.2_DP4 Affected: 3.1_DP11 Affected: 3.1_DP5 Affected: 3.7.0 Affected: 3.7.1 Affected: 3.7.1 Update 04 Affected: 3.7.1 Update 06 Affected: 3.7.1 Update 07 Affected: 3.7.1 Update 03 Affected: 3.7.0 Update 03 Affected: 3.7.1 Update 01 Affected: 3.7.1 Update 02 Affected: 3.7.1 Update 05 Affected: 3.8.0 Affected: 3.8.1 Affected: 3.8.1 Update 02 Affected: 3.8.1 Update 04 Affected: 3.8.1 Update 01 Affected: 3.8.1 Update 03 Affected: 3.8.0 Update 01 Affected: 3.8.0 Update 02 Affected: 3.9.0 Affected: 3.9.1 Affected: 3.9.1 Update 02 Affected: 3.9.1 Update 03 Affected: 3.9.1 Update 01 Affected: 3.9.1 Update 04 Affected: 3.9.0 Update 01 Affected: 3.10.0 Affected: 3.10.3 Affected: 3.10.1 Affected: 3.10.2 Affected: 3.10 Update 01 Affected: 3.10.4 Affected: 3.10.4 Update 01 |
|||||||
|
|||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T09:05:36.908Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "cisco-sa-pi-epnm-wkZJeyeq",
"tags": [
"x_transferred"
],
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-wkZJeyeq"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-20271",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-01-17T18:21:55.320679Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-06-17T21:19:17.301Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "Cisco Prime Infrastructure",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "2.0.0"
},
{
"status": "affected",
"version": "2.0.10"
},
{
"status": "affected",
"version": "2.0.39"
},
{
"status": "affected",
"version": "2.1.0"
},
{
"status": "affected",
"version": "2.1.1"
},
{
"status": "affected",
"version": "2.1.2"
},
{
"status": "affected",
"version": "2.1.56"
},
{
"status": "affected",
"version": "2.2.0"
},
{
"status": "affected",
"version": "2.2.1"
},
{
"status": "affected",
"version": "2.2.2"
},
{
"status": "affected",
"version": "2.2.3"
},
{
"status": "affected",
"version": "2.2.10"
},
{
"status": "affected",
"version": "2.2.8"
},
{
"status": "affected",
"version": "2.2.4"
},
{
"status": "affected",
"version": "2.2.7"
},
{
"status": "affected",
"version": "2.2.5"
},
{
"status": "affected",
"version": "2.2.9"
},
{
"status": "affected",
"version": "2.2.1 Update 01"
},
{
"status": "affected",
"version": "2.2.2 Update 03"
},
{
"status": "affected",
"version": "2.2.2 Update 04"
},
{
"status": "affected",
"version": "2.2.3 Update 02"
},
{
"status": "affected",
"version": "2.2.3 Update 03"
},
{
"status": "affected",
"version": "2.2.3 Update 04"
},
{
"status": "affected",
"version": "2.2.3 Update 05"
},
{
"status": "affected",
"version": "2.2.3 Update 06"
},
{
"status": "affected",
"version": "3.0.0"
},
{
"status": "affected",
"version": "3.0.1"
},
{
"status": "affected",
"version": "3.0.2"
},
{
"status": "affected",
"version": "3.0.3"
},
{
"status": "affected",
"version": "3.0.4"
},
{
"status": "affected",
"version": "3.0.6"
},
{
"status": "affected",
"version": "3.0.5"
},
{
"status": "affected",
"version": "3.0.7"
},
{
"status": "affected",
"version": "3.1.0"
},
{
"status": "affected",
"version": "3.1.1"
},
{
"status": "affected",
"version": "3.1.7"
},
{
"status": "affected",
"version": "3.1.5"
},
{
"status": "affected",
"version": "3.1.2"
},
{
"status": "affected",
"version": "3.1.3"
},
{
"status": "affected",
"version": "3.1.4"
},
{
"status": "affected",
"version": "3.1.6"
},
{
"status": "affected",
"version": "3.2.2"
},
{
"status": "affected",
"version": "3.2.0-FIPS"
},
{
"status": "affected",
"version": "3.2.1"
},
{
"status": "affected",
"version": "3.3.0"
},
{
"status": "affected",
"version": "3.3.1"
},
{
"status": "affected",
"version": "3.3.0 Update 01"
},
{
"status": "affected",
"version": "3.4.0"
},
{
"status": "affected",
"version": "3.4.1"
},
{
"status": "affected",
"version": "3.4.2"
},
{
"status": "affected",
"version": "3.4.1 Update 01"
},
{
"status": "affected",
"version": "3.4.1 Update 02"
},
{
"status": "affected",
"version": "3.4.2 Update 01"
},
{
"status": "affected",
"version": "3.5.0"
},
{
"status": "affected",
"version": "3.5.1"
},
{
"status": "affected",
"version": "3.5.0 Update 01"
},
{
"status": "affected",
"version": "3.5.0 Update 02"
},
{
"status": "affected",
"version": "3.5.0 Update 03"
},
{
"status": "affected",
"version": "3.5.1 Update 01"
},
{
"status": "affected",
"version": "3.5.1 Update 02"
},
{
"status": "affected",
"version": "3.5.1 Update 03"
},
{
"status": "affected",
"version": "3.6.0"
},
{
"status": "affected",
"version": "3.6.0 Update 01"
},
{
"status": "affected",
"version": "3.6.0 Update 02"
},
{
"status": "affected",
"version": "3.6.0 Update 03"
},
{
"status": "affected",
"version": "3.6.0 Update 04"
},
{
"status": "affected",
"version": "2.1"
},
{
"status": "affected",
"version": "2.2"
},
{
"status": "affected",
"version": "3.2"
},
{
"status": "affected",
"version": "3.4_DP1"
},
{
"status": "affected",
"version": "3.4_DP3"
},
{
"status": "affected",
"version": "3.4_DP2"
},
{
"status": "affected",
"version": "3.5_DP1"
},
{
"status": "affected",
"version": "3.4_DP7"
},
{
"status": "affected",
"version": "3.4_DP10"
},
{
"status": "affected",
"version": "3.4_DP5"
},
{
"status": "affected",
"version": "3.1_DP15"
},
{
"status": "affected",
"version": "3.4_DP11"
},
{
"status": "affected",
"version": "3.4_DP8"
},
{
"status": "affected",
"version": "3.7_DP1"
},
{
"status": "affected",
"version": "3.3_DP4"
},
{
"status": "affected",
"version": "3.10_DP1"
},
{
"status": "affected",
"version": "3.8_DP1"
},
{
"status": "affected",
"version": "3.7_DP2"
},
{
"status": "affected",
"version": "3.6_DP1"
},
{
"status": "affected",
"version": "3.1_DP16"
},
{
"status": "affected",
"version": "3.5_DP4"
},
{
"status": "affected",
"version": "3.3_DP3"
},
{
"status": "affected",
"version": "3.2_DP2"
},
{
"status": "affected",
"version": "3.4_DP4"
},
{
"status": "affected",
"version": "3.1_DP14"
},
{
"status": "affected",
"version": "3.1_DP6"
},
{
"status": "affected",
"version": "3.1_DP9"
},
{
"status": "affected",
"version": "3.4_DP6"
},
{
"status": "affected",
"version": "3.2_DP3"
},
{
"status": "affected",
"version": "3.4_DP9"
},
{
"status": "affected",
"version": "3.3_DP2"
},
{
"status": "affected",
"version": "3.2_DP1"
},
{
"status": "affected",
"version": "3.1_DP10"
},
{
"status": "affected",
"version": "3.9_DP1"
},
{
"status": "affected",
"version": "3.3_DP1"
},
{
"status": "affected",
"version": "3.1_DP13"
},
{
"status": "affected",
"version": "3.5_DP2"
},
{
"status": "affected",
"version": "3.1_DP12"
},
{
"status": "affected",
"version": "3.1_DP4"
},
{
"status": "affected",
"version": "3.5_DP3"
},
{
"status": "affected",
"version": "3.1_DP8"
},
{
"status": "affected",
"version": "3.1_DP7"
},
{
"status": "affected",
"version": "3.2_DP4"
},
{
"status": "affected",
"version": "3.1_DP11"
},
{
"status": "affected",
"version": "3.1_DP5"
},
{
"status": "affected",
"version": "3.7.0"
},
{
"status": "affected",
"version": "3.7.1"
},
{
"status": "affected",
"version": "3.7.1 Update 04"
},
{
"status": "affected",
"version": "3.7.1 Update 06"
},
{
"status": "affected",
"version": "3.7.1 Update 07"
},
{
"status": "affected",
"version": "3.7.1 Update 03"
},
{
"status": "affected",
"version": "3.7.0 Update 03"
},
{
"status": "affected",
"version": "3.7.1 Update 01"
},
{
"status": "affected",
"version": "3.7.1 Update 02"
},
{
"status": "affected",
"version": "3.7.1 Update 05"
},
{
"status": "affected",
"version": "3.8.0"
},
{
"status": "affected",
"version": "3.8.1"
},
{
"status": "affected",
"version": "3.8.1 Update 02"
},
{
"status": "affected",
"version": "3.8.1 Update 04"
},
{
"status": "affected",
"version": "3.8.1 Update 01"
},
{
"status": "affected",
"version": "3.8.1 Update 03"
},
{
"status": "affected",
"version": "3.8.0 Update 01"
},
{
"status": "affected",
"version": "3.8.0 Update 02"
},
{
"status": "affected",
"version": "3.9.0"
},
{
"status": "affected",
"version": "3.9.1"
},
{
"status": "affected",
"version": "3.9.1 Update 02"
},
{
"status": "affected",
"version": "3.9.1 Update 03"
},
{
"status": "affected",
"version": "3.9.1 Update 01"
},
{
"status": "affected",
"version": "3.9.1 Update 04"
},
{
"status": "affected",
"version": "3.9.0 Update 01"
},
{
"status": "affected",
"version": "3.10.0"
},
{
"status": "affected",
"version": "3.10.3"
},
{
"status": "affected",
"version": "3.10.1"
},
{
"status": "affected",
"version": "3.10.2"
},
{
"status": "affected",
"version": "3.10 Update 01"
},
{
"status": "affected",
"version": "3.10.4"
},
{
"status": "affected",
"version": "3.10.4 Update 01"
}
]
},
{
"product": "Cisco Evolved Programmable Network Manager (EPNM)",
"vendor": "Cisco",
"versions": [
{
"status": "affected",
"version": "1.2.6"
},
{
"status": "affected",
"version": "1.2.2"
},
{
"status": "affected",
"version": "1.2.3"
},
{
"status": "affected",
"version": "1.2.5"
},
{
"status": "affected",
"version": "1.2.1.2"
},
{
"status": "affected",
"version": "1.2.4"
},
{
"status": "affected",
"version": "1.2.7"
},
{
"status": "affected",
"version": "1.2"
},
{
"status": "affected",
"version": "1.2.2.4"
},
{
"status": "affected",
"version": "1.2.4.2"
},
{
"status": "affected",
"version": "2.0.2"
},
{
"status": "affected",
"version": "2.0.4"
},
{
"status": "affected",
"version": "2.0.3"
},
{
"status": "affected",
"version": "2.0.1"
},
{
"status": "affected",
"version": "2.0"
},
{
"status": "affected",
"version": "2.0.1.1"
},
{
"status": "affected",
"version": "2.0.2.1"
},
{
"status": "affected",
"version": "2.0.4.1"
},
{
"status": "affected",
"version": "2.0.4.2"
},
{
"status": "affected",
"version": "2.1.2"
},
{
"status": "affected",
"version": "2.1.3"
},
{
"status": "affected",
"version": "2.1.1"
},
{
"status": "affected",
"version": "2.1"
},
{
"status": "affected",
"version": "2.1.1.1"
},
{
"status": "affected",
"version": "2.1.1.3"
},
{
"status": "affected",
"version": "2.1.1.4"
},
{
"status": "affected",
"version": "2.1.2.2"
},
{
"status": "affected",
"version": "2.1.2.3"
},
{
"status": "affected",
"version": "2.1.3.2"
},
{
"status": "affected",
"version": "2.1.3.3"
},
{
"status": "affected",
"version": "2.1.3.4"
},
{
"status": "affected",
"version": "2.1.3.5"
},
{
"status": "affected",
"version": "2.1.4"
},
{
"status": "affected",
"version": "2.2.1"
},
{
"status": "affected",
"version": "2.2"
},
{
"status": "affected",
"version": "2.2.1.1"
},
{
"status": "affected",
"version": "2.2.1.2"
},
{
"status": "affected",
"version": "2.2.1.3"
},
{
"status": "affected",
"version": "2.2.1.4"
},
{
"status": "affected",
"version": "2.2.3"
},
{
"status": "affected",
"version": "2.2.4"
},
{
"status": "affected",
"version": "2.2.5"
},
{
"status": "affected",
"version": "3.0.1"
},
{
"status": "affected",
"version": "3.0.2"
},
{
"status": "affected",
"version": "3.0.3"
},
{
"status": "affected",
"version": "3.0"
},
{
"status": "affected",
"version": "3.1.1"
},
{
"status": "affected",
"version": "3.1.2"
},
{
"status": "affected",
"version": "3.1.3"
},
{
"status": "affected",
"version": "3.1"
},
{
"status": "affected",
"version": "4.1.1"
},
{
"status": "affected",
"version": "4.1"
},
{
"status": "affected",
"version": "4.1.1.1"
},
{
"status": "affected",
"version": "4.1.1.2"
},
{
"status": "affected",
"version": "4.0.3"
},
{
"status": "affected",
"version": "4.0.1"
},
{
"status": "affected",
"version": "4.0.2"
},
{
"status": "affected",
"version": "4.0"
},
{
"status": "affected",
"version": "4.0.3.1"
},
{
"status": "affected",
"version": "5.0.1"
},
{
"status": "affected",
"version": "5.0.2"
},
{
"status": "affected",
"version": "5.0.2.5"
},
{
"status": "affected",
"version": "5.0.2.3"
},
{
"status": "affected",
"version": "5.0.2.4"
},
{
"status": "affected",
"version": "5.0.2.1"
},
{
"status": "affected",
"version": "5.0.2.2"
},
{
"status": "affected",
"version": "5.0"
},
{
"status": "affected",
"version": "5.0.2.6"
},
{
"status": "affected",
"version": "5.1.1"
},
{
"status": "affected",
"version": "5.1.2"
},
{
"status": "affected",
"version": "5.1.3"
},
{
"status": "affected",
"version": "5.1.4"
},
{
"status": "affected",
"version": "5.1.4.2"
},
{
"status": "affected",
"version": "5.1.4.1"
},
{
"status": "affected",
"version": "5.1.4.3"
},
{
"status": "affected",
"version": "5.1"
},
{
"status": "affected",
"version": "5.1.3.1"
},
{
"status": "affected",
"version": "5.1.3.2"
},
{
"status": "affected",
"version": "5.1.4.4"
},
{
"status": "affected",
"version": "7.0.0"
},
{
"status": "affected",
"version": "6.0.0"
},
{
"status": "affected",
"version": "6.0.2"
},
{
"status": "affected",
"version": "6.0.1"
},
{
"status": "affected",
"version": "6.0.2.1"
},
{
"status": "affected",
"version": "6.0.1.1"
},
{
"status": "affected",
"version": "6.0.3"
},
{
"status": "affected",
"version": "6.0.3.1"
},
{
"status": "affected",
"version": "6.1.1"
},
{
"status": "affected",
"version": "6.1.1.1"
},
{
"status": "affected",
"version": "6.1"
},
{
"status": "affected",
"version": "6.1.2"
},
{
"status": "affected",
"version": "6.1.1.2.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain and modify sensitive information that is stored in the underlying database."
}
],
"exploits": [
{
"lang": "en",
"value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"format": "cvssV3_1"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-89",
"description": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
"lang": "en",
"type": "cwe"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-02-02T15:42:33.023Z",
"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"shortName": "cisco"
},
"references": [
{
"name": "cisco-sa-pi-epnm-wkZJeyeq",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-wkZJeyeq"
}
],
"source": {
"advisory": "cisco-sa-pi-epnm-wkZJeyeq",
"defects": [
"CSCwf81862",
"CSCwf83557"
],
"discovery": "EXTERNAL"
}
}
},
"cveMetadata": {
"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
"assignerShortName": "cisco",
"cveId": "CVE-2023-20271",
"datePublished": "2024-01-17T16:56:25.553Z",
"dateReserved": "2022-10-27T18:47:50.373Z",
"dateUpdated": "2025-06-17T21:19:17.301Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"7.1.1\", \"matchCriteriaId\": \"2AEC9133-19C1-4CC5-A1F4-187D2EF36B40\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"3.10.4\", \"matchCriteriaId\": \"5CC17E6B-D7AB-40D7-AEC5-F5B555AC4D7F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:prime_infrastructure:3.10.4:-:*:*:*:*:*:*\", \"matchCriteriaId\": \"8E76E81B-A235-4A19-AAE4-319CB7840673\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:cisco:prime_infrastructure:3.10.4:update_1:*:*:*:*:*:*\", \"matchCriteriaId\": \"774C7557-0D83-40A9-815C-4E32419A3B6F\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain and modify sensitive information that is stored in the underlying database.\"}, {\"lang\": \"es\", \"value\": \"Una vulnerabilidad en la interfaz de administraci\\u00f3n basada en web de Cisco Prime Infrastructure y Cisco Evolved Programmable Network Manager (EPNM) podr\\u00eda permitir que un atacante remoto autenticado realice ataques de inyecci\\u00f3n SQL en un sistema afectado. Esta vulnerabilidad se debe a una validaci\\u00f3n incorrecta de los par\\u00e1metros enviados por el usuario. Un atacante podr\\u00eda aprovechar esta vulnerabilidad autentic\\u00e1ndose en la aplicaci\\u00f3n y enviando solicitudes maliciosas a un sistema afectado. Una explotaci\\u00f3n exitosa podr\\u00eda permitir al atacante obtener y modificar informaci\\u00f3n confidencial almacenada en la base de datos subyacente.\"}]",
"id": "CVE-2023-20271",
"lastModified": "2024-11-21T07:41:02.800",
"metrics": "{\"cvssMetricV31\": [{\"source\": \"ykramarz@cisco.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 6.5, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 3.6}]}",
"published": "2024-01-17T17:15:10.540",
"references": "[{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-wkZJeyeq\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-wkZJeyeq\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
"sourceIdentifier": "ykramarz@cisco.com",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"ykramarz@cisco.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-89\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-89\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2023-20271\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2024-01-17T17:15:10.540\",\"lastModified\":\"2024-11-21T07:41:02.800\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain and modify sensitive information that is stored in the underlying database.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en la interfaz de administraci\u00f3n basada en web de Cisco Prime Infrastructure y Cisco Evolved Programmable Network Manager (EPNM) podr\u00eda permitir que un atacante remoto autenticado realice ataques de inyecci\u00f3n SQL en un sistema afectado. Esta vulnerabilidad se debe a una validaci\u00f3n incorrecta de los par\u00e1metros enviados por el usuario. Un atacante podr\u00eda aprovechar esta vulnerabilidad autentic\u00e1ndose en la aplicaci\u00f3n y enviando solicitudes maliciosas a un sistema afectado. Una explotaci\u00f3n exitosa podr\u00eda permitir al atacante obtener y modificar informaci\u00f3n confidencial almacenada en la base de datos subyacente.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-89\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-89\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"7.1.1\",\"matchCriteriaId\":\"2AEC9133-19C1-4CC5-A1F4-187D2EF36B40\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"3.10.4\",\"matchCriteriaId\":\"5CC17E6B-D7AB-40D7-AEC5-F5B555AC4D7F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:prime_infrastructure:3.10.4:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"8E76E81B-A235-4A19-AAE4-319CB7840673\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:cisco:prime_infrastructure:3.10.4:update_1:*:*:*:*:*:*\",\"matchCriteriaId\":\"774C7557-0D83-40A9-815C-4E32419A3B6F\"}]}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-wkZJeyeq\",\"source\":\"psirt@cisco.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-wkZJeyeq\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-wkZJeyeq\", \"name\": \"cisco-sa-pi-epnm-wkZJeyeq\", \"tags\": [\"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-02T09:05:36.908Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-20271\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-01-17T18:21:55.320679Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-06-17T21:12:50.782Z\"}}], \"cna\": {\"source\": {\"defects\": [\"CSCwf81862\", \"CSCwf83557\"], \"advisory\": \"cisco-sa-pi-epnm-wkZJeyeq\", \"discovery\": \"EXTERNAL\"}, \"metrics\": [{\"format\": \"cvssV3_1\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"NONE\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"Cisco Prime Infrastructure\", \"versions\": [{\"status\": \"affected\", \"version\": \"2.0.0\"}, {\"status\": \"affected\", \"version\": \"2.0.10\"}, {\"status\": \"affected\", \"version\": \"2.0.39\"}, {\"status\": \"affected\", \"version\": \"2.1.0\"}, {\"status\": \"affected\", \"version\": \"2.1.1\"}, {\"status\": \"affected\", \"version\": \"2.1.2\"}, {\"status\": \"affected\", \"version\": \"2.1.56\"}, {\"status\": \"affected\", \"version\": \"2.2.0\"}, {\"status\": \"affected\", \"version\": \"2.2.1\"}, {\"status\": \"affected\", \"version\": \"2.2.2\"}, {\"status\": \"affected\", \"version\": \"2.2.3\"}, {\"status\": \"affected\", \"version\": \"2.2.10\"}, {\"status\": \"affected\", \"version\": \"2.2.8\"}, {\"status\": \"affected\", \"version\": \"2.2.4\"}, {\"status\": \"affected\", \"version\": \"2.2.7\"}, {\"status\": \"affected\", \"version\": \"2.2.5\"}, {\"status\": \"affected\", \"version\": \"2.2.9\"}, {\"status\": \"affected\", \"version\": \"2.2.1 Update 01\"}, {\"status\": \"affected\", \"version\": \"2.2.2 Update 03\"}, {\"status\": \"affected\", \"version\": \"2.2.2 Update 04\"}, {\"status\": \"affected\", \"version\": \"2.2.3 Update 02\"}, {\"status\": \"affected\", \"version\": \"2.2.3 Update 03\"}, {\"status\": \"affected\", \"version\": \"2.2.3 Update 04\"}, {\"status\": \"affected\", \"version\": \"2.2.3 Update 05\"}, {\"status\": \"affected\", \"version\": \"2.2.3 Update 06\"}, {\"status\": \"affected\", \"version\": \"3.0.0\"}, {\"status\": \"affected\", \"version\": \"3.0.1\"}, {\"status\": \"affected\", \"version\": \"3.0.2\"}, {\"status\": \"affected\", \"version\": \"3.0.3\"}, {\"status\": \"affected\", \"version\": \"3.0.4\"}, {\"status\": \"affected\", \"version\": \"3.0.6\"}, {\"status\": \"affected\", \"version\": \"3.0.5\"}, {\"status\": \"affected\", \"version\": \"3.0.7\"}, {\"status\": \"affected\", \"version\": \"3.1.0\"}, {\"status\": \"affected\", \"version\": \"3.1.1\"}, {\"status\": \"affected\", \"version\": \"3.1.7\"}, {\"status\": \"affected\", \"version\": \"3.1.5\"}, {\"status\": \"affected\", \"version\": \"3.1.2\"}, {\"status\": \"affected\", \"version\": \"3.1.3\"}, {\"status\": \"affected\", \"version\": \"3.1.4\"}, {\"status\": \"affected\", \"version\": \"3.1.6\"}, {\"status\": \"affected\", \"version\": \"3.2.2\"}, {\"status\": \"affected\", \"version\": \"3.2.0-FIPS\"}, {\"status\": \"affected\", \"version\": \"3.2.1\"}, {\"status\": \"affected\", \"version\": \"3.3.0\"}, {\"status\": \"affected\", \"version\": \"3.3.1\"}, {\"status\": \"affected\", \"version\": \"3.3.0 Update 01\"}, {\"status\": \"affected\", \"version\": \"3.4.0\"}, {\"status\": \"affected\", \"version\": \"3.4.1\"}, {\"status\": \"affected\", \"version\": \"3.4.2\"}, {\"status\": \"affected\", \"version\": \"3.4.1 Update 01\"}, {\"status\": \"affected\", \"version\": \"3.4.1 Update 02\"}, {\"status\": \"affected\", \"version\": \"3.4.2 Update 01\"}, {\"status\": \"affected\", \"version\": \"3.5.0\"}, {\"status\": \"affected\", \"version\": \"3.5.1\"}, {\"status\": \"affected\", \"version\": \"3.5.0 Update 01\"}, {\"status\": \"affected\", \"version\": \"3.5.0 Update 02\"}, {\"status\": \"affected\", \"version\": \"3.5.0 Update 03\"}, {\"status\": \"affected\", \"version\": \"3.5.1 Update 01\"}, {\"status\": \"affected\", \"version\": \"3.5.1 Update 02\"}, {\"status\": \"affected\", \"version\": \"3.5.1 Update 03\"}, {\"status\": \"affected\", \"version\": \"3.6.0\"}, {\"status\": \"affected\", \"version\": \"3.6.0 Update 01\"}, {\"status\": \"affected\", \"version\": \"3.6.0 Update 02\"}, {\"status\": \"affected\", \"version\": \"3.6.0 Update 03\"}, {\"status\": \"affected\", \"version\": \"3.6.0 Update 04\"}, {\"status\": \"affected\", \"version\": \"2.1\"}, {\"status\": \"affected\", \"version\": \"2.2\"}, {\"status\": \"affected\", \"version\": \"3.2\"}, {\"status\": \"affected\", \"version\": \"3.4_DP1\"}, {\"status\": \"affected\", \"version\": \"3.4_DP3\"}, {\"status\": \"affected\", \"version\": \"3.4_DP2\"}, {\"status\": \"affected\", \"version\": \"3.5_DP1\"}, {\"status\": \"affected\", \"version\": \"3.4_DP7\"}, {\"status\": \"affected\", \"version\": \"3.4_DP10\"}, {\"status\": \"affected\", \"version\": \"3.4_DP5\"}, {\"status\": \"affected\", \"version\": \"3.1_DP15\"}, {\"status\": \"affected\", \"version\": \"3.4_DP11\"}, {\"status\": \"affected\", \"version\": \"3.4_DP8\"}, {\"status\": \"affected\", \"version\": \"3.7_DP1\"}, {\"status\": \"affected\", \"version\": \"3.3_DP4\"}, {\"status\": \"affected\", \"version\": \"3.10_DP1\"}, {\"status\": \"affected\", \"version\": \"3.8_DP1\"}, {\"status\": \"affected\", \"version\": \"3.7_DP2\"}, {\"status\": \"affected\", \"version\": \"3.6_DP1\"}, {\"status\": \"affected\", \"version\": \"3.1_DP16\"}, {\"status\": \"affected\", \"version\": \"3.5_DP4\"}, {\"status\": \"affected\", \"version\": \"3.3_DP3\"}, {\"status\": \"affected\", \"version\": \"3.2_DP2\"}, {\"status\": \"affected\", \"version\": \"3.4_DP4\"}, {\"status\": \"affected\", \"version\": \"3.1_DP14\"}, {\"status\": \"affected\", \"version\": \"3.1_DP6\"}, {\"status\": \"affected\", \"version\": \"3.1_DP9\"}, {\"status\": \"affected\", \"version\": \"3.4_DP6\"}, {\"status\": \"affected\", \"version\": \"3.2_DP3\"}, {\"status\": \"affected\", \"version\": \"3.4_DP9\"}, {\"status\": \"affected\", \"version\": \"3.3_DP2\"}, {\"status\": \"affected\", \"version\": \"3.2_DP1\"}, {\"status\": \"affected\", \"version\": \"3.1_DP10\"}, {\"status\": \"affected\", \"version\": \"3.9_DP1\"}, {\"status\": \"affected\", \"version\": \"3.3_DP1\"}, {\"status\": \"affected\", \"version\": \"3.1_DP13\"}, {\"status\": \"affected\", \"version\": \"3.5_DP2\"}, {\"status\": \"affected\", \"version\": \"3.1_DP12\"}, {\"status\": \"affected\", \"version\": \"3.1_DP4\"}, {\"status\": \"affected\", \"version\": \"3.5_DP3\"}, {\"status\": \"affected\", \"version\": \"3.1_DP8\"}, {\"status\": \"affected\", \"version\": \"3.1_DP7\"}, {\"status\": \"affected\", \"version\": \"3.2_DP4\"}, {\"status\": \"affected\", \"version\": \"3.1_DP11\"}, {\"status\": \"affected\", \"version\": \"3.1_DP5\"}, {\"status\": \"affected\", \"version\": \"3.7.0\"}, {\"status\": \"affected\", \"version\": \"3.7.1\"}, {\"status\": \"affected\", \"version\": \"3.7.1 Update 04\"}, {\"status\": \"affected\", \"version\": \"3.7.1 Update 06\"}, {\"status\": \"affected\", \"version\": \"3.7.1 Update 07\"}, {\"status\": \"affected\", \"version\": \"3.7.1 Update 03\"}, {\"status\": \"affected\", \"version\": \"3.7.0 Update 03\"}, {\"status\": \"affected\", \"version\": \"3.7.1 Update 01\"}, {\"status\": \"affected\", \"version\": \"3.7.1 Update 02\"}, {\"status\": \"affected\", \"version\": \"3.7.1 Update 05\"}, {\"status\": \"affected\", \"version\": \"3.8.0\"}, {\"status\": \"affected\", \"version\": \"3.8.1\"}, {\"status\": \"affected\", \"version\": \"3.8.1 Update 02\"}, {\"status\": \"affected\", \"version\": \"3.8.1 Update 04\"}, {\"status\": \"affected\", \"version\": \"3.8.1 Update 01\"}, {\"status\": \"affected\", \"version\": \"3.8.1 Update 03\"}, {\"status\": \"affected\", \"version\": \"3.8.0 Update 01\"}, {\"status\": \"affected\", \"version\": \"3.8.0 Update 02\"}, {\"status\": \"affected\", \"version\": \"3.9.0\"}, {\"status\": \"affected\", \"version\": \"3.9.1\"}, {\"status\": \"affected\", \"version\": \"3.9.1 Update 02\"}, {\"status\": \"affected\", \"version\": \"3.9.1 Update 03\"}, {\"status\": \"affected\", \"version\": \"3.9.1 Update 01\"}, {\"status\": \"affected\", \"version\": \"3.9.1 Update 04\"}, {\"status\": \"affected\", \"version\": \"3.9.0 Update 01\"}, {\"status\": \"affected\", \"version\": \"3.10.0\"}, {\"status\": \"affected\", \"version\": \"3.10.3\"}, {\"status\": \"affected\", \"version\": \"3.10.1\"}, {\"status\": \"affected\", \"version\": \"3.10.2\"}, {\"status\": \"affected\", \"version\": \"3.10 Update 01\"}, {\"status\": \"affected\", \"version\": \"3.10.4\"}, {\"status\": \"affected\", \"version\": \"3.10.4 Update 01\"}]}, {\"vendor\": \"Cisco\", \"product\": \"Cisco Evolved Programmable Network Manager (EPNM)\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.2.6\"}, {\"status\": \"affected\", \"version\": \"1.2.2\"}, {\"status\": \"affected\", \"version\": \"1.2.3\"}, {\"status\": \"affected\", \"version\": \"1.2.5\"}, {\"status\": \"affected\", \"version\": \"1.2.1.2\"}, {\"status\": \"affected\", \"version\": \"1.2.4\"}, {\"status\": \"affected\", \"version\": \"1.2.7\"}, {\"status\": \"affected\", \"version\": \"1.2\"}, {\"status\": \"affected\", \"version\": \"1.2.2.4\"}, {\"status\": \"affected\", \"version\": \"1.2.4.2\"}, {\"status\": \"affected\", \"version\": \"2.0.2\"}, {\"status\": \"affected\", \"version\": \"2.0.4\"}, {\"status\": \"affected\", \"version\": \"2.0.3\"}, {\"status\": \"affected\", \"version\": \"2.0.1\"}, {\"status\": \"affected\", \"version\": \"2.0\"}, {\"status\": \"affected\", \"version\": \"2.0.1.1\"}, {\"status\": \"affected\", \"version\": \"2.0.2.1\"}, {\"status\": \"affected\", \"version\": \"2.0.4.1\"}, {\"status\": \"affected\", \"version\": \"2.0.4.2\"}, {\"status\": \"affected\", \"version\": \"2.1.2\"}, {\"status\": \"affected\", \"version\": \"2.1.3\"}, {\"status\": \"affected\", \"version\": \"2.1.1\"}, {\"status\": \"affected\", \"version\": \"2.1\"}, {\"status\": \"affected\", \"version\": \"2.1.1.1\"}, {\"status\": \"affected\", \"version\": \"2.1.1.3\"}, {\"status\": \"affected\", \"version\": \"2.1.1.4\"}, {\"status\": \"affected\", \"version\": \"2.1.2.2\"}, {\"status\": \"affected\", \"version\": \"2.1.2.3\"}, {\"status\": \"affected\", \"version\": \"2.1.3.2\"}, {\"status\": \"affected\", \"version\": \"2.1.3.3\"}, {\"status\": \"affected\", \"version\": \"2.1.3.4\"}, {\"status\": \"affected\", \"version\": \"2.1.3.5\"}, {\"status\": \"affected\", \"version\": \"2.1.4\"}, {\"status\": \"affected\", \"version\": \"2.2.1\"}, {\"status\": \"affected\", \"version\": \"2.2\"}, {\"status\": \"affected\", \"version\": \"2.2.1.1\"}, {\"status\": \"affected\", \"version\": \"2.2.1.2\"}, {\"status\": \"affected\", \"version\": \"2.2.1.3\"}, {\"status\": \"affected\", \"version\": \"2.2.1.4\"}, {\"status\": \"affected\", \"version\": \"2.2.3\"}, {\"status\": \"affected\", \"version\": \"2.2.4\"}, {\"status\": \"affected\", \"version\": \"2.2.5\"}, {\"status\": \"affected\", \"version\": \"3.0.1\"}, {\"status\": \"affected\", \"version\": \"3.0.2\"}, {\"status\": \"affected\", \"version\": \"3.0.3\"}, {\"status\": \"affected\", \"version\": \"3.0\"}, {\"status\": \"affected\", \"version\": \"3.1.1\"}, {\"status\": \"affected\", \"version\": \"3.1.2\"}, {\"status\": \"affected\", \"version\": \"3.1.3\"}, {\"status\": \"affected\", \"version\": \"3.1\"}, {\"status\": \"affected\", \"version\": \"4.1.1\"}, {\"status\": \"affected\", \"version\": \"4.1\"}, {\"status\": \"affected\", \"version\": \"4.1.1.1\"}, {\"status\": \"affected\", \"version\": \"4.1.1.2\"}, {\"status\": \"affected\", \"version\": \"4.0.3\"}, {\"status\": \"affected\", \"version\": \"4.0.1\"}, {\"status\": \"affected\", \"version\": \"4.0.2\"}, {\"status\": \"affected\", \"version\": \"4.0\"}, {\"status\": \"affected\", \"version\": \"4.0.3.1\"}, {\"status\": \"affected\", \"version\": \"5.0.1\"}, {\"status\": \"affected\", \"version\": \"5.0.2\"}, {\"status\": \"affected\", \"version\": \"5.0.2.5\"}, {\"status\": \"affected\", \"version\": \"5.0.2.3\"}, {\"status\": \"affected\", \"version\": \"5.0.2.4\"}, {\"status\": \"affected\", \"version\": \"5.0.2.1\"}, {\"status\": \"affected\", \"version\": \"5.0.2.2\"}, {\"status\": \"affected\", \"version\": \"5.0\"}, {\"status\": \"affected\", \"version\": \"5.0.2.6\"}, {\"status\": \"affected\", \"version\": \"5.1.1\"}, {\"status\": \"affected\", \"version\": \"5.1.2\"}, {\"status\": \"affected\", \"version\": \"5.1.3\"}, {\"status\": \"affected\", \"version\": \"5.1.4\"}, {\"status\": \"affected\", \"version\": \"5.1.4.2\"}, {\"status\": \"affected\", \"version\": \"5.1.4.1\"}, {\"status\": \"affected\", \"version\": \"5.1.4.3\"}, {\"status\": \"affected\", \"version\": \"5.1\"}, {\"status\": \"affected\", \"version\": \"5.1.3.1\"}, {\"status\": \"affected\", \"version\": \"5.1.3.2\"}, {\"status\": \"affected\", \"version\": \"5.1.4.4\"}, {\"status\": \"affected\", \"version\": \"7.0.0\"}, {\"status\": \"affected\", \"version\": \"6.0.0\"}, {\"status\": \"affected\", \"version\": \"6.0.2\"}, {\"status\": \"affected\", \"version\": \"6.0.1\"}, {\"status\": \"affected\", \"version\": \"6.0.2.1\"}, {\"status\": \"affected\", \"version\": \"6.0.1.1\"}, {\"status\": \"affected\", \"version\": \"6.0.3\"}, {\"status\": \"affected\", \"version\": \"6.0.3.1\"}, {\"status\": \"affected\", \"version\": \"6.1.1\"}, {\"status\": \"affected\", \"version\": \"6.1.1.1\"}, {\"status\": \"affected\", \"version\": \"6.1\"}, {\"status\": \"affected\", \"version\": \"6.1.2\"}, {\"status\": \"affected\", \"version\": \"6.1.1.2.2\"}]}], \"exploits\": [{\"lang\": \"en\", \"value\": \"The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerabilities that are described in this advisory.\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-wkZJeyeq\", \"name\": \"cisco-sa-pi-epnm-wkZJeyeq\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. This vulnerability is due to improper validation of user-submitted parameters. An attacker could exploit this vulnerability by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain and modify sensitive information that is stored in the underlying database.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-89\", \"description\": \"Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2024-02-02T15:42:33.023Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2023-20271\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-06-17T21:19:17.301Z\", \"dateReserved\": \"2022-10-27T18:47:50.373Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2024-01-17T16:56:25.553Z\", \"assignerShortName\": \"cisco\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…