CVE-2017-6698

Опубликовано: 04 июл. 2017

Источник: nvd

CVSS3: 5.4

CVSS2: 5.5

EPSS Низкий

Описание

A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc23892 CSCvc35270 CSCvc35626 CSCvc35630 CSCvc49568. Known Affected Releases: 3.1(1) 2.0(4.0.45B).

Ссылки

http://www.securityfocus.com/bid/99214
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038751
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm2
Vendor Advisory
http://www.securityfocus.com/bid/99214
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038751
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm2
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:cisco:prime_infrastructure:2.0\(4.0.45b\):*:*:*:*:*:*:*

cpe:2.3:a:cisco:prime_infrastructure:3.1\(1\):*:*:*:*:*:*:*

EPSS

Процентиль: 42%

0.00197

Низкий

5.4 Medium

CVSS3

5.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-ggjg-37r9-4hhp