NetSight
IP …
high8.8

CVE-2016-6443

A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker…

Impact

A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability. More Information: CSCva27038, CSCva28335. Known Affected Releases: 3.1(0.128), 1.2(400), 2.0(1.0.34A).

Affected products

VendorProductAffected versions
CiscoEvolved Programmable Network Manager
Versions 1.2, 2.0
CiscoPrime Infrastructure
Versions 1.2, 1.2.0.103, 1.2.1, 1.3, 1.3.0.20, 1.4

Weakness classification

CWE-89

References