Executive Summary

This vulnerability is a stored cross-site scripting (XSS) issue in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure. It occurs because the interface does not properly validate user-supplied input, allowing an authenticated remote attacker with valid administrative credentials to insert malicious code into specific data fields. This malicious code can then execute arbitrary scripts in the context of the affected interface or access sensitive browser-based information.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could allow an attacker to execute arbitrary script code within the web interface, potentially leading to unauthorized access to sensitive information available in the browser or manipulation of the interface. This could compromise the security and integrity of the affected system's management interface.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, ensure that only trusted administrators have access to the web-based management interface, as exploitation requires valid administrative credentials. Additionally, apply any available patches or updates from Cisco for Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure that address this stored cross-site scripting (XSS) vulnerability. Limit user input to the interface and monitor for suspicious activity related to script injection attempts.

Useful 0 Not Useful 0