CVE-2016-1291

Name of the Vulnerable Software and Affected Versions Cisco Evolved Programmable Network Manager versions 1.2 Cisco Prime Infrastructure versions 1.2.0 through 2.2(2)

Description The issue exists due to insufficient input validation, allowing a remote attacker to execute arbitrary code by sending a specially crafted HTTP POST request with deserialized data.

Recommendations For Cisco Evolved Programmable Network Manager version 1.2, update to a version that addresses the issue. For Cisco Prime Infrastructure versions 1.2.0 through 2.2(2), update to a version that addresses the issue.