CVE-2023-20127

Name of the Vulnerable Software and Affected Versions Cisco Prime Infrastructure (affected versions not specified) Cisco Evolved Programmable Network Manager (EPNM) (affected versions not specified)

Description The issue is related to the web-based management interface of the affected systems, allowing a remote attacker to obtain privileged information. It also enables cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks.

Recommendations For Cisco Prime Infrastructure, update to a version that addresses the issue. For Cisco Evolved Programmable Network Manager (EPNM), update to a version that addresses the issue. As a temporary workaround, consider restricting access to the web-based management interface to minimize the risk of exploitation.