CVE-2016-6443

CWE-89 — SQL Injection4 documents4 sources
Severity
8.8HIGH
EPSS
1.9%
top 16.90%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Evolved Programmable Network ManagerCisco Prime Infrastructure
Timeline
PublishedOct 27
Latest updateMay 14

Description

A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote attacker to impact system confidentiality by executing a subset of arbitrary SQL queries that can cause product instability. More Information: CSCva27038, CSCva28335. Known Affected Releases: 3.1(0.128), 1.2(400), 2.0(1.0.34A).

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

▶NVDcisco/prime_infrastructure16 versions+15

🔴Vulnerability Details

2
GHSA
GHSA-vp6x-5pr9-pwr9: A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote↗2022-05-14
▶
CVEList
CVE-2016-6443: A vulnerability in the Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL database interface could allow an authenticated, remote↗2016-10-27
▶

📋Vendor Advisories

1
Cisco
Cisco Prime Infrastructure and Evolved Programmable Network Manager Database Interface SQL Injection Vulnerability↗2016-10-12
▶
CVE-2016-6443 (HIGH CVSS 8.8) | A vulnerability in the Cisco Prime | cvebase.io