CVE-2026-20123

CWE-601 — Open Redirect4 documents4 sources
Severity
6.1MEDIUM
EPSS
0.0%
top 91.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Cisco Evolved Programmable Network ManagerCisco Prime InfrastructureCisco Cisco Evolved Programmable Network Manager (epnm)+1 more
Timeline
PublishedFeb 4

Description

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NExploitability: 2.8 | Impact: 1.4

Affected Packages4 packages

▶NVDcisco/prime_infrastructure3.10 — 3.10.6+2
▶CVEListV5cisco/cisco_prime_infrastructure14 versions+13

🔴Vulnerability Details

2
CVEList
Cisco Prime Infrastructure and Evolved Programmable Network Manager Open Redirect Vulnerability↗2026-02-04
▶
GHSA
GHSA-8vw9-4phq-rr32: A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow↗2026-02-04
▶

📋Vendor Advisories

1
Cisco
Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Open Redirect Vulnerability↗2026-02-04
▶
CVE-2026-20123 (MEDIUM CVSS 6.1) | A vulnerability in the web-based ma | cvebase.io