CVE-2016-1391: Cisco Prime Network Analysis Module Software

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Cisco Prime Network Analysis Module (NAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2) and Prime Virtual Network Analysis Module (vNAM) before 6.1(1) patch.6.1-2-final and 6.2.x before 6.2(2) allow remote authenticated users to execute arbitrary OS commands via a crafted HTTP request, aka Bug ID CSCuy21889.

Affected products

• Cisco Prime Network Analysis Module Software: version 5.0.0 only; version 5.0.1 only; version 5.0.2 only; version 5.1.0 only; version 5.1.2 only; version 6.0.2 only; …
• Cisco Prime Virtual Network Analysis Module Software: version 6.0.0 only; version 6.1.0 only; version 6.2.0 only; version 6.2.1 only

Published 2016-06-04. Last modified 2026-06-17.