Cisco Prime Infrastructure vulnerabilities

89 CVEs affecting Cisco Prime Infrastructure, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-20189, published 2026-05-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-44487: HTTP/2 Rapid Reset Attack Vulnerability, published 2023-10-10. High severity, CVSS 7.5. Actively exploited: in CISA KEV since 2023-10-10. EPSS: 100% chance of exploitation in the next 30 days. The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2019-1821, published 2019-05-16. Critical severity, CVSS 9.8. EPSS: 98.1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute…
CVE-2018-15379, published 2018-10-05. Critical severity, CVSS 9.8. EPSS: 86.2% chance of exploitation in the next 30 days. A vulnerability in which the HTTP web server for Cisco Prime Infrastructure (PI) has unrestricted directory permissions could allow an unauthenticated, remote attacker to upload an arbitrary file.…
CVE-2018-0258, published 2018-05-02. Critical severity, CVSS 9.8. EPSS: 47.6% chance of exploitation in the next 30 days. A vulnerability in the Cisco Prime File Upload servlet affecting multiple Cisco products could allow a remote attacker to upload arbitrary files to any directory of a vulnerable device (aka Path…
CVE-2019-1820, published 2019-05-16. Medium severity, CVSS 6.5. EPSS: 13.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to…
CVE-2019-1819, published 2019-05-16. Medium severity, CVSS 6.5. EPSS: 13.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to…
CVE-2019-1818, published 2019-05-16. Medium severity, CVSS 6.5. EPSS: 13.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow an authenticated, remote attacker to…
CVE-2016-1291, published 2016-04-06. Critical severity, CVSS 9.8. EPSS: 6.8% chance of exploitation in the next 30 days. Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized data in an HTTP…
CVE-2016-1289, published 2016-07-02. Critical severity, CVSS 9.8. EPSS: 6.2% chance of exploitation in the next 30 days. The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote attackers to execute arbitrary code or obtain sensitive management information…
CVE-2019-1823, published 2019-05-16. High severity, CVSS 7.2. EPSS: 4.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute…

Latest

CVE-2026-20189, published 2026-05-06. Medium severity, CVSS 4.3. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow an authenticated, remote attacker to download arbitrary log files from the server. This…
CVE-2026-20123, published 2026-02-04. Medium severity, CVSS 6.1. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a…
CVE-2026-20111, published 2026-02-04. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users…
CVE-2026-20075, published 2026-01-15. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a…
CVE-2025-20280, published 2025-09-03. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a…
CVE-2025-20270, published 2025-09-03. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to obtain…
CVE-2025-20269, published 2025-08-20. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, low-privileged, remote attacker…
CVE-2025-20272, published 2025-07-16. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, low-privileged, remote attacker to conduct a…
CVE-2025-20203, published 2025-04-02. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a…
CVE-2025-20120, published 2025-04-02. Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a…