Cisco Prime Lan Management Solution vulnerabilities

8 CVEs affecting Cisco Prime Lan Management Solution, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-12225, published 2017-09-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2012-6392, published 2013-01-17. High severity, CVSS 10.0. EPSS: 4.6% chance of exploitation in the next 30 days. Cisco Prime LAN Management Solution (LMS) 4.1 through 4.2.2 on Linux does not properly validate authentication and authorization requests in TCP sessions, which allows remote attackers to execute…
CVE-2017-12225, published 2017-09-07. Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the web functionality of the Cisco Prime LAN Management Solution could allow an authenticated, remote attacker to hijack another user's administrative session, aka a Session…
CVE-2015-0594, published 2015-02-27. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS) and Cisco Security Manager, allow remote attackers…
CVE-2013-5488, published 2013-09-12. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact…
CVE-2013-5482, published 2013-09-13. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco Prime LAN Management Solution (LMS) does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks…
CVE-2016-1360, published 2016-03-12. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Cisco Prime LAN Management Solution (LMS) through 4.2.5 uses the same database decryption key across different customers' installations, which allows local users to obtain cleartext data by…
CVE-2013-1196, published 2013-04-29. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System,…
CVE-2013-1125, published 2013-02-19. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network…