CVE-2016-1359

Description

Cisco Prime Infrastructure 3.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP request that is mishandled during viewing of a log file, aka Bug ID CSCuw81494.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.508

Associated Vulnerability

VulnerabilityOS Platform
Cisco Prime Infrastructure Log File Remote Code Execution Vulnerability For Cisco Prime InfrastructureNCM
Improper Input Validation Vulnerability (CVE-2016-1359)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1705595Security Update for Cisco Prime Infrastructure 2.2(2)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234