Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability_CVE-2026-20111

4.8 / 10

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Description

A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an affected system.

This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious code into specific data fields in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, an attacker must have valid administrative credentials.

Basic Information

ID CVE-2026-20111

Source cisco

Published Feb 4, 2026 at 16:11

Modified Feb 4, 2026 at 16:41

Affected Product

Vendor Cisco

Product Cisco Prime Infrastructure

Version 3.0.0

Affected Versions Cisco Cisco Prime Infrastructure 3.0.0
Cisco Cisco Prime Infrastructure 3.1.0
Cisco Cisco Prime Infrastructure 3.1.5
Cisco Cisco Prime Infrastructure 2.1
Cisco Cisco Prime Infrastructure 2.0.0
Cisco Cisco Prime Infrastructure 3.6.0
Cisco Cisco Prime Infrastructure 3.7.0
Cisco Cisco Prime Infrastructure 3.4.0
Cisco Cisco Prime Infrastructure 3.3.0
Cisco Cisco Prime Infrastructure 3.2
Cisco Cisco Prime Infrastructure 3.5.0
Cisco Cisco Prime Infrastructure 3.2.0-FIPS
Cisco Cisco Prime Infrastructure 2.2
Cisco Cisco Prime Infrastructure 3.8.0-FED
Cisco Cisco Prime Infrastructure 3.9.0
Cisco Cisco Prime Infrastructure 3.8.0
Cisco Cisco Prime Infrastructure 3.10.0
Cisco Cisco Prime Infrastructure 3.1.1
Cisco Cisco Prime Infrastructure 2.1.2
Cisco Cisco Prime Infrastructure 2.2.1
Cisco Cisco Prime Infrastructure 2.2.0
Cisco Cisco Prime Infrastructure 3.0.2
Cisco Cisco Prime Infrastructure 3.0.3
Cisco Cisco Prime Infrastructure 3.0.1
Cisco Cisco Prime Infrastructure 2.2.2
Cisco Cisco Prime Infrastructure 2.2.3
Cisco Cisco Prime Infrastructure 2.1.0
Cisco Cisco Prime Infrastructure 2.1.1
Cisco Cisco Prime Infrastructure 3.9.1
Cisco Cisco Prime Infrastructure 2.0.10
Cisco Cisco Prime Infrastructure 3.8.1
Cisco Cisco Prime Infrastructure 3.7.1
Cisco Cisco Prime Infrastructure 3.5.1
Cisco Cisco Prime Infrastructure 3.4.2
Cisco Cisco Prime Infrastructure 3.3.1
Cisco Cisco Prime Infrastructure 3.1.7
Cisco Cisco Prime Infrastructure 3.2.1
Cisco Cisco Prime Infrastructure 3.2.2
Cisco Cisco Prime Infrastructure 3.1.6
Cisco Cisco Prime Infrastructure 3.1.2
Cisco Cisco Prime Infrastructure 3.4.1
Cisco Cisco Prime Infrastructure 3.1.3
Cisco Cisco Prime Infrastructure 3.1.4
Cisco Cisco Prime Infrastructure 3.0.6
Cisco Cisco Prime Infrastructure 2.2.10
Cisco Cisco Prime Infrastructure 3.0.4
Cisco Cisco Prime Infrastructure 3.0.5
Cisco Cisco Prime Infrastructure 2.1.56
Cisco Cisco Prime Infrastructure 2.2.4
Cisco Cisco Prime Infrastructure 2.2.9
Cisco Cisco Prime Infrastructure 2.2.8
Cisco Cisco Prime Infrastructure 2.2.5
Cisco Cisco Prime Infrastructure 2.2.7
Cisco Cisco Prime Infrastructure 2.0.39
Cisco Cisco Prime Infrastructure 3.8_DP1
Cisco Cisco Prime Infrastructure 3.9_DP1
Cisco Cisco Prime Infrastructure 3.7_DP2
Cisco Cisco Prime Infrastructure 3.6_DP1
Cisco Cisco Prime Infrastructure 3.5_DP4
Cisco Cisco Prime Infrastructure 3.5_DP2
Cisco Cisco Prime Infrastructure 3.4_DP10
Cisco Cisco Prime Infrastructure 3.7_DP1
Cisco Cisco Prime Infrastructure 3.5_DP3
Cisco Cisco Prime Infrastructure 3.4_DP11
Cisco Cisco Prime Infrastructure 3.5_DP1
Cisco Cisco Prime Infrastructure 3.4_DP8
Cisco Cisco Prime Infrastructure 3.4_DP1
Cisco Cisco Prime Infrastructure 3.4_DP3
Cisco Cisco Prime Infrastructure 3.4_DP5
Cisco Cisco Prime Infrastructure 3.4_DP2
Cisco Cisco Prime Infrastructure 3.4_DP7
Cisco Cisco Prime Infrastructure 3.4_DP6
Cisco Cisco Prime Infrastructure 3.3_DP4
Cisco Cisco Prime Infrastructure 3.4_DP4
Cisco Cisco Prime Infrastructure 3.4_DP9
Cisco Cisco Prime Infrastructure 3.1_DP16
Cisco Cisco Prime Infrastructure 3.3_DP2
Cisco Cisco Prime Infrastructure 3.3_DP3
Cisco Cisco Prime Infrastructure 3.1_DP15
Cisco Cisco Prime Infrastructure 3.3_DP1
Cisco Cisco Prime Infrastructure 3.1_DP13
Cisco Cisco Prime Infrastructure 3.2_DP2
Cisco Cisco Prime Infrastructure 3.2_DP1
Cisco Cisco Prime Infrastructure 3.2_DP3
Cisco Cisco Prime Infrastructure 3.1_DP14
Cisco Cisco Prime Infrastructure 3.2_DP4
Cisco Cisco Prime Infrastructure 3.1_DP7
Cisco Cisco Prime Infrastructure 3.1_DP10
Cisco Cisco Prime Infrastructure 3.1_DP11
Cisco Cisco Prime Infrastructure 3.1_DP4
Cisco Cisco Prime Infrastructure 3.1_DP6
Cisco Cisco Prime Infrastructure 3.1_DP12
Cisco Cisco Prime Infrastructure 3.1_DP5
Cisco Cisco Prime Infrastructure 3.0.7
Cisco Cisco Prime Infrastructure 3.1_DP9
Cisco Cisco Prime Infrastructure 3.1_DP8
Cisco Cisco Prime Infrastructure 3.10_DP1
Cisco Cisco Prime Infrastructure 3.10.2
Cisco Cisco Prime Infrastructure 3.10.3
Cisco Cisco Prime Infrastructure 3.10
Cisco Cisco Prime Infrastructure 3.10.1
Cisco Cisco Prime Infrastructure 3.7.1 Update 03
Cisco Cisco Prime Infrastructure 3.7.1 Update 04
Cisco Cisco Prime Infrastructure 3.7.1 Update 06
Cisco Cisco Prime Infrastructure 3.7.1 Update 07
Cisco Cisco Prime Infrastructure 3.8.1 Update 01
Cisco Cisco Prime Infrastructure 3.8.1 Update 02
Cisco Cisco Prime Infrastructure 3.8.1 Update 03
Cisco Cisco Prime Infrastructure 3.8.1 Update 04
Cisco Cisco Prime Infrastructure 3.9.1 Update 01
Cisco Cisco Prime Infrastructure 3.9.1 Update 02
Cisco Cisco Prime Infrastructure 3.9.1 Update 03
Cisco Cisco Prime Infrastructure 3.9.1 Update 04
Cisco Cisco Prime Infrastructure 3.10 Update 01
Cisco Cisco Prime Infrastructure 3.4.2 Update 01
Cisco Cisco Prime Infrastructure 3.6.0 Update 04
Cisco Cisco Prime Infrastructure 3.6.0 Update 02
Cisco Cisco Prime Infrastructure 3.6.0 Update 03
Cisco Cisco Prime Infrastructure 3.6.0 Update 01
Cisco Cisco Prime Infrastructure 3.5.1 Update 03
Cisco Cisco Prime Infrastructure 3.5.1 Update 01
Cisco Cisco Prime Infrastructure 3.5.1 Update 02
Cisco Cisco Prime Infrastructure 3.7.0 Update 03
Cisco Cisco Prime Infrastructure 2.2.3 Update 05
Cisco Cisco Prime Infrastructure 2.2.3 Update 04
Cisco Cisco Prime Infrastructure 2.2.3 Update 06
Cisco Cisco Prime Infrastructure 2.2.3 Update 03
Cisco Cisco Prime Infrastructure 2.2.3 Update 02
Cisco Cisco Prime Infrastructure 2.2.1 Update 01
Cisco Cisco Prime Infrastructure 2.2.2 Update 03
Cisco Cisco Prime Infrastructure 2.2.2 Update 04
Cisco Cisco Prime Infrastructure 3.8.0 Update 01
Cisco Cisco Prime Infrastructure 3.8.0 Update 02
Cisco Cisco Prime Infrastructure 3.7.1 Update 01
Cisco Cisco Prime Infrastructure 3.7.1 Update 02
Cisco Cisco Prime Infrastructure 3.7.1 Update 05
Cisco Cisco Prime Infrastructure 3.9.0 Update 01
Cisco Cisco Prime Infrastructure 3.3.0 Update 01
Cisco Cisco Prime Infrastructure 3.4.1 Update 02
Cisco Cisco Prime Infrastructure 3.4.1 Update 01
Cisco Cisco Prime Infrastructure 3.5.0 Update 03
Cisco Cisco Prime Infrastructure 3.5.0 Update 01
Cisco Cisco Prime Infrastructure 3.5.0 Update 02
Cisco Cisco Prime Infrastructure 3.10.4
Cisco Cisco Prime Infrastructure 3.10.4 Update 01
Cisco Cisco Prime Infrastructure 3.10.4 Update 02
Cisco Cisco Prime Infrastructure 3.10.4 Update 03
Cisco Cisco Prime Infrastructure 3.10.5
Cisco Cisco Prime Infrastructure 3.10.6
Cisco Cisco Prime Infrastructure 3.10.6 Update 01

References

sec.cloudapps.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-xss-bYeVKCD

{
    "lastseen": "",
    "description": "A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an affected system.\r\n\r\nThis vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious code into specific data fields in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, an attacker must have valid administrative credentials.",
    "published": "2026-02-04T16:11:56.571Z",
    "modified": "2026-02-04T16:41:39.389Z",
    "type": "cve",
    "title": "Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability",
    "source": "cisco",
    "references": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-xss-bYeVKCD",
    "id": "CVE-2026-20111",
    "bulletinFamily": "",
    "cwe": null,
    "cvelist": null,
    "sourceData": "Cisco Cisco Prime Infrastructure 3.0.0\nCisco Cisco Prime Infrastructure 3.1.0\nCisco Cisco Prime Infrastructure 3.1.5\nCisco Cisco Prime Infrastructure 2.1\nCisco Cisco Prime Infrastructure 2.0.0\nCisco Cisco Prime Infrastructure 3.6.0\nCisco Cisco Prime Infrastructure 3.7.0\nCisco Cisco Prime Infrastructure 3.4.0\nCisco Cisco Prime Infrastructure 3.3.0\nCisco Cisco Prime Infrastructure 3.2\nCisco Cisco Prime Infrastructure 3.5.0\nCisco Cisco Prime Infrastructure 3.2.0-FIPS\nCisco Cisco Prime Infrastructure 2.2\nCisco Cisco Prime Infrastructure 3.8.0-FED\nCisco Cisco Prime Infrastructure 3.9.0\nCisco Cisco Prime Infrastructure 3.8.0\nCisco Cisco Prime Infrastructure 3.10.0\nCisco Cisco Prime Infrastructure 3.1.1\nCisco Cisco Prime Infrastructure 2.1.2\nCisco Cisco Prime Infrastructure 2.2.1\nCisco Cisco Prime Infrastructure 2.2.0\nCisco Cisco Prime Infrastructure 3.0.2\nCisco Cisco Prime Infrastructure 3.0.3\nCisco Cisco Prime Infrastructure 3.0.1\nCisco Cisco Prime Infrastructure 2.2.2\nCisco Cisco Prime Infrastructure 2.2.3\nCisco Cisco Prime Infrastructure 2.1.0\nCisco Cisco Prime Infrastructure 2.1.1\nCisco Cisco Prime Infrastructure 3.9.1\nCisco Cisco Prime Infrastructure 2.0.10\nCisco Cisco Prime Infrastructure 3.8.1\nCisco Cisco Prime Infrastructure 3.7.1\nCisco Cisco Prime Infrastructure 3.5.1\nCisco Cisco Prime Infrastructure 3.4.2\nCisco Cisco Prime Infrastructure 3.3.1\nCisco Cisco Prime Infrastructure 3.1.7\nCisco Cisco Prime Infrastructure 3.2.1\nCisco Cisco Prime Infrastructure 3.2.2\nCisco Cisco Prime Infrastructure 3.1.6\nCisco Cisco Prime Infrastructure 3.1.2\nCisco Cisco Prime Infrastructure 3.4.1\nCisco Cisco Prime Infrastructure 3.1.3\nCisco Cisco Prime Infrastructure 3.1.4\nCisco Cisco Prime Infrastructure 3.0.6\nCisco Cisco Prime Infrastructure 2.2.10\nCisco Cisco Prime Infrastructure 3.0.4\nCisco Cisco Prime Infrastructure 3.0.5\nCisco Cisco Prime Infrastructure 2.1.56\nCisco Cisco Prime Infrastructure 2.2.4\nCisco Cisco Prime Infrastructure 2.2.9\nCisco Cisco Prime Infrastructure 2.2.8\nCisco Cisco Prime Infrastructure 2.2.5\nCisco Cisco Prime Infrastructure 2.2.7\nCisco Cisco Prime Infrastructure 2.0.39\nCisco Cisco Prime Infrastructure 3.8_DP1\nCisco Cisco Prime Infrastructure 3.9_DP1\nCisco Cisco Prime Infrastructure 3.7_DP2\nCisco Cisco Prime Infrastructure 3.6_DP1\nCisco Cisco Prime Infrastructure 3.5_DP4\nCisco Cisco Prime Infrastructure 3.5_DP2\nCisco Cisco Prime Infrastructure 3.4_DP10\nCisco Cisco Prime Infrastructure 3.7_DP1\nCisco Cisco Prime Infrastructure 3.5_DP3\nCisco Cisco Prime Infrastructure 3.4_DP11\nCisco Cisco Prime Infrastructure 3.5_DP1\nCisco Cisco Prime Infrastructure 3.4_DP8\nCisco Cisco Prime Infrastructure 3.4_DP1\nCisco Cisco Prime Infrastructure 3.4_DP3\nCisco Cisco Prime Infrastructure 3.4_DP5\nCisco Cisco Prime Infrastructure 3.4_DP2\nCisco Cisco Prime Infrastructure 3.4_DP7\nCisco Cisco Prime Infrastructure 3.4_DP6\nCisco Cisco Prime Infrastructure 3.3_DP4\nCisco Cisco Prime Infrastructure 3.4_DP4\nCisco Cisco Prime Infrastructure 3.4_DP9\nCisco Cisco Prime Infrastructure 3.1_DP16\nCisco Cisco Prime Infrastructure 3.3_DP2\nCisco Cisco Prime Infrastructure 3.3_DP3\nCisco Cisco Prime Infrastructure 3.1_DP15\nCisco Cisco Prime Infrastructure 3.3_DP1\nCisco Cisco Prime Infrastructure 3.1_DP13\nCisco Cisco Prime Infrastructure 3.2_DP2\nCisco Cisco Prime Infrastructure 3.2_DP1\nCisco Cisco Prime Infrastructure 3.2_DP3\nCisco Cisco Prime Infrastructure 3.1_DP14\nCisco Cisco Prime Infrastructure 3.2_DP4\nCisco Cisco Prime Infrastructure 3.1_DP7\nCisco Cisco Prime Infrastructure 3.1_DP10\nCisco Cisco Prime Infrastructure 3.1_DP11\nCisco Cisco Prime Infrastructure 3.1_DP4\nCisco Cisco Prime Infrastructure 3.1_DP6\nCisco Cisco Prime Infrastructure 3.1_DP12\nCisco Cisco Prime Infrastructure 3.1_DP5\nCisco Cisco Prime Infrastructure 3.0.7\nCisco Cisco Prime Infrastructure 3.1_DP9\nCisco Cisco Prime Infrastructure 3.1_DP8\nCisco Cisco Prime Infrastructure 3.10_DP1\nCisco Cisco Prime Infrastructure 3.10.2\nCisco Cisco Prime Infrastructure 3.10.3\nCisco Cisco Prime Infrastructure 3.10\nCisco Cisco Prime Infrastructure 3.10.1\nCisco Cisco Prime Infrastructure 3.7.1 Update 03\nCisco Cisco Prime Infrastructure 3.7.1 Update 04\nCisco Cisco Prime Infrastructure 3.7.1 Update 06\nCisco Cisco Prime Infrastructure 3.7.1 Update 07\nCisco Cisco Prime Infrastructure 3.8.1 Update 01\nCisco Cisco Prime Infrastructure 3.8.1 Update 02\nCisco Cisco Prime Infrastructure 3.8.1 Update 03\nCisco Cisco Prime Infrastructure 3.8.1 Update 04\nCisco Cisco Prime Infrastructure 3.9.1 Update 01\nCisco Cisco Prime Infrastructure 3.9.1 Update 02\nCisco Cisco Prime Infrastructure 3.9.1 Update 03\nCisco Cisco Prime Infrastructure 3.9.1 Update 04\nCisco Cisco Prime Infrastructure 3.10 Update 01\nCisco Cisco Prime Infrastructure 3.4.2 Update 01\nCisco Cisco Prime Infrastructure 3.6.0 Update 04\nCisco Cisco Prime Infrastructure 3.6.0 Update 02\nCisco Cisco Prime Infrastructure 3.6.0 Update 03\nCisco Cisco Prime Infrastructure 3.6.0 Update 01\nCisco Cisco Prime Infrastructure 3.5.1 Update 03\nCisco Cisco Prime Infrastructure 3.5.1 Update 01\nCisco Cisco Prime Infrastructure 3.5.1 Update 02\nCisco Cisco Prime Infrastructure 3.7.0 Update 03\nCisco Cisco Prime Infrastructure 2.2.3 Update 05\nCisco Cisco Prime Infrastructure 2.2.3 Update 04\nCisco Cisco Prime Infrastructure 2.2.3 Update 06\nCisco Cisco Prime Infrastructure 2.2.3 Update 03\nCisco Cisco Prime Infrastructure 2.2.3 Update 02\nCisco Cisco Prime Infrastructure 2.2.1 Update 01\nCisco Cisco Prime Infrastructure 2.2.2 Update 03\nCisco Cisco Prime Infrastructure 2.2.2 Update 04\nCisco Cisco Prime Infrastructure 3.8.0 Update 01\nCisco Cisco Prime Infrastructure 3.8.0 Update 02\nCisco Cisco Prime Infrastructure 3.7.1 Update 01\nCisco Cisco Prime Infrastructure 3.7.1 Update 02\nCisco Cisco Prime Infrastructure 3.7.1 Update 05\nCisco Cisco Prime Infrastructure 3.9.0 Update 01\nCisco Cisco Prime Infrastructure 3.3.0 Update 01\nCisco Cisco Prime Infrastructure 3.4.1 Update 02\nCisco Cisco Prime Infrastructure 3.4.1 Update 01\nCisco Cisco Prime Infrastructure 3.5.0 Update 03\nCisco Cisco Prime Infrastructure 3.5.0 Update 01\nCisco Cisco Prime Infrastructure 3.5.0 Update 02\nCisco Cisco Prime Infrastructure 3.10.4\nCisco Cisco Prime Infrastructure 3.10.4 Update 01\nCisco Cisco Prime Infrastructure 3.10.4 Update 02\nCisco Cisco Prime Infrastructure 3.10.4 Update 03\nCisco Cisco Prime Infrastructure 3.10.5\nCisco Cisco Prime Infrastructure 3.10.6\nCisco Cisco Prime Infrastructure 3.10.6 Update 01",
    "sourceHref": "",
    "cvss": {
        "score": 4.8,
        "severity": "MEDIUM",
        "vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
        "version": "3.1"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Cisco Prime Infrastructure",
    "version": "3.0.0",
    "vendor": "Cisco",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}

Description

Basic Information

Affected Product

References

💭 Join the Security Discussion ❌ Cancel Reply