CVE 4.3 MEDIUM

Cisco Prime Infrastructure and Evolved Programmable Network Manager Open Redirect Vulnerability_CVE-2026-20123

4.3 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.

This vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page.

Basic Information

ID CVE-2026-20123
Source cisco
Published Feb 4, 2026 at 16:11
Modified Feb 4, 2026 at 16:40

Affected Product

Vendor Cisco
Product Cisco Evolved Programmable Network Manager (EPNM)
Version 7.1.1
Affected Versions Cisco Cisco Evolved Programmable Network Manager (EPNM) 7.1.1
Cisco Cisco Evolved Programmable Network Manager (EPNM) 7.1.2.1
Cisco Cisco Evolved Programmable Network Manager (EPNM) 7.1.3
Cisco Cisco Evolved Programmable Network Manager (EPNM) 7.1.2
Cisco Cisco Evolved Programmable Network Manager (EPNM) 7.1.0
Cisco Cisco Evolved Programmable Network Manager (EPNM) 8.0.0
Cisco Cisco Evolved Programmable Network Manager (EPNM) 8.0.0.1
Cisco Cisco Evolved Programmable Network Manager (EPNM) 7.1.3.1
Cisco Cisco Evolved Programmable Network Manager (EPNM) 7.1.4
Cisco Cisco Evolved Programmable Network Manager (EPNM) 8.1.0
Cisco Cisco Evolved Programmable Network Manager (EPNM) 8.0.1
Cisco Cisco Evolved Programmable Network Manager (EPNM) 7.1.4.1
Cisco Cisco Evolved Programmable Network Manager (EPNM) 8.0.1.1
Cisco Cisco Prime Infrastructure 3.10.0
Cisco Cisco Prime Infrastructure 3.10.2
Cisco Cisco Prime Infrastructure 3.10.3
Cisco Cisco Prime Infrastructure 3.10
Cisco Cisco Prime Infrastructure 3.10.1
Cisco Cisco Prime Infrastructure 3.10 Update 01
Cisco Cisco Prime Infrastructure 3.10.4
Cisco Cisco Prime Infrastructure 3.10.4 Update 01
Cisco Cisco Prime Infrastructure 3.10.4 Update 02
Cisco Cisco Prime Infrastructure 3.10.4 Update 03
Cisco Cisco Prime Infrastructure 3.10.5
Cisco Cisco Prime Infrastructure 3.10.6
Cisco Cisco Prime Infrastructure 3.10.6 Update 01
Cisco Cisco Prime Infrastructure 3.10.6 Security Update 03

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.