CVE-2017-6698

5.4 mediumEPSS 0.9%

A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc23892 CSCvc35270 CSCvc35626 CSCvc35630 CSCvc49568. Known Affected Releases: 3.1(1) 2.0(4.0.45B).

Severity

CVSS 3.0

5.4 medium

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2017-07-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cisco:prime_infrastructure

References

http://www.securityfocus.com/bid/99214
http://www.securitytracker.com/id/1038751
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm2
http://www.securityfocus.com/bid/99214
http://www.securitytracker.com/id/1038751

Check your stack JSON