What’s Vulnerable › Products

Cisco Prime Infrastructure vulnerabilities

89 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your Cisco Prime Infrastructure version is affected

Exploited Cisco Prime Infrastructure vulnerabilities

• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability

Latest Cisco Prime Infrastructure vulnerabilities

• CVE-2026-20189 — Cisco Prime Infrastructure Information Disclosure Vulnerability (CVSS 4.3)
• CVE-2026-20123 — Cisco Prime Infrastructure and Evolved Programmable Network Manager Open Redirect Vulnerability (CVSS 6.1)
• CVE-2026-20111 — Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability (CVSS 4.8)
• CVE-2026-20075 — Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability (CVSS 4.8)
• CVE-2025-20280 — Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability (CVSS 4.8)
• CVE-2025-20270 — Cisco Evolved Programmable Network Manager Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2025-20269 — Cisco Evolved Programmable Network Manager and Prime Infrastructure Arbitrary File Download Vulnerability (CVSS 6.5)
• CVE-2025-20272 — Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Blind SQL Injection Vulnerability (CVSS 4.3)
• CVE-2025-20203 — (CVSS 4.8)
• CVE-2025-20120 — (CVSS 6.1)
• CVE-2022-20657 — Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Cross-Site Scripting Vulnerability (CVSS 6.1)
• CVE-2022-20656 — Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Path Traversal Vulnerability (CVSS 6.5)
• CVE-2024-20514 — Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability (CVSS 5.4)
• CVE-2023-20271 — (CVSS 6.5)
• CVE-2023-20260 — (CVSS 6.7)
• CVE-2023-20258 — (CVSS 7.2)
• CVE-2023-20257 — (CVSS 4.8)
• CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability (CVSS 7.5) — exploited
• CVE-2023-20222 — (CVSS 6.1)
• CVE-2023-20205 — (CVSS 5.4)
• CVE-2023-20203 — (CVSS 5.4)
• CVE-2023-20201 — (CVSS 5.4)
• CVE-2023-20121 — Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities (CVSS 6.7)
• CVE-2023-20131 — Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities (CVSS 5.4)
• CVE-2023-20130 — Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities (CVSS 6.5)