CVE-2017-6698

Severity: medium (CVSS 5.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-07-04 · updated 2026-06-17
Weakness: CWE-89

Description

A vulnerability in the Cisco Prime Infrastructure (PI) and Evolved Programmable Network Manager (EPNM) SQL database interface could allow an authenticated, remote attacker to impact the confidentiality and integrity of the application by executing arbitrary SQL queries, aka SQL Injection. More Information: CSCvc23892 CSCvc35270 CSCvc35626 CSCvc35630 CSCvc49568. Known Affected Releases: 3.1(1) 2.0(4.0.45B).

Affected products

Cisco Prime Infrastructure: 2.0(4.0.45b), 3.1(1)

References

http://www.securityfocus.com/bid/99214
http://www.securitytracker.com/id/1038751
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm2
http://www.securityfocus.com/bid/99214
http://www.securitytracker.com/id/1038751
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piepnm2

Get alerted when CVE-2017-6698 or the next vulnerability affects your stack