CVE-2016-1406

—

CVSS 3.0

8.8 high

EPSS

2%p75

Published

May 25, 2016 (May 25, 2016)

Modified

Jun 17, 2026

Description

The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manager before 1.2.4 allows remote authenticated users to bypass intended RBAC restrictions and obtain sensitive information, and consequently gain privileges, via crafted JSON data, aka Bug ID CSCuy12409.

Vendors: cisco
Products: evolved programmable network manager, prime infrastructure
Weakness: CWE-284
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.