1. Home
  2. CVE Database
  3. CVE-2026-20123
MEDIUM · 4.3

CVE-2026-20123

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a ...

Vulnerability Description

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
CiscoEvolved Programmable Network Manager< 8.1.1
CiscoPrime Infrastructure<= 3.9

Related Weaknesses (CWE)

CWE-601

References

FAQ

What is CVE-2026-20123?

CVE-2026-20123 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a ...

How severe is CVE-2026-20123?

CVE-2026-20123 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-20123?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Evolved Programmable Network Manager, Cisco Prime Infrastructure.