CVE-2016-1359
HighSummary
Cisco Prime Infrastructure 3.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP request that is mishandled during viewing of a log file.
Risk Assessment
This vulnerability may lead to remote code execution, posing a serious threat to the integrity and confidentiality of the system.
Recommendation
It is recommended to update Cisco Prime Infrastructure to the latest version to mitigate this vulnerability and to monitor logs for potential exploitation attempts.
Other vulnerabilities in Cisco Prime Infrastructure 3.0
See all- CVE-2016-1442High
The administrative web interface in Cisco Prime Infrastructure (PI) before 3.1.1 allows remote authenticated users to execute arbitrary commands via crafted field values.
- CVE-2026-20189Medium
A vulnerability in the log file download functionality of Cisco Prime Infrastructure allows an authenticated, remote attacker to download arbitrary log files from the server. This is due to insufficient authorization checks on the download service API.
- CVE-2026-20111Medium
A vulnerability in the web-based management interface of Cisco Prime Infrastructure allows an authenticated, remote attacker to perform a stored cross-site scripting (XSS) attack against users of the interface. This is due to improper validation of user-supplied input.
- CVE-2025-20272Medium
A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) allows an authenticated, low-privileged attacker to perform a blind SQL injection attack. The issue is due to insufficient validation of user-supplied input.
Original NVD description (English source)
Cisco Prime Infrastructure 3.0 allows remote authenticated users to execute arbitrary code via a crafted HTTP request that is mishandled during viewing of a log file, aka Bug ID CSCuw81494.