CVE-2014-2152: Cross-site request forgery (CSRF) vulnerability in the INSERT page in Cisco Prime Infrastructure (PI) allow...

Security readout for executives and security teams

CVE-2014-2152 is a CSRF issue in Cisco Prime Infrastructure. An attacker could trick a logged-in user into sending an unintended request to the INSERT page. Business urgency depends on whether vulnerable Prime Infrastructure is deployed and who can access it. Exposure is likely limited to organizations running affected Cisco Prime Infrastructure instances. The bundle does not identify affected versions, so teams must compare deployed versions against Cisco’s advisory and asset inventory. Treat this as a focused remediation item for environments using Cisco Prime Infrastructure. It is not KEV-listed and lacks supplied severity scoring, but management-plane CSRF can still create business risk if privileged users are targeted. Mitigation focus: Check Cisco’s advisory for affected versions, fixed releases, and workarounds.; Restrict Cisco Prime Infrastructure access to trusted administrative networks.; Prioritize updating or mitigating internet-reachable or broadly reachable PI instances..

Prepared

Jun 14, 2026, 05:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.