CVE-2016-1406: The API web interface in Cisco Prime Infrastructure before 3.1 and Cisco Evolved Programmable Network Manag...

Security readout for executives and security teams

An authenticated user of affected Cisco network-management platforms could bypass intended role limits through the API web interface. That could expose sensitive information and allow privilege gain inside tools used to manage network infrastructure. Exposure is limited to organizations running the named Cisco products below the fixed versions, especially where authenticated API access is available to lower-privileged users. Treat as high priority where vulnerable Cisco management servers remain in use. The flaw requires authentication, but successful abuse could undermine administrative trust in network-management systems. Mitigation focus: Upgrade Cisco Prime Infrastructure to 3.1 or later.; Upgrade Cisco EPNM to 1.2.4 or later.; Review Cisco advisory guidance for supported fixed releases..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.