CVE-2017-6699: A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Evolved Progra...

Security readout for executives and security teams

This flaw lets a remote attacker lure an administrator or other interface user into triggering reflected script content in Cisco Prime Infrastructure or Cisco EPNM. The main business concern is compromise of a management-session context, not direct device takeover from the CVE text alone. Exposure is most likely where Cisco PI or EPNM web management interfaces are reachable by administrators and not tightly restricted. Internet or broad internal access would increase risk. Treat this as a management-plane web risk. It is not documented here as actively exploited, but affected network management systems deserve timely review because administrator sessions are high-value. Mitigation focus: Inventory Cisco Prime Infrastructure and EPNM deployments.; Check Cisco advisory cisco-sa-20170621-piepnm3 for vendor fixes or workarounds.; Restrict management interface access to trusted admin networks or VPN..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.