CVE-2026-20123

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20123", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2025-10-08T11:59:15.377Z", "datePublished": "2026-02-04T16:11:56.495Z", "dateUpdated": "2026-02-04T16:40:42.923Z"}, "containers": {"cna": {"title": "Cisco Prime Infrastructure and Evolved Programmable Network Manager Open Redirect Vulnerability", "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE"}}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.\r\n\r\nThis vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-pi-redirect-6sX82dN", "name": "cisco-sa-epnm-pi-redirect-6sX82dN"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "source": {"advisory": "cisco-sa-epnm-pi-redirect-6sX82dN", "discovery": "EXTERNAL", "defects": ["CSCwo86413"]}, "problemTypes": [{"descriptions": [{"lang": "en", "description": "URL Redirection to Untrusted Site ('Open Redirect')", "type": "cwe", "cweId": "CWE-601"}]}], "affected": [{"vendor": "Cisco", "product": "Cisco Evolved Programmable Network Manager (EPNM)", "versions": [{"version": "7.1.1", "status": "affected"}, {"version": "7.1.2.1", "status": "affected"}, {"version": "7.1.3", "status": "affected"}, {"version": "7.1.2", "status": "affected"}, {"version": "7.1.0", "status": "affected"}, {"version": "8.0.0", "status": "affected"}, {"version": "8.0.0.1", "status": "affected"}, {"version": "7.1.3.1", "status": "affected"}, {"version": "7.1.4", "status": "affected"}, {"version": "8.1.0", "status": "affected"}, {"version": "8.0.1", "status": "affected"}, {"version": "7.1.4.1", "status": "affected"}, {"version": "8.0.1.1", "status": "affected"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Prime Infrastructure", "versions": [{"version": "3.10.0", "status": "affected"}, {"version": "3.10.2", "status": "affected"}, {"version": "3.10.3", "status": "affected"}, {"version": "3.10", "status": "affected"}, {"version": "3.10.1", "status": "affected"}, {"version": "3.10 Update 01", "status": "affected"}, {"version": "3.10.4", "status": "affected"}, {"version": "3.10.4 Update 01", "status": "affected"}, {"version": "3.10.4 Update 02", "status": "affected"}, {"version": "3.10.4 Update 03", "status": "affected"}, {"version": "3.10.5", "status": "affected"}, {"version": "3.10.6", "status": "affected"}, {"version": "3.10.6 Update 01", "status": "affected"}, {"version": "3.10.6 Security Update 03", "status": "affected"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-02-04T16:11:56.495Z"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-04T16:40:37.285394Z", "id": "CVE-2026-20123", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-04T16:40:42.923Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20123", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-04T16:40:37.285394Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-04T16:40:40.544Z"}}], "cna": {"title": "Cisco Prime Infrastructure and Evolved Programmable Network Manager Open Redirect Vulnerability", "source": {"defects": ["CSCwo86413"], "advisory": "cisco-sa-epnm-pi-redirect-6sX82dN", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Evolved Programmable Network Manager (EPNM)", "versions": [{"status": "affected", "version": "7.1.1"}, {"status": "affected", "version": "7.1.2.1"}, {"status": "affected", "version": "7.1.3"}, {"status": "affected", "version": "7.1.2"}, {"status": "affected", "version": "7.1.0"}, {"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "8.0.0.1"}, {"status": "affected", "version": "7.1.3.1"}, {"status": "affected", "version": "7.1.4"}, {"status": "affected", "version": "8.1.0"}, {"status": "affected", "version": "8.0.1"}, {"status": "affected", "version": "7.1.4.1"}, {"status": "affected", "version": "8.0.1.1"}], "defaultStatus": "unknown"}, {"vendor": "Cisco", "product": "Cisco Prime Infrastructure", "versions": [{"status": "affected", "version": "3.10.0"}, {"status": "affected", "version": "3.10.2"}, {"status": "affected", "version": "3.10.3"}, {"status": "affected", "version": "3.10"}, {"status": "affected", "version": "3.10.1"}, {"status": "affected", "version": "3.10 Update 01"}, {"status": "affected", "version": "3.10.4"}, {"status": "affected", "version": "3.10.4 Update 01"}, {"status": "affected", "version": "3.10.4 Update 02"}, {"status": "affected", "version": "3.10.4 Update 03"}, {"status": "affected", "version": "3.10.5"}, {"status": "affected", "version": "3.10.6"}, {"status": "affected", "version": "3.10.6 Update 01"}, {"status": "affected", "version": "3.10.6 Security Update 03"}], "defaultStatus": "unknown"}], "exploits": [{"lang": "en", "value": "The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-pi-redirect-6sX82dN", "name": "cisco-sa-epnm-pi-redirect-6sX82dN"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.\r\n\r\nThis vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-601", "description": "URL Redirection to Untrusted Site ('Open Redirect')"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2026-02-04T16:11:56.495Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20123", "state": "PUBLISHED", "dateUpdated": "2026-02-04T16:40:42.923Z", "dateReserved": "2025-10-08T11:59:15.377Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2026-02-04T16:11:56.495Z", "assignerShortName": "cisco"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "Cisco Evolved Programmable Network Manager (EPNM)", "vendor": "Cisco", "versions": [{"status": "affected", "version": "7.1.1"}, {"status": "affected", "version": "7.1.2.1"}, {"status": "affected", "version": "7.1.3"}, {"status": "affected", "version": "7.1.2"}, {"status": "affected", "version": "7.1.0"}, {"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "8.0.0.1"}, {"status": "affected", "version": "7.1.3.1"}, {"status": "affected", "version": "7.1.4"}, {"status": "affected", "version": "8.1.0"}, {"status": "affected", "version": "8.0.1"}, {"status": "affected", "version": "7.1.4.1"}, {"status": "affected", "version": "8.0.1.1"}]}, {"defaultStatus": "unknown", "product": "Cisco Prime Infrastructure", "vendor": "Cisco", "versions": [{"status": "affected", "version": "3.10.0"}, {"status": "affected", "version": "3.10.2"}, {"status": "affected", "version": "3.10.3"}, {"status": "affected", "version": "3.10"}, {"status": "affected", "version": "3.10.1"}, {"status": "affected", "version": "3.10 Update 01"}, {"status": "affected", "version": "3.10.4"}, {"status": "affected", "version": "3.10.4 Update 01"}, {"status": "affected", "version": "3.10.4 Update 02"}, {"status": "affected", "version": "3.10.4 Update 03"}, {"status": "affected", "version": "3.10.5"}, {"status": "affected", "version": "3.10.6"}, {"status": "affected", "version": "3.10.6 Update 01"}, {"status": "affected", "version": "3.10.6 Security Update 03"}]}], "source": "psirt@cisco.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*", "matchCriteriaId": "317FDB7B-04C7-4754-AC47-05012E5898FF", "versionEndExcluding": "8.1.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:prime_infrastructure:*:-:*:*:*:*:*:*", "matchCriteriaId": "EF7C2643-1964-467F-BCF5-48264CF3C1ED", "versionEndExcluding": "3.10.6", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:prime_infrastructure:3.10.6:-:*:*:*:*:*:*", "matchCriteriaId": "94273457-DA21-40F8-B8E8-A6DA0F5A8300", "vulnerable": true}, {"criteria": "cpe:2.3:a:cisco:prime_infrastructure:3.10.6:security_update_01:*:*:*:*:*:*", "matchCriteriaId": "3A33A68B-7264-44F1-AF87-992FBA582FA6", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to redirect a user to a malicious web page.\r\n\r\nThis vulnerability is due to improper input validation of the parameters in the HTTP request. An attacker could exploit this vulnerability by intercepting and modifying an HTTP request from a user. A successful exploit could allow the attacker to redirect the user to a malicious web page."}, {"lang": "es", "value": "Una vulnerabilidad en la interfaz de gesti\u00f3n basada en web de Cisco Evolved Programmable Network Manager (EPNM) y Cisco Prime Infrastructure podr\u00eda permitir a un atacante remoto no autenticado redirigir a un usuario a una p\u00e1gina web maliciosa.\n\nEsta vulnerabilidad se debe a una validaci\u00f3n de entrada incorrecta de los par\u00e1metros en la solicitud HTTP. Un atacante podr\u00eda explotar esta vulnerabilidad interceptando y modificando una solicitud HTTP de un usuario. Un exploit exitoso podr\u00eda permitir al atacante redirigir al usuario a una p\u00e1gina web maliciosa."}], "id": "CVE-2026-20123", "lastModified": "2026-06-29T17:13:22.217", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "psirt@cisco.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20123", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-04T16:40:37.285394Z", "version": "2.0.3"}}]}, "published": "2026-02-04T17:16:14.627", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-pi-redirect-6sX82dN"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-601"}], "source": "psirt@cisco.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-17T23:28:44.639136+00:00", "value": {"mitigation_remediation": ["Upgrade Cisco EPNM and Prime Infrastructure to the latest versions that address the open\u2011redirect issue, as specified in Cisco\u2019s security advisory.", "If an upgrade cannot be performed immediately, block or sanitize the vulnerable URL parameters by placing a web proxy or firewall in front of the management interface to prevent external manipulation of requests.", "Enable HSTS and enforce HTTPS on the management web interface to reduce the risk of man\u2011in\u2011the\u2011middle interception of request parameters.", "Monitor access logs for unexpected redirects and run automated web\u2011application scans to confirm the vulnerability has been eliminated."], "summary": {"action": "Patch ASAP", "impact": "Open Redirect"}, "threat_synthesis": {"affected_systems": "Affected products include Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure. For Prime Infrastructure, version 3.10.6:update01 is explicitly listed as affected; no specific EPNM version numbers are provided in the advisory.", "description_and_impact": "The vulnerability in Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure stems from improper input validation of HTTP request parameters, which allows an unauthenticated attacker to redirect users to malicious web pages. This default open\u2011redirect flaw could be used to launch phishing attacks or drive\u2011by download scenarios, potentially compromising user privacy or delivering malware. The underlying weakness is classified as CWE\u2011601.", "risk_and_exploitability": "The CVSS score of 4.3 ranks this vulnerability as moderate. The EPSS score of less than 1% indicates a very low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. An attacker can exploit the flaw by intercepting or modifying HTTP requests directed to the management interface; the attack does not require authentication or elevated privileges. Because the exploit is performed by manipulating received requests, any user who interacts with the vulnerable interface could be redirected, but no direct data loss or code execution is reported."}}}}, "created": "2026-02-04T21:17:58.442851+00:00", "updated": "2026-04-17T23:30:15.920376+00:00", "vendors": ["cisco", "cisco$PRODUCT$evolved_programmable_network_manager", "cisco$PRODUCT$prime_infrastructure"]}