CVE-2019-1825— Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerabilities
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-1825
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerabilities
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary SQL queries. This vulnerability exist because the software improperly validates user-supplied input in SQL queries. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains malicious SQL statements to the affected application. A successful exploit could allow the attacker to view or modify entries in some database tables, affecting the integrity of the data.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
SQL命令中使用的特殊元素转义处理不恰当(SQL注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Cisco Prime Infrastructure Software和Cisco Evolved Programmable Network Manager SQL注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Prime Infrastructure Software和Cisco Evolved Programmable Network Manager都是美国思科（Cisco）公司的产品。Cisco Prime Infrastructure Software是一套通过Cisco Prime LAN Management Solution（LMS）和Cisco Prime Network Control System（NCS）技术进行无线管理的软件。Cisco Evolved Programmable
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Prime Infrastructure | 3.4 | - |
II. Public POCs for CVE-2019-1825
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-1825
请登录查看更多情报信息。
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-pi-sqlinjectvendor-advisoryx_refsource_CISCO
- https://nvd.nist.gov/vuln/detail/CVE-2019-1825
Same Patch Batch · Cisco · 2019-05-16 · 18 CVEs total
| CVE-2019-1860 | Cisco Unified Intelligence Center Remote File Injection Vulnerability | |
| CVE-2019-1824 | Cisco Prime Infrastructure and Evolved Programmable Network Manager SQL Injection Vulnerab | |
| CVE-2019-1823 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution | |
| CVE-2019-1822 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution | |
| CVE-2019-1821 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Remote Code Execution | |
| CVE-2019-1820 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnera | |
| CVE-2019-1819 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnera | |
| CVE-2019-1818 | Cisco Prime Infrastructure and Evolved Programmable Network Manager Path Traversal Vulnera | |
| CVE-2019-1832 | Cisco Firepower Threat Defense Software Detection Engine Policy Bypass Vulnerability | |
| CVE-2019-1780 | Cisco FXOS and NX-OS Software Command Injection Vulnerability | |
| CVE-2019-1858 | Cisco FXOS and NX-OS Software Simple Network Management Protocol Denial of Service Vulnera | |
| CVE-2019-1853 | Cisco AnyConnect Secure Mobility Client for Linux Out-of-Bounds Memory Read Vulnerability | |
| CVE-2019-1851 | Cisco Identity Services Engine Arbitrary Client Certificate Creation Vulnerability | |
| CVE-2019-1849 | Cisco IOS XR Software BGP MPLS-Based EVPN Denial of Service Vulnerability | |
| CVE-2019-1846 | Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Services Routers MPLS OAM Deni | |
| CVE-2019-1833 | Cisco Firepower Threat Defense Software SSL/TLS Policy Bypass Vulnerability | |
| CVE-2019-1768 | Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Prime Infrastructure
- CVE-2026-20189
Cisco Prime Infrastructure Information Disclosure Vulnerabil - CVE-2026-20111
Cisco Prime Infrastructure Stored Cross-Site Scripting Vulne - CVE-2025-20203
Cisco Evolved Programmable Network Manager和Cisco Prime Infra - CVE-2025-20120
Cisco Evolved Programmable Network Manager和Cisco Prime Infra - CVE-2023-20260
Cisco Evolved Programmable Network Manager和Cisco Prime Infra
Same vendor: Cisco
- CVE-2026-20219
Cisco Slido 安全漏洞 - CVE-2026-20034
Cisco Unity Connection Remote Code Execution Vulnerability - CVE-2026-20035
Cisco Unity Connection Server-Side Request Forgery Vulnerabi - CVE-2026-20167
Cisco IoT Field Network Director Remote Device Denial of Ser - CVE-2026-20169
Cisco IoT Field Network Director Command Injection Vulnerabi
Same weakness: CWE-89
- CVE-2021-47941
WordPress Plugin Survey & Poll 1.5.7.3 SQL Injection via sss - CVE-2021-47930
Balbooa Joomla Forms Builder 2.0.6 SQL Injection Unauthentic - CVE-2021-47928
Opencart TMD Vendor System 3.x Blind SQL Injection via produ - CVE-2026-8231
CodeAstro Online Catering Ordering System deleteorder.php sq - CVE-2025-14179
SQL injection in pdo_firebird via NUL bytes in quoted string
V. Comments for CVE-2019-1825
No comments yet