CVE-2015-4331
Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows...
CVE-2015-4331 is a low vulnerability (CVSS 3.5) in Cisco Prime Infrastructure, published August 22, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.78%, the 78th percentile. No source names a fixed version.
Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composition of lowercase and uppercase characters, aka Bug ID CSum59958.
Exploit likelihood
What each source reports
NVD Score used
3.5
Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composition of lowercase and uppercase characters, aka Bug ID CSum59958.
- Record
CVE-2015-4331- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composition of lowercase and uppercase characters, aka Bug ID CSum59958.
- Record
CVE-2015-4331- Updated
- 2026-11-02
EUVDEUVD-2015-4354 No score
Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composition of lowercase and uppercase characters, aka Bug ID CSum59958.
- Record
EUVD-2015-4354- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9fc5-rqh6-qhwg No score
Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows...
Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended access restrictions via a username with a modified composition of lowercase and uppercase characters, aka Bug ID CSum59958.
- Record
GHSA-9fc5-rqh6-qhwg- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |