CVE-2019-1906— Cisco Prime Infrastructure Virtual Domain Privilege Escalation Vulnerability
Quick assessment
Affected
Cisco Cisco Prime Infrastructure
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Prime Infrastructure Software是美国思科（Cisco）公司的一套基础网络生命周期管理解决方案。该产品集成了Cisco Prime LAN Management Solution（LMS）和Cisco Prime Network Control System（NCS）。Virtual Domain system是其中的一套虚拟域系统。 Cisco PI中的Virtual Domain系统存在权限许可和访问控制问题漏洞，该漏洞源于程序没有充分验证API请求。远程攻击者可
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-1906
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Prime Infrastructure Virtual Domain Privilege Escalation Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the Virtual Domain system of Cisco Prime Infrastructure (PI) could allow an authenticated, remote attacker to change the virtual domain configuration, which could lead to privilege escalation. The vulnerability is due to improper validation of API requests. An attacker could exploit this vulnerability by manipulating requests sent to an affected PI server. A successful exploit could allow the attacker to change the virtual domain configuration and possibly elevate privileges.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
权限、特权和访问控制
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Prime Infrastructure Virtual Domain系统权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Prime Infrastructure Software是美国思科（Cisco）公司的一套基础网络生命周期管理解决方案。该产品集成了Cisco Prime LAN Management Solution（LMS）和Cisco Prime Network Control System（NCS）。Virtual Domain system是其中的一套虚拟域系统。 Cisco PI中的Virtual Domain系统存在权限许可和访问控制问题漏洞，该漏洞源于程序没有充分验证API请求。远程攻击者可
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Prime Infrastructure | 3.6(0.0) | - |
|
II. Public POCs for CVE-2019-1906
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-1906
请登录查看更多情报信息。
Vendor Advisories for CVE-2019-1906 (2)
-
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-prime-privescal vendor-advisory x_refsource_CISCO
Same Patch Batch · Cisco · 2019-06-20 · 24 CVEs total
| CVE-2019-1632 | Cisco Integrated Management Controller Cross-Site Request Forgery Vulnerability | |
| CVE-2019-1899 | Cisco RV110W, RV130W, and RV215W Routers Information Disclosure Vulnerability | |
| CVE-2019-1903 | Cisco Security Manager XML Entity Expansion Vulnerability | |
| CVE-2019-1905 | Cisco Email Security Appliance GZIP Content Filter Bypass Vulnerability | |
| CVE-2019-1878 | Cisco TelePresence Endpoint Command Shell Injection Vulnerability | |
| CVE-2019-1879 | Cisco Integrated Management Controller CLI Command Injection Vulnerability | |
| CVE-2019-1897 | Cisco RV110W, RV130W, and RV215W Routers Denial of Service Vulnerability | |
| CVE-2019-1898 | Cisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access Vulnerability | |
| CVE-2019-1874 | Cisco Prime Service Catalog Cross-Site Request Forgery Vulnerability | |
| CVE-2019-1875 | Cisco Prime Service Catalog Cross-Site Scripting Vulnerability | |
| CVE-2019-1876 | Cisco Wide Area Application Services Software HTTPS Proxy Authentication Bypass Vulnerabil | |
| CVE-2019-1631 | Cisco Integrated Management Controller Information Disclosure Vulnerability | |
| CVE-2019-1623 | Cisco Meeting Server CLI Command Injection Vulnerability | |
| CVE-2019-1843 | Cisco RV110W, RV130W, and RV215W Routers Management Interface Denial of Service Vulnerabil | |
| CVE-2019-1848 | Cisco DNA Center Authentication Bypass Vulnerability | |
| CVE-2019-1869 | Cisco StarOS Denial of Service Vulnerability | |
| CVE-2019-1627 | Cisco Integrated Management Controller Information Disclosure Vulnerability | |
| CVE-2019-1628 | Cisco Integrated Management Controller Denial of Service Vulnerability | |
| CVE-2019-1629 | Cisco Integrated Management Controller Arbitrary File Write Vulnerability | |
| CVE-2019-1630 | Cisco Integrated Management Controller Denial of Service Vulnerability |
Showing top 20 of 24 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Cisco Prime Infrastructure
-
CVE-2026-20189
Cisco Prime Infrastructure Information Disclosure Vulnerabil -
CVE-2026-20111
Cisco Prime Infrastructure Stored Cross-Site Scripting Vulne -
CVE-2025-20203
Cisco Evolved Programmable Network Manager和Cisco Prime Infra -
CVE-2025-20120
Cisco Evolved Programmable Network Manager和Cisco Prime Infra -
CVE-2023-20260
Cisco Evolved Programmable Network Manager和Cisco Prime Infra
Same vendor: Cisco
-
CVE-2026-76426
Cisco ISE REST API SQL Injection Vulnerability -
CVE-2026-20121
CIsco FTD Bypass Access List -
CVE-2026-76431
Cisco Identity Services Engine Arbitrary File Deletion Vulne -
CVE-2026-76427
Cisco ISE XML External Entity Injection Vulnerability -
CVE-2026-76447
Cisco Identity Services Engine Certificate Reload Vulnerabil
V. Comments for CVE-2019-1906
No comments yet