Cisco Prime Infrastructure Administrative Web Interface HTML Injection Vulnerability (CVE-2016-1442)

A vulnerability in the administrative web interface of Cisco Prime Infrastructure (PI) could allow an authenticated, remote attacker to execute arbitrary commands on the affected system and on the devices managed by the system.

Cisco Prime Infrastructure（PI）管理网页界面存在漏洞，该漏洞可能使经过身份验证的远程攻击者能够在受影响系统中以及由该系统管理的设备上执行任意命令。