CVE-2016-1290

CVE-2016-1290 describes a privilege escalation vulnerability in the web API of Cisco Prime Infrastructure versions 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2. A remote authenticated attacker can bypass Role-Based Access Control (RBAC) restrictions and gain elevated privileges by crafting an HTTP request that circumvents a pattern filter. This vulnerability carries a CVSSv3 score of 8.1 (HIGH), indicating a network-based attack with low attack complexity, requiring only low privileges, and resulting in high impact to confidentiality and integrity. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, though it received limited media coverage at the time of disclosure.