CVE-2019-1906

CVE-2019-1906 describes an improper API request validation vulnerability in Cisco Prime Infrastructure's Virtual Domain system. This flaw allows an authenticated, remote attacker to alter virtual domain configurations, potentially leading to privilege escalation. Rated Medium severity (CVSS 6.5), the attack requires low privileges and network access, but no user interaction. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the potential for privilege escalation makes it a notable concern for affected Cisco Prime Infrastructure deployments.