The vulnerability in Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure stems from improper input validation of HTTP request parameters, which allows an unauthenticated attacker to redirect users to malicious web pages. This default open‑redirect flaw could be used to launch phishing attacks or drive‑by download scenarios, potentially compromising user privacy or delivering malware. The underlying weakness is classified as CWE‑601.

Affected products include Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure. For Prime Infrastructure, version 3.10.6:update01 is explicitly listed as affected; no specific EPNM version numbers are provided in the advisory.

The CVSS score of 4.3 ranks this vulnerability as moderate. The EPSS score of less than 1% indicates a very low likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. An attacker can exploit the flaw by intercepting or modifying HTTP requests directed to the management interface; the attack does not require authentication or elevated privileges. Because the exploit is performed by manipulating received requests, any user who interacts with the vulnerable interface could be redirected, but no direct data loss or code execution is reported.