Prime Security vulnerabilities (CVEs)

5 CVEs matched to Prime Security by name in NVD, none on CISA's Known Exploited list.

Back to the Prime Security profile · Alternatives to Prime Security · CVE RSS feed

Exploitation riskProbably exploited

5 of 5 CVEs assessed

confirmed exploited

EPSS ≥ 10%

96%

highest single CVE

1 CVE has an estimated 10%-or-higher chance of having already been exploited despite not appearing on CISA's KEV catalog. KEV is a curated record of confirmed cases rather than a complete census, so this is where its coverage is likely thinnest — an estimate from EPSS history, not a finding. Based on a median of 2 EPSS observations per CVE.

Likely-exploited estimates here rest on a median of 2 EPSS observations per CVE — too little history to read as a trend yet. It deepens daily as scores are collected.

CVE-2012-4629 ↗EPSS 1.9%LEV ≥96%Probably exploited
The Cisco ASA-CX Context-Aware Security module before 9.0.2-103 for Adaptive Security Appliances (ASA) devices, and Prime Security Manager (aka PRSM) before 9.0…
CVE-2016-1301 ↗EPSS 2.5%LEV ≥96%Probably exploited
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112)…
CVE-2014-2118 ↗EPSS 1.8%LEV ≥94%Probably exploited
Multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager (aka PRSM) 9.2(.1-2) and earlier allow r…

Recent changes

last 90 days

CVE-2016-1301 is now estimated at a 96% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-09-01 · NVD ↗
CVE-2012-4629 is now estimated at a 96% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-08-31 · NVD ↗
CVE-2014-2118 is now estimated at a 94% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-08-31 · NVD ↗
CVE-2014-3364 is now estimated at a 74% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-08-31 · NVD ↗
CVE-2014-3365 is now estimated at a 92% chance of having already been exploited, despite not appearing on CISA's Known Exploited Vulnerabilities catalog.2026-08-31 · NVD ↗

CVE severity over time

CVEs by year and severity

Count of matched CVEs by the year NVD published them.
Year	High	Medium	Total
2016	1	0	1
2015	0	1	1
2014	0	2	2
2012	1	0	1

Highest EPSS scores

EPSS is FIRST's estimate of the chance a CVE is exploited in the next 30 days. It measures likelihood, not impact.

CVE	EPSS	Percentile
CVE-2016-1301	2.5%	84%
CVE-2012-4629	1.9%	79%
CVE-2014-2118	1.8%	78%
CVE-2014-3365	1.8%	78%
CVE-2014-3364	0.9%	60%

Known CVEs (5)

RSS ⇢

CVE-2016-1301 ↗HIGH 8.82016
The RBAC implementation in Cisco ASA-CX Content-Aware Security software before 9.3.1.1(112) and Cisco Prime Security Manager (PRSM) software before 9.3.1.1(112) allows remote authenticated users to ch…
CVE-2014-3365 ↗MEDIUM 4.32015
Multiple cross-site scripting (XSS) vulnerabilities in Cisco Prime Security Manager (PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary web script or HTML via crafted input to the …
↗

How this is counted

CVEs come from the US National Vulnerability Database (NVD) and are matched to Prime Security by vendor name. A name match can include CVEs that concern a similarly named product, and can miss ones filed under another name. The count reflects how widely a vendor's software is deployed and examined as much as anything else, so it is not a measure of how secure the vendor is and should not be used to rank vendors. Latest CVE added here: 2026-07-11.
Known-exploited status comes from the CISA Known Exploited Vulnerabilities (KEV) catalog. Last checked: 2026-10-20.
Exploit probability (EPSS) comes from FIRST. Latest score date: 2026-10-20.