Skip to content
fr Sign in
6.1 Medium

CVE-2025-20120 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco…

Description

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Affected products and versions

Product Affected versions Fixed in
Cisco Prime Infrastructure 3.10 3.10.0 → 3.10.6 No fix stated
Cisco Prime Infrastructure 3.9 3.9.0 → 3.9.1 No fix stated
Cisco Prime Infrastructure 3.8 3.8.0 → 3.8.1 No fix stated
Cisco Prime Infrastructure 3.7 3.7.0 → 3.7.1 No fix stated
Cisco Prime Infrastructure 3.6.0 No fix stated
Cisco Prime Infrastructure 3.5 3.5.0 → 3.5.1 No fix stated
Cisco Prime Infrastructure 3.4 3.4.0 → 3.4.2 No fix stated
Cisco Prime Infrastructure 3.3 3.3.0 → 3.3.1 No fix stated
Cisco Prime Infrastructure 3.2 3.2 → 3.2.2 No fix stated
Show the 19 other branches
Product Affected versions Fixed in
Cisco Prime Infrastructure 3.1 3.1.0 → 3.1.7 No fix stated
Cisco Prime Infrastructure 3.0 3.0.0 → 3.0.7 No fix stated
Cisco Prime Infrastructure 2.2 2.2 → 2.2.10 No fix stated
Cisco Prime Infrastructure 2.1 2.1 → 2.1.56 No fix stated
Cisco Prime Infrastructure 2.0 2.0.0 → 2.0.39 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 7.1 7.1.0 → 7.1.3 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 7.0 7.0.0 → 7.0.1.3 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 6.1 6.1 → 6.1.2.2 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 6.0 6.0.0 → 6.0.3.1 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 5.1 5.1 → 5.1.4.4 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 5.0 5.0 → 5.0.2.6 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 4.1 4.1 → 4.1.1.2 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 4.0 4.0 → 4.0.3.1 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 3.1 3.1 → 3.1.3 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 3.0 3.0 → 3.0.3 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 2.2 2.2 → 2.2.5 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 2.1 2.1 → 2.1.4 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 2.0 2.0 → 2.0.4.2 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 1.2 1.2 → 1.2.7 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Prime Infrastructure

The 50 CVEs of Cisco Prime Infrastructure →
CVE-2026-20189 A vulnerability in the log file download functionality of Cisco Prime Infrastructure could allow… 4.3 Medium CVE-2026-20123 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco… 4.3 Medium CVE-2026-20111 A vulnerability in the web-based management interface of Cisco Prime Infrastructure could allow an authenticated, remote… 4.8 Medium CVE-2026-20075 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco… 4.8 Medium
Track this CVE