Skip to content
fr Sign in
4.3 Medium

CVE-2025-20272 A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager…

Description

A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, low-privileged, remote attacker to conduct a blind SQL injection attack. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected API. A successful exploit could allow the attacker to view data in some database tables on an affected device.

Affected products and versions

Product Affected versions Fixed in
Cisco Evolved Programmable Network Manager (EPNM) 8.1.0 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 8.0 8.0.0 → 8.0.0.1 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 7.1 7.1.0 → 7.1.4 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 7.0 7.0.0 → 7.0.1.3 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 6.1 6.1 → 6.1.2.3 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 6.0 6.0.0 → 6.0.3.1 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 5.1 5.1 → 5.1.4.4 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 5.0 5.0 → 5.0.2.6 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 4.1 4.1 → 4.1.1.2 No fix stated
Show the 22 other branches
Product Affected versions Fixed in
Cisco Evolved Programmable Network Manager (EPNM) 4.0 4.0 → 4.0.3.1 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 3.1 3.1 → 3.1.3 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 3.0 3.0 → 3.0.3 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 2.2 2.2 → 2.2.5 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 2.1 2.1 → 2.1.4 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 2.0 2.0 → 2.0.4.2 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 1.2 1.2 → 1.2.7 No fix stated
Cisco Evolved Programmable Network Manager (EPNM) 1.1 No fix stated
Cisco Prime Infrastructure 3.10 3.10 → 3.10.6 No fix stated
Cisco Prime Infrastructure 3.9 3.9.0 → 3.9.1 No fix stated
Cisco Prime Infrastructure 3.8 3.8.0-FED → 3.8.1 No fix stated
Cisco Prime Infrastructure 3.7 3.7.0 → 3.7.1 No fix stated
Cisco Prime Infrastructure 3.6.0 No fix stated
Cisco Prime Infrastructure 3.5 3.5.0 → 3.5.1 No fix stated
Cisco Prime Infrastructure 3.4 3.4.0 → 3.4.2 No fix stated
Cisco Prime Infrastructure 3.3 3.3.0 → 3.3.1 No fix stated
Cisco Prime Infrastructure 3.2 3.2 → 3.2.2 No fix stated
Cisco Prime Infrastructure 3.1 3.1.0 → 3.1.7 No fix stated
Cisco Prime Infrastructure 3.0 3.0.0 → 3.0.7 No fix stated
Cisco Prime Infrastructure 2.2 2.2 → 2.2.10 No fix stated
Cisco Prime Infrastructure 2.1 2.1 → 2.1.56 No fix stated
Cisco Prime Infrastructure 2.0 2.0.0 → 2.0.39 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Evolved Programmable Network Manager (EPNM)

The 21 CVEs of Cisco Evolved Programmable Network Manager (EPNM) →
CVE-2026-20155 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow… 8.0 High CVE-2026-20123 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco… 4.3 Medium CVE-2026-20075 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco… 4.8 Medium CVE-2025-20280 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco… 4.8 Medium
Track this CVE