6.5 Moyenne

CVE-2025-20269 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco…

Description

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, low-privileged, remote attacker to retrieve arbitrary files from the underlying file system on an affected device. This vulnerability is due to insufficient input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface on an affected device. A successful exploit could allow the attacker to access sensitive files from the affected device.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Evolved Programmable Network Manager (EPNM)	8.1.0	Pas de correctif indiqué
Cisco Evolved Programmable Network Manager (EPNM) 8.0	8.0.0 → 8.0.1	Pas de correctif indiqué
Cisco Evolved Programmable Network Manager (EPNM) 7.1	7.1.0 → 7.1.3	Pas de correctif indiqué
Cisco Evolved Programmable Network Manager (EPNM) 7.0	7.0.0 → 7.0.1.2	Pas de correctif indiqué
Cisco Prime Infrastructure 3.10	3.10 → 3.10.6	Pas de correctif indiqué

Références

cisco-sa-pi-epnm-TET4GxBX sec.cloudapps.cisco.com
CSCvd36820 bst.cloudapps.cisco.com
sec.cloudapps.cisco.com sec.cloudapps.cisco.com
Cisco Event Response: March 2018 Semiannual Cisco IOS and IOS XE Software Security Advisory Bundled Publication sec.cloudapps.cisco.com

Chronologie

Publiée 20 août 2025
Dernière modification 20 août 2025

Les 21 CVE de Cisco Evolved Programmable Network Manager (EPNM) →

CVE-2026-20155 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow… 8.0 Élevée CVE-2026-20123 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco… 4.3 Moyenne CVE-2026-20075 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco… 4.8 Moyenne CVE-2025-20280 A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco… 4.8 Moyenne

Suivre cette CVE