CVE-2025-20272: Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure B

Description

A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, low-privileged, remote attacker to conduct a blind SQL injection attack. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected API. A successful exploit could allow the attacker to view data in some database tables on an affected device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cisco Cisco Evolved Programmable Network Manager (EPNM)

Default version status: unknown

3.0.1affected
3.1.2affected
1.2affected
3.1.1affected
3.1.3affected
3.1affected
3.0.3affected
3.0.2affected
3.0affected
2.2affected
1.1affected
2.1affected
2.0affected
4.1affected
4.1.1affected
4.0.3affected
4.0.1affected
4.0.2affected
4.0affected
5.0affected
5.0.1affected
5.1.1affected
5.1affected
5.0.2affected
5.1.2affected
5.1.3affected
5.1.4affected
6.1.1affected
6.1affected
6.0.0affected
6.0.1affected
6.0.2affected
7.0.0affected
1.2.5affected
1.2.6affected
2.0.1affected
1.2.2affected
1.2.3affected
1.2.4affected
1.2.7affected
1.2.1.2affected
2.2.1affected
2.1.3affected
2.0.2affected
2.0.3affected
2.1.2affected
2.0.4affected
2.1.1affected
5.0.2.5affected
5.1.4.3affected
6.0.2.1affected
6.1.1.1affected
5.0.2.1affected
5.0.2.2affected
5.0.2.3affected
5.0.2.4affected
5.1.4.1affected
5.1.4.2affected
2.1.4affected
2.2.4affected
2.2.3affected
2.2.5affected
5.1.3.2affected
5.1.3.1affected
6.0.1.1affected
4.1.1.2affected
4.1.1.1affected
4.0.3.1affected
2.0.1.1affected
2.1.1.3affected
2.1.1.1affected
2.1.1.4affected
2.0.4.2affected
2.0.4.1affected
2.1.2.2affected
2.1.2.3affected
2.0.2.1affected
2.1.3.4affected
2.1.3.3affected
2.1.3.2affected
2.1.3.5affected
2.2.1.2affected
2.2.1.1affected
2.2.1.4affected
2.2.1.3affected
1.2.4.2affected
1.2.2.4affected
6.0.3affected
5.1.4.4affected
5.0.2.6affected
6.0.3.1affected
6.1.2affected
6.1.1.2.2affected
6.1.2.1affected
6.1.2.2affected
7.1.1affected
7.1.2.1affected
7.0.1.3affected
7.1.3affected
7.1.2affected
7.0.1.2affected
7.0.1.1affected
7.0.1affected
7.1.0affected
8.0.0affected
6.1.2.3affected
8.0.0.1affected
7.1.3.1affected
7.1.4affected
8.1.0affected

Cisco Cisco Prime Infrastructure

Default version status: unknown

3.0.0affected
3.1.0affected
3.1.5affected
2.1affected
2.0.0affected
3.6.0affected
3.7.0affected
3.4.0affected
3.3.0affected
3.2affected
3.5.0affected
3.2.0-FIPSaffected
2.2affected
3.8.0-FEDaffected
3.9.0affected
3.8.0affected
3.10.0affected
3.1.1affected
2.1.2affected
2.2.1affected
2.2.0affected
3.0.2affected
3.0.3affected
3.0.1affected
2.2.2affected
2.2.3affected
2.1.0affected
2.1.1affected
3.9.1affected
2.0.10affected
3.8.1affected
3.7.1affected
3.5.1affected
3.4.2affected
3.3.1affected
3.1.7affected
3.2.1affected
3.2.2affected
3.1.6affected
3.1.2affected
3.4.1affected
3.1.3affected
3.1.4affected
3.0.6affected
2.2.10affected
3.0.4affected
3.0.5affected
2.1.56affected
2.2.4affected
2.2.9affected
2.2.8affected
2.2.5affected
2.2.7affected
2.0.39affected
3.8_DP1affected
3.9_DP1affected
3.7_DP2affected
3.6_DP1affected
3.5_DP4affected
3.5_DP2affected
3.4_DP10affected
3.7_DP1affected
3.5_DP3affected
3.4_DP11affected
3.5_DP1affected
3.4_DP8affected
3.4_DP1affected
3.4_DP3affected
3.4_DP5affected
3.4_DP2affected
3.4_DP7affected
3.4_DP6affected
3.3_DP4affected
3.4_DP4affected
3.4_DP9affected
3.1_DP16affected
3.3_DP2affected
3.3_DP3affected
3.1_DP15affected
3.3_DP1affected
3.1_DP13affected
3.2_DP2affected
3.2_DP1affected
3.2_DP3affected
3.1_DP14affected
3.2_DP4affected
3.1_DP7affected
3.1_DP10affected
3.1_DP11affected
3.1_DP4affected
3.1_DP6affected
3.1_DP12affected
3.1_DP5affected
3.0.7affected
3.1_DP9affected
3.1_DP8affected
3.10_DP1affected
3.10.2affected
3.10.3affected
3.10affected
3.10.1affected
3.7.1 Update 03affected
3.7.1 Update 04affected
3.7.1 Update 06affected
3.7.1 Update 07affected
3.8.1 Update 01affected
3.8.1 Update 02affected
3.8.1 Update 03affected
3.8.1 Update 04affected
3.9.1 Update 01affected
3.9.1 Update 02affected
3.9.1 Update 03affected
3.9.1 Update 04affected
3.10 Update 01affected
3.4.2 Update 01affected
3.6.0 Update 04affected
3.6.0 Update 02affected
3.6.0 Update 03affected
3.6.0 Update 01affected
3.5.1 Update 03affected
3.5.1 Update 01affected
3.5.1 Update 02affected
3.7.0 Update 03affected
2.2.3 Update 05affected
2.2.3 Update 04affected
2.2.3 Update 06affected
2.2.3 Update 03affected
2.2.3 Update 02affected
2.2.1 Update 01affected
2.2.2 Update 03affected
2.2.2 Update 04affected
3.8.0 Update 01affected
3.8.0 Update 02affected
3.7.1 Update 01affected
3.7.1 Update 02affected
3.7.1 Update 05affected
3.9.0 Update 01affected
3.3.0 Update 01affected
3.4.1 Update 02affected
3.4.1 Update 01affected
3.5.0 Update 03affected
3.5.0 Update 01affected
3.5.0 Update 02affected
3.10.4affected
3.10.4 Update 01affected
3.10.4 Update 02affected
3.10.4 Update 03affected
3.10.5affected
3.10.6affected
3.10.6 Update 01affected

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-piepnm-bsi-25JJqsbb ↗