CVE-2025-20272

MEDIUM EPSS 20.8%
Published Jul 16, 202511mo ago · Modified Jun 17, 20261w ago
4.3 CVSS 3.1
Medium
Find Similar
Published Jul 16, 2025 11mo ago
Last Modified Jun 17, 2026 1w ago

Description

A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, low-privileged, remote attacker to conduct a blind SQL injection attack. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected API. A successful exploit could allow the attacker to view data in some database tables on an affected device.

CVSS Details

Base Score
4.3
Exploitability
2.8
Impact
1.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
20.8% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available

Weaknesses 1

CWE-89 SQL Injection Injection

Affected Products 259

VendorProductVersionRange
ciscoprime_infrastructure2.0.0any
ciscoprime_infrastructure2.0.10any
ciscoprime_infrastructure2.0.39any
ciscoprime_infrastructure2.1any
ciscoprime_infrastructure2.1.0any
ciscoprime_infrastructure2.1.1any
ciscoprime_infrastructure2.1.2any
ciscoprime_infrastructure2.1.56any
ciscoprime_infrastructure2.2any
ciscoprime_infrastructure2.2.0any
ciscoprime_infrastructure2.2.1any
ciscoprime_infrastructure2.2.1any
ciscoprime_infrastructure2.2.2any
ciscoprime_infrastructure2.2.2any
ciscoprime_infrastructure2.2.2any
ciscoprime_infrastructure2.2.3any
ciscoprime_infrastructure2.2.3any
ciscoprime_infrastructure2.2.3any
ciscoprime_infrastructure2.2.3any
ciscoprime_infrastructure2.2.3any
ciscoprime_infrastructure2.2.3any
ciscoprime_infrastructure2.2.4any
ciscoprime_infrastructure2.2.5any
ciscoprime_infrastructure2.2.7any
ciscoprime_infrastructure2.2.8any
ciscoprime_infrastructure2.2.9any
ciscoprime_infrastructure2.2.10any
ciscoprime_infrastructure3.0.0any
ciscoprime_infrastructure3.0.1any
ciscoprime_infrastructure3.0.2any
ciscoprime_infrastructure3.0.3any
ciscoprime_infrastructure3.0.4any
ciscoprime_infrastructure3.0.5any
ciscoprime_infrastructure3.0.6any
ciscoprime_infrastructure3.0.7any
ciscoprime_infrastructure3.1any
ciscoprime_infrastructure3.1any
ciscoprime_infrastructure3.1any
ciscoprime_infrastructure3.1any
ciscoprime_infrastructure3.1any
ciscoprime_infrastructure3.1any
ciscoprime_infrastructure3.1any
ciscoprime_infrastructure3.1any
ciscoprime_infrastructure3.1any
ciscoprime_infrastructure3.1any
ciscoprime_infrastructure3.1any
ciscoprime_infrastructure3.1any
ciscoprime_infrastructure3.1any
ciscoprime_infrastructure3.1.0any
ciscoprime_infrastructure3.1.1any
ciscoprime_infrastructure3.1.2any
ciscoprime_infrastructure3.1.3any
ciscoprime_infrastructure3.1.4any
ciscoprime_infrastructure3.1.5any
ciscoprime_infrastructure3.1.6any
ciscoprime_infrastructure3.1.7any
ciscoprime_infrastructure3.2any
ciscoprime_infrastructure3.2any
ciscoprime_infrastructure3.2any
ciscoprime_infrastructure3.2any
ciscoprime_infrastructure3.2any
ciscoprime_infrastructure3.2.0-fipsany
ciscoprime_infrastructure3.2.1any
ciscoprime_infrastructure3.2.2any
ciscoprime_infrastructure3.3any
ciscoprime_infrastructure3.3any
ciscoprime_infrastructure3.3any
ciscoprime_infrastructure3.3any
ciscoprime_infrastructure3.3.0any
ciscoprime_infrastructure3.3.0any
ciscoprime_infrastructure3.3.1any
ciscoprime_infrastructure3.4any
ciscoprime_infrastructure3.4any
ciscoprime_infrastructure3.4any
ciscoprime_infrastructure3.4any
ciscoprime_infrastructure3.4any
ciscoprime_infrastructure3.4any
ciscoprime_infrastructure3.4any
ciscoprime_infrastructure3.4any
ciscoprime_infrastructure3.4any
ciscoprime_infrastructure3.4any
ciscoprime_infrastructure3.4any
ciscoprime_infrastructure3.4.0any
ciscoprime_infrastructure3.4.1any
ciscoprime_infrastructure3.4.1any
ciscoprime_infrastructure3.4.1any
ciscoprime_infrastructure3.4.2any
ciscoprime_infrastructure3.4.2any
ciscoprime_infrastructure3.5any
ciscoprime_infrastructure3.5any
ciscoprime_infrastructure3.5any
ciscoprime_infrastructure3.5any
ciscoprime_infrastructure3.5.0any
ciscoprime_infrastructure3.5.0any
ciscoprime_infrastructure3.5.0any
ciscoprime_infrastructure3.5.0any
ciscoprime_infrastructure3.5.1any
ciscoprime_infrastructure3.5.1any
ciscoprime_infrastructure3.5.1any
ciscoprime_infrastructure3.5.1any
ciscoprime_infrastructure3.6any
ciscoprime_infrastructure3.6.0any
ciscoprime_infrastructure3.6.0any
ciscoprime_infrastructure3.6.0any
ciscoprime_infrastructure3.6.0any
ciscoprime_infrastructure3.6.0any
ciscoprime_infrastructure3.7any
ciscoprime_infrastructure3.7any
ciscoprime_infrastructure3.7.0any
ciscoprime_infrastructure3.7.0any
ciscoprime_infrastructure3.7.1any
ciscoprime_infrastructure3.7.1any
ciscoprime_infrastructure3.7.1any
ciscoprime_infrastructure3.7.1any
ciscoprime_infrastructure3.7.1any
ciscoprime_infrastructure3.7.1any
ciscoprime_infrastructure3.7.1any
ciscoprime_infrastructure3.7.1any
ciscoprime_infrastructure3.8any
ciscoprime_infrastructure3.8.0any
ciscoprime_infrastructure3.8.0any
ciscoprime_infrastructure3.8.0any
ciscoprime_infrastructure3.8.1any
ciscoprime_infrastructure3.8.1any
ciscoprime_infrastructure3.8.1any
ciscoprime_infrastructure3.8.1any
ciscoprime_infrastructure3.8.1any
ciscoprime_infrastructure3.9any
ciscoprime_infrastructure3.9.0any
ciscoprime_infrastructure3.9.0any
ciscoprime_infrastructure3.9.1any
ciscoprime_infrastructure3.9.1any
ciscoprime_infrastructure3.9.1any
ciscoprime_infrastructure3.9.1any
ciscoprime_infrastructure3.9.1any
ciscoprime_infrastructure3.10any
ciscoprime_infrastructure3.10any
ciscoprime_infrastructure3.10any
ciscoprime_infrastructure3.10.0any
ciscoprime_infrastructure3.10.1any
ciscoprime_infrastructure3.10.2any
ciscoprime_infrastructure3.10.3any
ciscoprime_infrastructure3.10.4any
ciscoprime_infrastructure3.10.4any
ciscoprime_infrastructure3.10.4any
ciscoprime_infrastructure3.10.4any
ciscoprime_infrastructure3.10.5any
ciscoprime_infrastructure3.10.6any
ciscoprime_infrastructure3.10.6any
ciscoevolved_programmable_network_manager1.1any
ciscoevolved_programmable_network_manager1.2any
ciscoevolved_programmable_network_manager1.2.1.2any
ciscoevolved_programmable_network_manager1.2.2any
ciscoevolved_programmable_network_manager1.2.2.4any
ciscoevolved_programmable_network_manager1.2.3any
ciscoevolved_programmable_network_manager1.2.4any
ciscoevolved_programmable_network_manager1.2.4.2any
ciscoevolved_programmable_network_manager1.2.5any
ciscoevolved_programmable_network_manager1.2.6any
ciscoevolved_programmable_network_manager1.2.7any
ciscoevolved_programmable_network_manager2.0any
ciscoevolved_programmable_network_manager2.0.1any
ciscoevolved_programmable_network_manager2.0.1.1any
ciscoevolved_programmable_network_manager2.0.2any
ciscoevolved_programmable_network_manager2.0.2.1any
ciscoevolved_programmable_network_manager2.0.3any
ciscoevolved_programmable_network_manager2.0.4any
ciscoevolved_programmable_network_manager2.0.4.1any
ciscoevolved_programmable_network_manager2.0.4.2any
ciscoevolved_programmable_network_manager2.1any
ciscoevolved_programmable_network_manager2.1.1any
ciscoevolved_programmable_network_manager2.1.1.1any
ciscoevolved_programmable_network_manager2.1.1.3any
ciscoevolved_programmable_network_manager2.1.1.4any
ciscoevolved_programmable_network_manager2.1.2any
ciscoevolved_programmable_network_manager2.1.2.2any
ciscoevolved_programmable_network_manager2.1.2.3any
ciscoevolved_programmable_network_manager2.1.3any
ciscoevolved_programmable_network_manager2.1.3.2any
ciscoevolved_programmable_network_manager2.1.3.3any
ciscoevolved_programmable_network_manager2.1.3.4any
ciscoevolved_programmable_network_manager2.1.3.5any
ciscoevolved_programmable_network_manager2.1.4any
ciscoevolved_programmable_network_manager2.2any
ciscoevolved_programmable_network_manager2.2.1any
ciscoevolved_programmable_network_manager2.2.1.1any
ciscoevolved_programmable_network_manager2.2.1.2any
ciscoevolved_programmable_network_manager2.2.1.3any
ciscoevolved_programmable_network_manager2.2.1.4any
ciscoevolved_programmable_network_manager2.2.3any
ciscoevolved_programmable_network_manager2.2.4any
ciscoevolved_programmable_network_manager2.2.5any
ciscoevolved_programmable_network_manager3.0any
ciscoevolved_programmable_network_manager3.0.1any
ciscoevolved_programmable_network_manager3.0.2any
ciscoevolved_programmable_network_manager3.0.3any
ciscoevolved_programmable_network_manager3.1any
ciscoevolved_programmable_network_manager3.1.1any
ciscoevolved_programmable_network_manager3.1.2any
ciscoevolved_programmable_network_manager3.1.3any
ciscoevolved_programmable_network_manager4.0any
ciscoevolved_programmable_network_manager4.0.1any
ciscoevolved_programmable_network_manager4.0.2any
ciscoevolved_programmable_network_manager4.0.3any
ciscoevolved_programmable_network_manager4.0.3.1any
ciscoevolved_programmable_network_manager4.1any
ciscoevolved_programmable_network_manager4.1.1any
ciscoevolved_programmable_network_manager4.1.1.1any
ciscoevolved_programmable_network_manager4.1.1.2any
ciscoevolved_programmable_network_manager5.0any
ciscoevolved_programmable_network_manager5.0.1any
ciscoevolved_programmable_network_manager5.0.2any
ciscoevolved_programmable_network_manager5.0.2.1any
ciscoevolved_programmable_network_manager5.0.2.2any
ciscoevolved_programmable_network_manager5.0.2.3any
ciscoevolved_programmable_network_manager5.0.2.4any
ciscoevolved_programmable_network_manager5.0.2.5any
ciscoevolved_programmable_network_manager5.0.2.6any
ciscoevolved_programmable_network_manager5.1any
ciscoevolved_programmable_network_manager5.1.1any
ciscoevolved_programmable_network_manager5.1.2any
ciscoevolved_programmable_network_manager5.1.3any
ciscoevolved_programmable_network_manager5.1.3.1any
ciscoevolved_programmable_network_manager5.1.3.2any
ciscoevolved_programmable_network_manager5.1.4any
ciscoevolved_programmable_network_manager5.1.4.1any
ciscoevolved_programmable_network_manager5.1.4.2any
ciscoevolved_programmable_network_manager5.1.4.3any
ciscoevolved_programmable_network_manager5.1.4.4any
ciscoevolved_programmable_network_manager6.0.0any
ciscoevolved_programmable_network_manager6.0.1any
ciscoevolved_programmable_network_manager6.0.1.1any
ciscoevolved_programmable_network_manager6.0.2any
ciscoevolved_programmable_network_manager6.0.2.1any
ciscoevolved_programmable_network_manager6.0.3any
ciscoevolved_programmable_network_manager6.0.3.1any
ciscoevolved_programmable_network_manager6.1any
ciscoevolved_programmable_network_manager6.1.1any
ciscoevolved_programmable_network_manager6.1.1.1any
ciscoevolved_programmable_network_manager6.1.1.2.2any
ciscoevolved_programmable_network_manager6.1.2any
ciscoevolved_programmable_network_manager6.1.2.1any
ciscoevolved_programmable_network_manager6.1.2.2any
ciscoevolved_programmable_network_manager6.1.2.3any
ciscoevolved_programmable_network_manager7.0.0any
ciscoevolved_programmable_network_manager7.0.1any
ciscoevolved_programmable_network_manager7.0.1.1any
ciscoevolved_programmable_network_manager7.0.1.2any
ciscoevolved_programmable_network_manager7.0.1.3any
ciscoevolved_programmable_network_manager7.1.0any
ciscoevolved_programmable_network_manager7.1.1any
ciscoevolved_programmable_network_manager7.1.2any
ciscoevolved_programmable_network_manager7.1.2.1any
ciscoevolved_programmable_network_manager7.1.3any
ciscoevolved_programmable_network_manager7.1.3.1any
ciscoevolved_programmable_network_manager7.1.4any
ciscoevolved_programmable_network_manager8.0.0any
ciscoevolved_programmable_network_manager8.0.0.1any
ciscoevolved_programmable_network_manager8.1.0any

References 1

  • sec.cloudapps.cisco.com https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-piepnm-bsi-25JJqsbb
    Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.