CVE-2025-20272

Q: What is the severity of CVE-2025-20272?

CVE-2025-20272 has a CVSS score of 4.3 (MEDIUM). An authenticated low-privileged attacker can exploit insufficient input validation in certain REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager to conduct blind SQL injection attacks. This allows viewing data from database tables on affected devices. Organizations running vulnerable versions of these Cisco network management products are affected.

4.3 MEDIUM

SQL Injection

📋 TL;DR

An authenticated low-privileged attacker can exploit insufficient input validation in certain REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager to conduct blind SQL injection attacks. This allows viewing data from database tables on affected devices. Organizations running vulnerable versions of these Cisco network management products are affected.

💻 Affected Systems

Products:

Cisco Prime Infrastructure
Cisco Evolved Programmable Network Manager

Versions: Specific versions listed in Cisco advisory

Operating Systems: Linux-based appliance OS

Default Config Vulnerable: ⚠️ Yes

Notes: Requires authenticated access with any privilege level; affects specific REST API endpoints only

📦 What is this software?

📋 TL;DR

💻 Affected Systems

📦 What is this software?

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco

Evolved Programmable Network Manager by Cisco