CVE-2025-20120: XSS

Published Apr 2, 2025
·
Updated

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Affected Software

252 affected components
Cisco Evolved Programmable Network Manager
Cisco Prime Infrastructure
Cisco Prime Infrastructure=2.0.0
Cisco Prime Infrastructure=2.0.10
Cisco Prime Infrastructure=2.0.39
Cisco Prime Infrastructure=2.1
Cisco Prime Infrastructure=2.1.0
Cisco Prime Infrastructure=2.1.1
Cisco Prime Infrastructure=2.1.2
Cisco Prime Infrastructure=2.1.56
Cisco Prime Infrastructure=2.2
Cisco Prime Infrastructure=2.2.0
Cisco Prime Infrastructure=2.2.1
Cisco Prime Infrastructure=2.2.1-update01
Cisco Prime Infrastructure=2.2.2
Cisco Prime Infrastructure=2.2.2-update03
Cisco Prime Infrastructure=2.2.2-update04
Cisco Prime Infrastructure=2.2.3
Cisco Prime Infrastructure=2.2.3-update02
Cisco Prime Infrastructure=2.2.3-update03
Cisco Prime Infrastructure=2.2.3-update04
Cisco Prime Infrastructure=2.2.3-update05
Cisco Prime Infrastructure=2.2.3-update06
Cisco Prime Infrastructure=2.2.4
Cisco Prime Infrastructure=2.2.5
Cisco Prime Infrastructure=2.2.7
Cisco Prime Infrastructure=2.2.8
Cisco Prime Infrastructure=2.2.9
Cisco Prime Infrastructure=2.2.10
Cisco Prime Infrastructure=3.0.0
Cisco Prime Infrastructure=3.0.1
Cisco Prime Infrastructure=3.0.2
Cisco Prime Infrastructure=3.0.3
Cisco Prime Infrastructure=3.0.4
Cisco Prime Infrastructure=3.0.5
Cisco Prime Infrastructure=3.0.6
Cisco Prime Infrastructure=3.0.7
Cisco Prime Infrastructure=3.1-device_pack10
Cisco Prime Infrastructure=3.1-device_pack11
Cisco Prime Infrastructure=3.1-device_pack12
Cisco Prime Infrastructure=3.1-device_pack13
Cisco Prime Infrastructure=3.1-device_pack14
Cisco Prime Infrastructure=3.1-device_pack15
Cisco Prime Infrastructure=3.1-device_pack16
Cisco Prime Infrastructure=3.1-device_pack4
Cisco Prime Infrastructure=3.1-device_pack5
Cisco Prime Infrastructure=3.1-device_pack6
Cisco Prime Infrastructure=3.1-device_pack7
Cisco Prime Infrastructure=3.1-device_pack8
Cisco Prime Infrastructure=3.1-device_pack9
Cisco Prime Infrastructure=3.1.0
Cisco Prime Infrastructure=3.1.1
Cisco Prime Infrastructure=3.1.2
Cisco Prime Infrastructure=3.1.3
Cisco Prime Infrastructure=3.1.4
Cisco Prime Infrastructure=3.1.5
Cisco Prime Infrastructure=3.1.6
Cisco Prime Infrastructure=3.1.7
Cisco Prime Infrastructure=3.2
Cisco Prime Infrastructure=3.2-device_pack1
Cisco Prime Infrastructure=3.2-device_pack2
Cisco Prime Infrastructure=3.2-device_pack3
Cisco Prime Infrastructure=3.2-device_pack4
Cisco Prime Infrastructure=3.2.0-fips
Cisco Prime Infrastructure=3.2.1
Cisco Prime Infrastructure=3.2.2
Cisco Prime Infrastructure=3.3-device_pack1
Cisco Prime Infrastructure=3.3-device_pack2
Cisco Prime Infrastructure=3.3-device_pack3
Cisco Prime Infrastructure=3.3-device_pack4
Cisco Prime Infrastructure=3.3.0
Cisco Prime Infrastructure=3.3.0-update01
Cisco Prime Infrastructure=3.3.1
Cisco Prime Infrastructure=3.4-device_pack1
Cisco Prime Infrastructure=3.4-device_pack10
Cisco Prime Infrastructure=3.4-device_pack11
Cisco Prime Infrastructure=3.4-device_pack2
Cisco Prime Infrastructure=3.4-device_pack3
Cisco Prime Infrastructure=3.4-device_pack4
Cisco Prime Infrastructure=3.4-device_pack5
Cisco Prime Infrastructure=3.4-device_pack6
Cisco Prime Infrastructure=3.4-device_pack7
Cisco Prime Infrastructure=3.4-device_pack8
Cisco Prime Infrastructure=3.4-device_pack9
Cisco Prime Infrastructure=3.4.0
Cisco Prime Infrastructure=3.4.1
Cisco Prime Infrastructure=3.4.1-update01
Cisco Prime Infrastructure=3.4.1-update02
Cisco Prime Infrastructure=3.4.2
Cisco Prime Infrastructure=3.4.2-update01
Cisco Prime Infrastructure=3.5-device_pack1
Cisco Prime Infrastructure=3.5-device_pack2
Cisco Prime Infrastructure=3.5-device_pack3
Cisco Prime Infrastructure=3.5-device_pack4
Cisco Prime Infrastructure=3.5.0
Cisco Prime Infrastructure=3.5.0-update01
Cisco Prime Infrastructure=3.5.0-update02
Cisco Prime Infrastructure=3.5.0-update03
Cisco Prime Infrastructure=3.5.1
Cisco Prime Infrastructure=3.5.1-update01
Cisco Prime Infrastructure=3.5.1-update02
Cisco Prime Infrastructure=3.5.1-update03
Cisco Prime Infrastructure=3.6-device_pack1*
Cisco Prime Infrastructure=3.6.0
Cisco Prime Infrastructure=3.6.0-update01
Cisco Prime Infrastructure=3.6.0-update02
Cisco Prime Infrastructure=3.6.0-update03
Cisco Prime Infrastructure=3.6.0-update04
Cisco Prime Infrastructure=3.7-device_pack1
Cisco Prime Infrastructure=3.7-device_pack2
Cisco Prime Infrastructure=3.7.0
Cisco Prime Infrastructure=3.7.0-update03
Cisco Prime Infrastructure=3.7.1
Cisco Prime Infrastructure=3.7.1-update01
Cisco Prime Infrastructure=3.7.1-update02
Cisco Prime Infrastructure=3.7.1-update03
Cisco Prime Infrastructure=3.7.1-update04
Cisco Prime Infrastructure=3.7.1-update05
Cisco Prime Infrastructure=3.7.1-update06
Cisco Prime Infrastructure=3.7.1-update07
Cisco Prime Infrastructure=3.8-device_pack1
Cisco Prime Infrastructure=3.8.0
Cisco Prime Infrastructure=3.8.0-update01
Cisco Prime Infrastructure=3.8.0-update02
Cisco Prime Infrastructure=3.8.1
Cisco Prime Infrastructure=3.8.1-update01
Cisco Prime Infrastructure=3.8.1-update02
Cisco Prime Infrastructure=3.8.1-update03
Cisco Prime Infrastructure=3.8.1-update04
Cisco Prime Infrastructure=3.9-device_pack1
Cisco Prime Infrastructure=3.9.0
Cisco Prime Infrastructure=3.9.0-update01
Cisco Prime Infrastructure=3.9.1
Cisco Prime Infrastructure=3.9.1-update01
Cisco Prime Infrastructure=3.9.1-update02
Cisco Prime Infrastructure=3.9.1-update03
Cisco Prime Infrastructure=3.9.1-update04
Cisco Prime Infrastructure=3.10-device_pack1
Cisco Prime Infrastructure=3.10-update01
Cisco Prime Infrastructure=3.10.0
Cisco Prime Infrastructure=3.10.1
Cisco Prime Infrastructure=3.10.2
Cisco Prime Infrastructure=3.10.3
Cisco Prime Infrastructure=3.10.4
Cisco Prime Infrastructure=3.10.4-update01
Cisco Prime Infrastructure=3.10.4-update02
Cisco Prime Infrastructure=3.10.4-update03
Cisco Prime Infrastructure=3.10.5
Cisco Prime Infrastructure=3.10.6
Cisco Evolved Programmable Network Manager=1.2
Cisco Evolved Programmable Network Manager=1.2.1.2
Cisco Evolved Programmable Network Manager=1.2.2
Cisco Evolved Programmable Network Manager=1.2.2.4
Cisco Evolved Programmable Network Manager=1.2.3
Cisco Evolved Programmable Network Manager=1.2.4
Cisco Evolved Programmable Network Manager=1.2.4.2
Cisco Evolved Programmable Network Manager=1.2.5
Cisco Evolved Programmable Network Manager=1.2.6
Cisco Evolved Programmable Network Manager=1.2.7
Cisco Evolved Programmable Network Manager=2.0
Cisco Evolved Programmable Network Manager=2.0.1
Cisco Evolved Programmable Network Manager=2.0.1.1
Cisco Evolved Programmable Network Manager=2.0.2
Cisco Evolved Programmable Network Manager=2.0.2.1
Cisco Evolved Programmable Network Manager=2.0.3
Cisco Evolved Programmable Network Manager=2.0.4
Cisco Evolved Programmable Network Manager=2.0.4.1
Cisco Evolved Programmable Network Manager=2.0.4.2
Cisco Evolved Programmable Network Manager=2.1
Cisco Evolved Programmable Network Manager=2.1.1
Cisco Evolved Programmable Network Manager=2.1.1.1
Cisco Evolved Programmable Network Manager=2.1.1.3
Cisco Evolved Programmable Network Manager=2.1.1.4
Cisco Evolved Programmable Network Manager=2.1.2
Cisco Evolved Programmable Network Manager=2.1.2.2
Cisco Evolved Programmable Network Manager=2.1.2.3
Cisco Evolved Programmable Network Manager=2.1.3
Cisco Evolved Programmable Network Manager=2.1.3.2
Cisco Evolved Programmable Network Manager=2.1.3.3
Cisco Evolved Programmable Network Manager=2.1.3.4
Cisco Evolved Programmable Network Manager=2.1.3.5
Cisco Evolved Programmable Network Manager=2.1.4
Cisco Evolved Programmable Network Manager=2.2
Cisco Evolved Programmable Network Manager=2.2.1
Cisco Evolved Programmable Network Manager=2.2.1.1
Cisco Evolved Programmable Network Manager=2.2.1.2
Cisco Evolved Programmable Network Manager=2.2.1.3
Cisco Evolved Programmable Network Manager=2.2.1.4
Cisco Evolved Programmable Network Manager=2.2.3
Cisco Evolved Programmable Network Manager=2.2.4
Cisco Evolved Programmable Network Manager=2.2.5
Cisco Evolved Programmable Network Manager=3.0
Cisco Evolved Programmable Network Manager=3.0.1
Cisco Evolved Programmable Network Manager=3.0.2
Cisco Evolved Programmable Network Manager=3.0.3
Cisco Evolved Programmable Network Manager=3.1
Cisco Evolved Programmable Network Manager=3.1.1
Cisco Evolved Programmable Network Manager=3.1.2
Cisco Evolved Programmable Network Manager=3.1.3
Cisco Evolved Programmable Network Manager=4.0
Cisco Evolved Programmable Network Manager=4.0.1
Cisco Evolved Programmable Network Manager=4.0.2
Cisco Evolved Programmable Network Manager=4.0.3
Cisco Evolved Programmable Network Manager=4.0.3.1
Cisco Evolved Programmable Network Manager=4.1
Cisco Evolved Programmable Network Manager=4.1.1
Cisco Evolved Programmable Network Manager=4.1.1.1
Cisco Evolved Programmable Network Manager=4.1.1.2
Cisco Evolved Programmable Network Manager=5.0
Cisco Evolved Programmable Network Manager=5.0.1
Cisco Evolved Programmable Network Manager=5.0.2
Cisco Evolved Programmable Network Manager=5.0.2.1
Cisco Evolved Programmable Network Manager=5.0.2.2
Cisco Evolved Programmable Network Manager=5.0.2.3
Cisco Evolved Programmable Network Manager=5.0.2.4
Cisco Evolved Programmable Network Manager=5.0.2.5
Cisco Evolved Programmable Network Manager=5.0.2.6
Cisco Evolved Programmable Network Manager=5.1
Cisco Evolved Programmable Network Manager=5.1.1
Cisco Evolved Programmable Network Manager=5.1.2
Cisco Evolved Programmable Network Manager=5.1.3
Cisco Evolved Programmable Network Manager=5.1.3.1
Cisco Evolved Programmable Network Manager=5.1.3.2
Cisco Evolved Programmable Network Manager=5.1.4
Cisco Evolved Programmable Network Manager=5.1.4.1
Cisco Evolved Programmable Network Manager=5.1.4.2
Cisco Evolved Programmable Network Manager=5.1.4.3
Cisco Evolved Programmable Network Manager=5.1.4.4
Cisco Evolved Programmable Network Manager=6.0.0
Cisco Evolved Programmable Network Manager=6.0.1
Cisco Evolved Programmable Network Manager=6.0.1.1
Cisco Evolved Programmable Network Manager=6.0.2
Cisco Evolved Programmable Network Manager=6.0.2.1
Cisco Evolved Programmable Network Manager=6.0.3
Cisco Evolved Programmable Network Manager=6.0.3.1
Cisco Evolved Programmable Network Manager=6.1
Cisco Evolved Programmable Network Manager=6.1.1
Cisco Evolved Programmable Network Manager=6.1.1.1
Cisco Evolved Programmable Network Manager=6.1.1.2.2
Cisco Evolved Programmable Network Manager=6.1.2
Cisco Evolved Programmable Network Manager=6.1.2.1
Cisco Evolved Programmable Network Manager=6.1.2.2
Cisco Evolved Programmable Network Manager=7.0.0
Cisco Evolved Programmable Network Manager=7.0.1
Cisco Evolved Programmable Network Manager=7.0.1.1
Cisco Evolved Programmable Network Manager=7.0.1.2
Cisco Evolved Programmable Network Manager=7.0.1.3
Cisco Evolved Programmable Network Manager=7.1.0
Cisco Evolved Programmable Network Manager=7.1.1
Cisco Evolved Programmable Network Manager=7.1.2
Cisco Evolved Programmable Network Manager=7.1.2.1
Cisco Evolved Programmable Network Manager=7.1.3

Event History

Apr 2, 2025
CVE Published
via MITRE·04:16 PM
Data Sourced
via MITRE·04:16 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2025-20120?

CVE-2025-20120 is classified as a medium severity vulnerability.

2

How do I fix CVE-2025-20120?

To fix CVE-2025-20120, it is recommended to apply the latest security patches provided by Cisco for EPNM and Prime Infrastructure.

3

Who is affected by CVE-2025-20120?

CVE-2025-20120 affects users of Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure.

4

What type of attack is possible with CVE-2025-20120?

CVE-2025-20120 allows an unauthenticated attacker to execute a stored cross-site scripting (XSS) attack.

5

Can CVE-2025-20120 be exploited remotely?

Yes, CVE-2025-20120 can be exploited by an unauthenticated remote attacker.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203