Security Advisory

CVE-2025-20272

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-16 16:16:28

Last updated 2025-07-18 14:30:51

Assigner cisco

CVSS score not scored

State PUBLISHED

Description

A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, low-privileged, remote attacker to conduct a blind SQL injection attack. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected API. A successful exploit could allow the attacker to view data in some database tables on an affected device.

← Browse all CVEs View on cve.org ↗