CVE-2025-20272
16.07.2025, 17:15
A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, low-privileged, remote attacker to conduct a blind SQL injection attack. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected API. A successful exploit could allow the attacker to view data in some database tables on an affected device.
| Vendor | Product | Version |
|---|---|---|
| cisco | prime_infrastructure | 2.0.0 |
| cisco | prime_infrastructure | 2.0.10 |
| cisco | prime_infrastructure | 2.0.39 |
| cisco | prime_infrastructure | 2.1 |
| cisco | prime_infrastructure | 2.1.0 |
| cisco | prime_infrastructure | 2.1.1 |
| cisco | prime_infrastructure | 2.1.2 |
| cisco | prime_infrastructure | 2.1.56 |
| cisco | prime_infrastructure | 2.2 |
| cisco | prime_infrastructure | 2.2.0 |
| cisco | prime_infrastructure | 2.2.1 |
| cisco | prime_infrastructure | 2.2.1:update01 |
| cisco | prime_infrastructure | 2.2.2 |
| cisco | prime_infrastructure | 2.2.2:update03 |
| cisco | prime_infrastructure | 2.2.2:update04 |
| cisco | prime_infrastructure | 2.2.3 |
| cisco | prime_infrastructure | 2.2.3:update02 |
| cisco | prime_infrastructure | 2.2.3:update03 |
| cisco | prime_infrastructure | 2.2.3:update04 |
| cisco | prime_infrastructure | 2.2.3:update05 |
| cisco | prime_infrastructure | 2.2.3:update06 |
| cisco | prime_infrastructure | 2.2.4 |
| cisco | prime_infrastructure | 2.2.5 |
| cisco | prime_infrastructure | 2.2.7 |
| cisco | prime_infrastructure | 2.2.8 |
| cisco | prime_infrastructure | 2.2.9 |
| cisco | prime_infrastructure | 2.2.10 |
| cisco | prime_infrastructure | 3.0.0 |
| cisco | prime_infrastructure | 3.0.1 |
| cisco | prime_infrastructure | 3.0.2 |
| cisco | prime_infrastructure | 3.0.3 |
| cisco | prime_infrastructure | 3.0.4 |
| cisco | prime_infrastructure | 3.0.5 |
| cisco | prime_infrastructure | 3.0.6 |
| cisco | prime_infrastructure | 3.0.7 |
| cisco | prime_infrastructure | 3.1:device_pack10 |
| cisco | prime_infrastructure | 3.1:device_pack11 |
| cisco | prime_infrastructure | 3.1:device_pack12 |
| cisco | prime_infrastructure | 3.1:device_pack13 |
| cisco | prime_infrastructure | 3.1:device_pack14 |
| cisco | prime_infrastructure | 3.1:device_pack15 |
| cisco | prime_infrastructure | 3.1:device_pack16 |
| cisco | prime_infrastructure | 3.1:device_pack4 |
| cisco | prime_infrastructure | 3.1:device_pack5 |
| cisco | prime_infrastructure | 3.1:device_pack6 |
| cisco | prime_infrastructure | 3.1:device_pack7 |
| cisco | prime_infrastructure | 3.1:device_pack8 |
| cisco | prime_infrastructure | 3.1:device_pack9 |
| cisco | prime_infrastructure | 3.1.0 |
| cisco | prime_infrastructure | 3.1.1 |
| cisco | prime_infrastructure | 3.1.2 |
| cisco | prime_infrastructure | 3.1.3 |
| cisco | prime_infrastructure | 3.1.4 |
| cisco | prime_infrastructure | 3.1.5 |
| cisco | prime_infrastructure | 3.1.6 |
| cisco | prime_infrastructure | 3.1.7 |
| cisco | prime_infrastructure | 3.2 |
| cisco | prime_infrastructure | 3.2:device_pack1 |
| cisco | prime_infrastructure | 3.2:device_pack2 |
| cisco | prime_infrastructure | 3.2:device_pack3 |
| cisco | prime_infrastructure | 3.2:device_pack4 |
| cisco | prime_infrastructure | 3.2.0-fips |
| cisco | prime_infrastructure | 3.2.1 |
| cisco | prime_infrastructure | 3.2.2 |
| cisco | prime_infrastructure | 3.3:device_pack1 |
| cisco | prime_infrastructure | 3.3:device_pack2 |
| cisco | prime_infrastructure | 3.3:device_pack3 |
| cisco | prime_infrastructure | 3.3:device_pack4 |
| cisco | prime_infrastructure | 3.3.0 |
| cisco | prime_infrastructure | 3.3.0:update01 |
| cisco | prime_infrastructure | 3.3.1 |
| cisco | prime_infrastructure | 3.4:device_pack1 |
| cisco | prime_infrastructure | 3.4:device_pack10 |
| cisco | prime_infrastructure | 3.4:device_pack11 |
| cisco | prime_infrastructure | 3.4:device_pack2 |
| cisco | prime_infrastructure | 3.4:device_pack3 |
| cisco | prime_infrastructure | 3.4:device_pack4 |
| cisco | prime_infrastructure | 3.4:device_pack5 |
| cisco | prime_infrastructure | 3.4:device_pack6 |
| cisco | prime_infrastructure | 3.4:device_pack7 |
| cisco | prime_infrastructure | 3.4:device_pack8 |
| cisco | prime_infrastructure | 3.4:device_pack9 |
| cisco | prime_infrastructure | 3.4.0 |
| cisco | prime_infrastructure | 3.4.1 |
| cisco | prime_infrastructure | 3.4.1:update01 |
| cisco | prime_infrastructure | 3.4.1:update02 |
| cisco | prime_infrastructure | 3.4.2 |
| cisco | prime_infrastructure | 3.4.2:update01 |
| cisco | prime_infrastructure | 3.5:device_pack1 |
| cisco | prime_infrastructure | 3.5:device_pack2 |
| cisco | prime_infrastructure | 3.5:device_pack3 |
| cisco | prime_infrastructure | 3.5:device_pack4 |
| cisco | prime_infrastructure | 3.5.0 |
| cisco | prime_infrastructure | 3.5.0:update01 |
| cisco | prime_infrastructure | 3.5.0:update02 |
| cisco | prime_infrastructure | 3.5.0:update03 |
| cisco | prime_infrastructure | 3.5.1 |
| cisco | prime_infrastructure | 3.5.1:update01 |
| cisco | prime_infrastructure | 3.5.1:update02 |
| cisco | prime_infrastructure | 3.5.1:update03 |
| cisco | prime_infrastructure | 3.6:device_pack1 |
| cisco | prime_infrastructure | 3.6.0 |
| cisco | prime_infrastructure | 3.6.0:update01 |
| cisco | prime_infrastructure | 3.6.0:update02 |
| cisco | prime_infrastructure | 3.6.0:update03 |
| cisco | prime_infrastructure | 3.6.0:update04 |
| cisco | prime_infrastructure | 3.7:device_pack1 |
| cisco | prime_infrastructure | 3.7:device_pack2 |
| cisco | prime_infrastructure | 3.7.0 |
| cisco | prime_infrastructure | 3.7.0:update03 |
| cisco | prime_infrastructure | 3.7.1 |
| cisco | prime_infrastructure | 3.7.1:update01 |
| cisco | prime_infrastructure | 3.7.1:update02 |
| cisco | prime_infrastructure | 3.7.1:update03 |
| cisco | prime_infrastructure | 3.7.1:update04 |
| cisco | prime_infrastructure | 3.7.1:update05 |
| cisco | prime_infrastructure | 3.7.1:update06 |
| cisco | prime_infrastructure | 3.7.1:update07 |
| cisco | prime_infrastructure | 3.8:device_pack1 |
| cisco | prime_infrastructure | 3.8.0 |
| cisco | prime_infrastructure | 3.8.0:update01 |
| cisco | prime_infrastructure | 3.8.0:update02 |
| cisco | prime_infrastructure | 3.8.1 |
| cisco | prime_infrastructure | 3.8.1:update01 |
| cisco | prime_infrastructure | 3.8.1:update02 |
| cisco | prime_infrastructure | 3.8.1:update03 |
| cisco | prime_infrastructure | 3.8.1:update04 |
| cisco | prime_infrastructure | 3.9:device_pack1 |
| cisco | prime_infrastructure | 3.9.0 |
| cisco | prime_infrastructure | 3.9.0:update01 |
| cisco | prime_infrastructure | 3.9.1 |
| cisco | prime_infrastructure | 3.9.1:update01 |
| cisco | prime_infrastructure | 3.9.1:update02 |
| cisco | prime_infrastructure | 3.9.1:update03 |
| cisco | prime_infrastructure | 3.9.1:update04 |
| cisco | prime_infrastructure | 3.10 |
| cisco | prime_infrastructure | 3.10:device_pack1 |
| cisco | prime_infrastructure | 3.10:update01 |
| cisco | prime_infrastructure | 3.10.0 |
| cisco | prime_infrastructure | 3.10.1 |
| cisco | prime_infrastructure | 3.10.2 |
| cisco | prime_infrastructure | 3.10.3 |
| cisco | prime_infrastructure | 3.10.4 |
| cisco | prime_infrastructure | 3.10.4:update01 |
| cisco | prime_infrastructure | 3.10.4:update02 |
| cisco | prime_infrastructure | 3.10.4:update03 |
| cisco | prime_infrastructure | 3.10.5 |
| cisco | prime_infrastructure | 3.10.6 |
| cisco | prime_infrastructure | 3.10.6:update01 |
| cisco | evolved_programmable_network_manager | 1.1 |
| cisco | evolved_programmable_network_manager | 1.2 |
| cisco | evolved_programmable_network_manager | 1.2.1.2 |
| cisco | evolved_programmable_network_manager | 1.2.2 |
| cisco | evolved_programmable_network_manager | 1.2.2.4 |
| cisco | evolved_programmable_network_manager | 1.2.3 |
| cisco | evolved_programmable_network_manager | 1.2.4 |
| cisco | evolved_programmable_network_manager | 1.2.4.2 |
| cisco | evolved_programmable_network_manager | 1.2.5 |
| cisco | evolved_programmable_network_manager | 1.2.6 |
| cisco | evolved_programmable_network_manager | 1.2.7 |
| cisco | evolved_programmable_network_manager | 2.0 |
| cisco | evolved_programmable_network_manager | 2.0.1 |
| cisco | evolved_programmable_network_manager | 2.0.1.1 |
| cisco | evolved_programmable_network_manager | 2.0.2 |
| cisco | evolved_programmable_network_manager | 2.0.2.1 |
| cisco | evolved_programmable_network_manager | 2.0.3 |
| cisco | evolved_programmable_network_manager | 2.0.4 |
| cisco | evolved_programmable_network_manager | 2.0.4.1 |
| cisco | evolved_programmable_network_manager | 2.0.4.2 |
| cisco | evolved_programmable_network_manager | 2.1 |
| cisco | evolved_programmable_network_manager | 2.1.1 |
| cisco | evolved_programmable_network_manager | 2.1.1.1 |
| cisco | evolved_programmable_network_manager | 2.1.1.3 |
| cisco | evolved_programmable_network_manager | 2.1.1.4 |
| cisco | evolved_programmable_network_manager | 2.1.2 |
| cisco | evolved_programmable_network_manager | 2.1.2.2 |
| cisco | evolved_programmable_network_manager | 2.1.2.3 |
| cisco | evolved_programmable_network_manager | 2.1.3 |
| cisco | evolved_programmable_network_manager | 2.1.3.2 |
| cisco | evolved_programmable_network_manager | 2.1.3.3 |
| cisco | evolved_programmable_network_manager | 2.1.3.4 |
| cisco | evolved_programmable_network_manager | 2.1.3.5 |
| cisco | evolved_programmable_network_manager | 2.1.4 |
| cisco | evolved_programmable_network_manager | 2.2 |
| cisco | evolved_programmable_network_manager | 2.2.1 |
| cisco | evolved_programmable_network_manager | 2.2.1.1 |
| cisco | evolved_programmable_network_manager | 2.2.1.2 |
| cisco | evolved_programmable_network_manager | 2.2.1.3 |
| cisco | evolved_programmable_network_manager | 2.2.1.4 |
| cisco | evolved_programmable_network_manager | 2.2.3 |
| cisco | evolved_programmable_network_manager | 2.2.4 |
| cisco | evolved_programmable_network_manager | 2.2.5 |
| cisco | evolved_programmable_network_manager | 3.0 |
| cisco | evolved_programmable_network_manager | 3.0.1 |
| cisco | evolved_programmable_network_manager | 3.0.2 |
| cisco | evolved_programmable_network_manager | 3.0.3 |
| cisco | evolved_programmable_network_manager | 3.1 |
| cisco | evolved_programmable_network_manager | 3.1.1 |
| cisco | evolved_programmable_network_manager | 3.1.2 |
| cisco | evolved_programmable_network_manager | 3.1.3 |
| cisco | evolved_programmable_network_manager | 4.0 |
| cisco | evolved_programmable_network_manager | 4.0.1 |
| cisco | evolved_programmable_network_manager | 4.0.2 |
| cisco | evolved_programmable_network_manager | 4.0.3 |
| cisco | evolved_programmable_network_manager | 4.0.3.1 |
| cisco | evolved_programmable_network_manager | 4.1 |
| cisco | evolved_programmable_network_manager | 4.1.1 |
| cisco | evolved_programmable_network_manager | 4.1.1.1 |
| cisco | evolved_programmable_network_manager | 4.1.1.2 |
| cisco | evolved_programmable_network_manager | 5.0 |
| cisco | evolved_programmable_network_manager | 5.0.1 |
| cisco | evolved_programmable_network_manager | 5.0.2 |
| cisco | evolved_programmable_network_manager | 5.0.2.1 |
| cisco | evolved_programmable_network_manager | 5.0.2.2 |
| cisco | evolved_programmable_network_manager | 5.0.2.3 |
| cisco | evolved_programmable_network_manager | 5.0.2.4 |
| cisco | evolved_programmable_network_manager | 5.0.2.5 |
| cisco | evolved_programmable_network_manager | 5.0.2.6 |
| cisco | evolved_programmable_network_manager | 5.1 |
| cisco | evolved_programmable_network_manager | 5.1.1 |
| cisco | evolved_programmable_network_manager | 5.1.2 |
| cisco | evolved_programmable_network_manager | 5.1.3 |
| cisco | evolved_programmable_network_manager | 5.1.3.1 |
| cisco | evolved_programmable_network_manager | 5.1.3.2 |
| cisco | evolved_programmable_network_manager | 5.1.4 |
| cisco | evolved_programmable_network_manager | 5.1.4.1 |
| cisco | evolved_programmable_network_manager | 5.1.4.2 |
| cisco | evolved_programmable_network_manager | 5.1.4.3 |
| cisco | evolved_programmable_network_manager | 5.1.4.4 |
| cisco | evolved_programmable_network_manager | 6.0.0 |
| cisco | evolved_programmable_network_manager | 6.0.1 |
| cisco | evolved_programmable_network_manager | 6.0.1.1 |
| cisco | evolved_programmable_network_manager | 6.0.2 |
| cisco | evolved_programmable_network_manager | 6.0.2.1 |
| cisco | evolved_programmable_network_manager | 6.0.3 |
| cisco | evolved_programmable_network_manager | 6.0.3.1 |
| cisco | evolved_programmable_network_manager | 6.1 |
| cisco | evolved_programmable_network_manager | 6.1.1 |
| cisco | evolved_programmable_network_manager | 6.1.1.1 |
| cisco | evolved_programmable_network_manager | 6.1.1.2.2 |
| cisco | evolved_programmable_network_manager | 6.1.2 |
| cisco | evolved_programmable_network_manager | 6.1.2.1 |
| cisco | evolved_programmable_network_manager | 6.1.2.2 |
| cisco | evolved_programmable_network_manager | 6.1.2.3 |
| cisco | evolved_programmable_network_manager | 7.0.0 |
| cisco | evolved_programmable_network_manager | 7.0.1 |
| cisco | evolved_programmable_network_manager | 7.0.1.1 |
| cisco | evolved_programmable_network_manager | 7.0.1.2 |
| cisco | evolved_programmable_network_manager | 7.0.1.3 |
| cisco | evolved_programmable_network_manager | 7.1.0 |
| cisco | evolved_programmable_network_manager | 7.1.1 |
| cisco | evolved_programmable_network_manager | 7.1.2 |
| cisco | evolved_programmable_network_manager | 7.1.2.1 |
| cisco | evolved_programmable_network_manager | 7.1.3 |
| cisco | evolved_programmable_network_manager | 7.1.3.1 |
| cisco | evolved_programmable_network_manager | 7.1.4 |
| cisco | evolved_programmable_network_manager | 8.0.0 |
| cisco | evolved_programmable_network_manager | 8.0.0.1 |
| cisco | evolved_programmable_network_manager | 8.1.0 |
𝑥
= Vulnerable software versions