VDB
CVE-2025-20280
CVE-2025-20280
PUBLISHED
Der Cisco Evolved Programmable Network (EPN) Manager ist eine All-in-One-Managementlösung für die Konvergenz von paketorientierten und optischen Netzwerken. Cisco Prime Infrastructure kombiniert die Wireless-Fähigkeiten von Cisco Prime Network Control System (NCS) und die drahtgebundenen Fähigkeiten von Cisco Prime LAN Management Solution (LMS) mit den Applikations- Performance-Monitoring- und Troubleshooting-Fähigkeiten von Cisco Prime Assurance Manager.
EPSS 0.22% · 12.8th percentile
Risk Scores
EPSS Score
0.22%
12.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco Prime Infrastructure <3.10.6 Security Update 02 | |
| Cisco | Cisco Evolved Programmable Network Manager <8.1 | |
| Cisco | Cisco Evolved Programmable Network Manager <8.0.1 |
Timeline
- Oct 10, 2024 CVE ID Reserved
- Sep 3, 2025 CVE Published
- Sep 3, 2025 CVE Updated
- Sep 3, 2025 PoC Published
- Sep 4, 2025 EPSS Score
- Sep 9, 2025 Coalition ESS Score
- Sep 12, 2025 EPSS Score
- Sep 19, 2025 EPSS Score
- Sep 22, 2025 Coalition ESS Score
- Sep 23, 2025 Coalition ESS Score
- Sep 27, 2025 EPSS Score
- Oct 4, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1957.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1957 advisory
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-info-dis-zhPPMfgz advisory
- https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-pi-stored-xss-XjQZsyCP advisory