CVE-2025-20120

🗓️ 02 Apr 2025 17:15:42Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 8 Views

CVE-2025-20120 allows remote attackers to exploit Cisco management interface via stored cross-site scripting.

Reporter	Title	Published	Views	Family All 13
BDU FSTEC	The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager (EPNM) software for managing network services, allows a perpetrator to carry out cross-site scripting attacks.	8 Apr 202500:00	–	bdu_fstec
Circl	CVE-2025-20120	2 Apr 202516:34	–	circl
Cisco	Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerabilities	2 Apr 202516:00	–	cisco
Tenable Nessus	Cisco Prime Infrastructure Multiple Vulnerabilities (cisco-sa-epnmpi-sxss-GSScPGY4)	4 Apr 202500:00	–	nessus
Tenable Nessus	Cisco Evolved Programmable Network Manager XSS (CVE-2025-20120)	23 Jun 202500:00	–	nessus
CNNVD	Cisco Evolved Programmable Network Manager和Cisco Prime Infrastructure 跨站脚本漏洞	2 Apr 202500:00	–	cnnvd
CVE	CVE-2025-20120	2 Apr 202516:16	–	cve
Cvelist	CVE-2025-20120	2 Apr 202516:16	–	cvelist
EUVD	EUVD-2025-9562	3 Oct 202520:07	–	euvd
OSV	CVE-2025-20120	2 Apr 202517:15	–	osv

NVD

Node

cisco prime_infrastructureMatch2.0.0

OR

cisco prime_infrastructureMatch2.0.10

OR

cisco prime_infrastructureMatch2.0.39

OR

cisco prime_infrastructureMatch2.1

OR

cisco prime_infrastructureMatch2.1.0

OR

cisco prime_infrastructureMatch2.1.1

OR

cisco prime_infrastructureMatch2.1.2

OR

cisco prime_infrastructureMatch2.1.56

OR

cisco prime_infrastructureMatch2.2

OR

cisco prime_infrastructureMatch2.2.0

OR

cisco prime_infrastructureMatch2.2.1-

OR

cisco prime_infrastructureMatch2.2.1update01

OR

cisco prime_infrastructureMatch2.2.2-

OR

cisco prime_infrastructureMatch2.2.2update03

OR

cisco prime_infrastructureMatch2.2.2update04

OR

cisco prime_infrastructureMatch2.2.3-

OR

cisco prime_infrastructureMatch2.2.3update02

OR

cisco prime_infrastructureMatch2.2.3update03

OR

cisco prime_infrastructureMatch2.2.3update04

OR

cisco prime_infrastructureMatch2.2.3update05

OR

cisco prime_infrastructureMatch2.2.3update06

OR

cisco prime_infrastructureMatch2.2.4

OR

cisco prime_infrastructureMatch2.2.5

OR

cisco prime_infrastructureMatch2.2.7

OR

cisco prime_infrastructureMatch2.2.8

OR

cisco prime_infrastructureMatch2.2.9

OR

cisco prime_infrastructureMatch2.2.10

OR

cisco prime_infrastructureMatch3.0.0

OR

cisco prime_infrastructureMatch3.0.1

OR

cisco prime_infrastructureMatch3.0.2

OR

cisco prime_infrastructureMatch3.0.3

OR

cisco prime_infrastructureMatch3.0.4

OR

cisco prime_infrastructureMatch3.0.5

OR

cisco prime_infrastructureMatch3.0.6

OR

cisco prime_infrastructureMatch3.0.7

OR

cisco prime_infrastructureMatch3.1device_pack10

OR

cisco prime_infrastructureMatch3.1device_pack11

OR

cisco prime_infrastructureMatch3.1device_pack12

OR

cisco prime_infrastructureMatch3.1device_pack13

OR

cisco prime_infrastructureMatch3.1device_pack14

OR

cisco prime_infrastructureMatch3.1device_pack15

OR

cisco prime_infrastructureMatch3.1device_pack16

OR

cisco prime_infrastructureMatch3.1device_pack4

OR

cisco prime_infrastructureMatch3.1device_pack5

OR

cisco prime_infrastructureMatch3.1device_pack6

OR

cisco prime_infrastructureMatch3.1device_pack7

OR

cisco prime_infrastructureMatch3.1device_pack8

OR

cisco prime_infrastructureMatch3.1device_pack9

OR

cisco prime_infrastructureMatch3.1.0

OR

cisco prime_infrastructureMatch3.1.1

OR

cisco prime_infrastructureMatch3.1.2

OR

cisco prime_infrastructureMatch3.1.3

OR

cisco prime_infrastructureMatch3.1.4

OR

cisco prime_infrastructureMatch3.1.5

OR

cisco prime_infrastructureMatch3.1.6

OR

cisco prime_infrastructureMatch3.1.7

OR

cisco prime_infrastructureMatch3.2

OR

cisco prime_infrastructureMatch3.2device_pack1

OR

cisco prime_infrastructureMatch3.2device_pack2

OR

cisco prime_infrastructureMatch3.2device_pack3

OR

cisco prime_infrastructureMatch3.2device_pack4

OR

cisco prime_infrastructureMatch3.2.0-fips

OR

cisco prime_infrastructureMatch3.2.1

OR

cisco prime_infrastructureMatch3.2.2

OR

cisco prime_infrastructureMatch3.3device_pack1

OR

cisco prime_infrastructureMatch3.3device_pack2

OR

cisco prime_infrastructureMatch3.3device_pack3

OR

cisco prime_infrastructureMatch3.3device_pack4

OR

cisco prime_infrastructureMatch3.3.0-

OR

cisco prime_infrastructureMatch3.3.0update01

OR

cisco prime_infrastructureMatch3.3.1

OR

cisco prime_infrastructureMatch3.4device_pack1

OR

cisco prime_infrastructureMatch3.4device_pack10

OR

cisco prime_infrastructureMatch3.4device_pack11

OR

cisco prime_infrastructureMatch3.4device_pack2

OR

cisco prime_infrastructureMatch3.4device_pack3

OR

cisco prime_infrastructureMatch3.4device_pack4

OR

cisco prime_infrastructureMatch3.4device_pack5

OR

cisco prime_infrastructureMatch3.4device_pack6

OR

cisco prime_infrastructureMatch3.4device_pack7

OR

cisco prime_infrastructureMatch3.4device_pack8

OR

cisco prime_infrastructureMatch3.4device_pack9

OR

cisco prime_infrastructureMatch3.4.0

OR

cisco prime_infrastructureMatch3.4.1-

OR

cisco prime_infrastructureMatch3.4.1update01

OR

cisco prime_infrastructureMatch3.4.1update02

OR

cisco prime_infrastructureMatch3.4.2-

OR

cisco prime_infrastructureMatch3.4.2update01

OR

cisco prime_infrastructureMatch3.5device_pack1

OR

cisco prime_infrastructureMatch3.5device_pack2

OR

cisco prime_infrastructureMatch3.5device_pack3

OR

cisco prime_infrastructureMatch3.5device_pack4

OR

cisco prime_infrastructureMatch3.5.0-

OR

cisco prime_infrastructureMatch3.5.0update01

OR

cisco prime_infrastructureMatch3.5.0update02

OR

cisco prime_infrastructureMatch3.5.0update03

OR

cisco prime_infrastructureMatch3.5.1-

OR

cisco prime_infrastructureMatch3.5.1update01

OR

cisco prime_infrastructureMatch3.5.1update02

OR

cisco prime_infrastructureMatch3.5.1update03

OR

cisco prime_infrastructureMatch3.6device_pack1*

OR

cisco prime_infrastructureMatch3.6.0-

OR

cisco prime_infrastructureMatch3.6.0update01

OR

cisco prime_infrastructureMatch3.6.0update02

OR

cisco prime_infrastructureMatch3.6.0update03

OR

cisco prime_infrastructureMatch3.6.0update04

OR

cisco prime_infrastructureMatch3.7device_pack1

OR

cisco prime_infrastructureMatch3.7device_pack2

OR

cisco prime_infrastructureMatch3.7.0-

OR

cisco prime_infrastructureMatch3.7.0update03

OR

cisco prime_infrastructureMatch3.7.1-

OR

cisco prime_infrastructureMatch3.7.1update01

OR

cisco prime_infrastructureMatch3.7.1update02

OR

cisco prime_infrastructureMatch3.7.1update03

OR

cisco prime_infrastructureMatch3.7.1update04

OR

cisco prime_infrastructureMatch3.7.1update05

OR

cisco prime_infrastructureMatch3.7.1update06

OR

cisco prime_infrastructureMatch3.7.1update07

OR

cisco prime_infrastructureMatch3.8device_pack1

OR

cisco prime_infrastructureMatch3.8.0-

OR

cisco prime_infrastructureMatch3.8.0update01

OR

cisco prime_infrastructureMatch3.8.0update02

OR

cisco prime_infrastructureMatch3.8.1-

OR

cisco prime_infrastructureMatch3.8.1update01

OR

cisco prime_infrastructureMatch3.8.1update02

OR

cisco prime_infrastructureMatch3.8.1update03

OR

cisco prime_infrastructureMatch3.8.1update04

OR

cisco prime_infrastructureMatch3.9device_pack1

OR

cisco prime_infrastructureMatch3.9.0-

OR

cisco prime_infrastructureMatch3.9.0update01

OR

cisco prime_infrastructureMatch3.9.1-

OR

cisco prime_infrastructureMatch3.9.1update01

OR

cisco prime_infrastructureMatch3.9.1update02

OR

cisco prime_infrastructureMatch3.9.1update03

OR

cisco prime_infrastructureMatch3.9.1update04

OR

cisco prime_infrastructureMatch3.10device_pack1

OR

cisco prime_infrastructureMatch3.10update01

OR

cisco prime_infrastructureMatch3.10.0

OR

cisco prime_infrastructureMatch3.10.1

OR

cisco prime_infrastructureMatch3.10.2

OR

cisco prime_infrastructureMatch3.10.3

OR

cisco prime_infrastructureMatch3.10.4-

OR

cisco prime_infrastructureMatch3.10.4update01

OR

cisco prime_infrastructureMatch3.10.4update02

OR

cisco prime_infrastructureMatch3.10.4update03

OR

cisco prime_infrastructureMatch3.10.5

OR

cisco prime_infrastructureMatch3.10.6

Node

cisco evolved_programmable_network_managerMatch1.2

OR

cisco evolved_programmable_network_managerMatch1.2.1.2

OR

cisco evolved_programmable_network_managerMatch1.2.2

OR

cisco evolved_programmable_network_managerMatch1.2.2.4

OR

cisco evolved_programmable_network_managerMatch1.2.3

OR

cisco evolved_programmable_network_managerMatch1.2.4

OR

cisco evolved_programmable_network_managerMatch1.2.4.2

OR

cisco evolved_programmable_network_managerMatch1.2.5

OR

cisco evolved_programmable_network_managerMatch1.2.6

OR

cisco evolved_programmable_network_managerMatch1.2.7

OR

cisco evolved_programmable_network_managerMatch2.0

OR

cisco evolved_programmable_network_managerMatch2.0.1

OR

cisco evolved_programmable_network_managerMatch2.0.1.1

OR

cisco evolved_programmable_network_managerMatch2.0.2

OR

cisco evolved_programmable_network_managerMatch2.0.2.1

OR

cisco evolved_programmable_network_managerMatch2.0.3

OR

cisco evolved_programmable_network_managerMatch2.0.4

OR

cisco evolved_programmable_network_managerMatch2.0.4.1

OR

cisco evolved_programmable_network_managerMatch2.0.4.2

OR

cisco evolved_programmable_network_managerMatch2.1

OR

cisco evolved_programmable_network_managerMatch2.1.1

OR

cisco evolved_programmable_network_managerMatch2.1.1.1

OR

cisco evolved_programmable_network_managerMatch2.1.1.3

OR

cisco evolved_programmable_network_managerMatch2.1.1.4

OR

cisco evolved_programmable_network_managerMatch2.1.2

OR

cisco evolved_programmable_network_managerMatch2.1.2.2

OR

cisco evolved_programmable_network_managerMatch2.1.2.3

OR

cisco evolved_programmable_network_managerMatch2.1.3

OR

cisco evolved_programmable_network_managerMatch2.1.3.2

OR

cisco evolved_programmable_network_managerMatch2.1.3.3

OR

cisco evolved_programmable_network_managerMatch2.1.3.4

OR

cisco evolved_programmable_network_managerMatch2.1.3.5

OR

cisco evolved_programmable_network_managerMatch2.1.4

OR

cisco evolved_programmable_network_managerMatch2.2

OR

cisco evolved_programmable_network_managerMatch2.2.1

OR

cisco evolved_programmable_network_managerMatch2.2.1.1

OR

cisco evolved_programmable_network_managerMatch2.2.1.2

OR

cisco evolved_programmable_network_managerMatch2.2.1.3

OR

cisco evolved_programmable_network_managerMatch2.2.1.4

OR

cisco evolved_programmable_network_managerMatch2.2.3

OR

cisco evolved_programmable_network_managerMatch2.2.4

OR

cisco evolved_programmable_network_managerMatch2.2.5

OR

cisco evolved_programmable_network_managerMatch3.0

OR

cisco evolved_programmable_network_managerMatch3.0.1

OR

cisco evolved_programmable_network_managerMatch3.0.2

OR

cisco evolved_programmable_network_managerMatch3.0.3

OR

cisco evolved_programmable_network_managerMatch3.1

OR

cisco evolved_programmable_network_managerMatch3.1.1

OR

cisco evolved_programmable_network_managerMatch3.1.2

OR

cisco evolved_programmable_network_managerMatch3.1.3

OR

cisco evolved_programmable_network_managerMatch4.0

OR

cisco evolved_programmable_network_managerMatch4.0.1

OR

cisco evolved_programmable_network_managerMatch4.0.2

OR

cisco evolved_programmable_network_managerMatch4.0.3

OR

cisco evolved_programmable_network_managerMatch4.0.3.1

OR

cisco evolved_programmable_network_managerMatch4.1

OR

cisco evolved_programmable_network_managerMatch4.1.1

OR

cisco evolved_programmable_network_managerMatch4.1.1.1

OR

cisco evolved_programmable_network_managerMatch4.1.1.2

OR

cisco evolved_programmable_network_managerMatch5.0

OR

cisco evolved_programmable_network_managerMatch5.0.1

OR

cisco evolved_programmable_network_managerMatch5.0.2

OR

cisco evolved_programmable_network_managerMatch5.0.2.1

OR

cisco evolved_programmable_network_managerMatch5.0.2.2

OR

cisco evolved_programmable_network_managerMatch5.0.2.3

OR

cisco evolved_programmable_network_managerMatch5.0.2.4

OR

cisco evolved_programmable_network_managerMatch5.0.2.5

OR

cisco evolved_programmable_network_managerMatch5.0.2.6

OR

cisco evolved_programmable_network_managerMatch5.1

OR

cisco evolved_programmable_network_managerMatch5.1.1

OR

cisco evolved_programmable_network_managerMatch5.1.2

OR

cisco evolved_programmable_network_managerMatch5.1.3

OR

cisco evolved_programmable_network_managerMatch5.1.3.1

OR

cisco evolved_programmable_network_managerMatch5.1.3.2

OR

cisco evolved_programmable_network_managerMatch5.1.4

OR

cisco evolved_programmable_network_managerMatch5.1.4.1

OR

cisco evolved_programmable_network_managerMatch5.1.4.2

OR

cisco evolved_programmable_network_managerMatch5.1.4.3

OR

cisco evolved_programmable_network_managerMatch5.1.4.4

OR

cisco evolved_programmable_network_managerMatch6.0.0

OR

cisco evolved_programmable_network_managerMatch6.0.1

OR

cisco evolved_programmable_network_managerMatch6.0.1.1

OR

cisco evolved_programmable_network_managerMatch6.0.2

OR

cisco evolved_programmable_network_managerMatch6.0.2.1

OR

cisco evolved_programmable_network_managerMatch6.0.3

OR

cisco evolved_programmable_network_managerMatch6.0.3.1

OR

cisco evolved_programmable_network_managerMatch6.1

OR

cisco evolved_programmable_network_managerMatch6.1.1

OR

cisco evolved_programmable_network_managerMatch6.1.1.1

OR

cisco evolved_programmable_network_managerMatch6.1.1.2.2

OR

cisco evolved_programmable_network_managerMatch6.1.2

OR

cisco evolved_programmable_network_managerMatch6.1.2.1

OR

cisco evolved_programmable_network_managerMatch6.1.2.2

OR

cisco evolved_programmable_network_managerMatch7.0.0

OR

cisco evolved_programmable_network_managerMatch7.0.1

OR

cisco evolved_programmable_network_managerMatch7.0.1.1

OR

cisco evolved_programmable_network_managerMatch7.0.1.2

OR

cisco evolved_programmable_network_managerMatch7.0.1.3

OR

cisco evolved_programmable_network_managerMatch7.1.0

OR

cisco evolved_programmable_network_managerMatch7.1.1

OR

cisco evolved_programmable_network_managerMatch7.1.2

OR

cisco evolved_programmable_network_managerMatch7.1.2.1

OR

cisco evolved_programmable_network_managerMatch7.1.3

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnmpi-sxss-GSScPGY4

06 Aug 2025 15:25Current

CVSS 3.16.1

EPSS0.00182

cve 2025 20120 web management interface remote attacker stored cross-site scripting insufficient validation malicious code execute arbitrary code sensitive information.