Description
A vulnerability in a subset of REST APIs of Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, low-privileged, remote attacker to conduct a blind SQL injection attack. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected API. A successful exploit could allow the attacker to view data in some database tables on an affected device.
INFO
Published Date :
2025-07-16T16:16:28.878Z
Last Modified :
2025-07-16T16:16:28.878Z
Source :
cisco
AFFECTED PRODUCTS
The following products are affected by CVE-2025-20272 vulnerability.
No data.
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-20272.
