CVE-2025-20280

Name of the Vulnerable Software and Affected Versions Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure (affected versions not specified)

Description A vulnerability exists in the web-based management interface that could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users. The issue is due to improper validation of user-supplied input. A successful exploit could allow the attacker to execute arbitrary script code or access sensitive, browser-based information. An attacker must have valid administrative credentials to exploit this vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.