csirt@kutim:~/threat-intel/cve/CVE-2025-20120

Katalog CVE

CVSS 6.1 · Medium EPSS 0,32%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada cisco prime infrastructure. Skor CVSS 3.1 6.1 (Medium) menurut cisco.com.

Deskripsi (NVD)

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected device. This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Rincian

Terbit di NVD
2 April 2025
Terakhir diubah
17 Juni 2026
Status NVD
Analyzed
CVSS 3.1
6.1 (Medium), sumber cisco.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,32% peluang dieksploitasi; lebih tinggi dari 23,1% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
cisco prime infrastructure Versi 2.0.0
cisco prime infrastructure Versi 2.0.10
cisco prime infrastructure Versi 2.0.39
cisco prime infrastructure Versi 2.1
cisco prime infrastructure Versi 2.1.0
cisco prime infrastructure Versi 2.1.1
cisco prime infrastructure Versi 2.1.2
cisco prime infrastructure Versi 2.1.56
cisco prime infrastructure Versi 2.2
cisco prime infrastructure Versi 2.2.0
cisco prime infrastructure Versi 2.2.1
cisco prime infrastructure Versi 2.2.1 update01
cisco prime infrastructure Versi 2.2.2
cisco prime infrastructure Versi 2.2.2 update03
cisco prime infrastructure Versi 2.2.2 update04
cisco prime infrastructure Versi 2.2.3
cisco prime infrastructure Versi 2.2.3 update02
cisco prime infrastructure Versi 2.2.3 update03
cisco prime infrastructure Versi 2.2.3 update04
cisco prime infrastructure Versi 2.2.3 update05
cisco prime infrastructure Versi 2.2.3 update06
cisco prime infrastructure Versi 2.2.4
cisco prime infrastructure Versi 2.2.5
cisco prime infrastructure Versi 2.2.7
cisco prime infrastructure Versi 2.2.8
cisco prime infrastructure Versi 2.2.9
cisco prime infrastructure Versi 2.2.10
cisco prime infrastructure Versi 3.0.0
cisco prime infrastructure Versi 3.0.1
cisco prime infrastructure Versi 3.0.2
cisco prime infrastructure Versi 3.0.3
cisco prime infrastructure Versi 3.0.4
cisco prime infrastructure Versi 3.0.5
cisco prime infrastructure Versi 3.0.6
cisco prime infrastructure Versi 3.0.7
cisco prime infrastructure Versi 3.1 device_pack10
cisco prime infrastructure Versi 3.1 device_pack11
cisco prime infrastructure Versi 3.1 device_pack12
cisco prime infrastructure Versi 3.1 device_pack13
cisco prime infrastructure Versi 3.1 device_pack14
cisco prime infrastructure Versi 3.1 device_pack15
cisco prime infrastructure Versi 3.1 device_pack16
cisco prime infrastructure Versi 3.1 device_pack4
cisco prime infrastructure Versi 3.1 device_pack5
cisco prime infrastructure Versi 3.1 device_pack6
cisco prime infrastructure Versi 3.1 device_pack7
cisco prime infrastructure Versi 3.1 device_pack8
cisco prime infrastructure Versi 3.1 device_pack9
cisco prime infrastructure Versi 3.1.0
cisco prime infrastructure Versi 3.1.1
cisco prime infrastructure Versi 3.1.2
cisco prime infrastructure Versi 3.1.3
cisco prime infrastructure Versi 3.1.4
cisco prime infrastructure Versi 3.1.5
cisco prime infrastructure Versi 3.1.6
cisco prime infrastructure Versi 3.1.7
cisco prime infrastructure Versi 3.2
cisco prime infrastructure Versi 3.2 device_pack1
cisco prime infrastructure Versi 3.2 device_pack2
cisco prime infrastructure Versi 3.2 device_pack3

> Data dari konfigurasi CPE di NVD. Ditampilkan 60 dari 250 konfigurasi; daftar lengkap ada di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.