CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-20287

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to improper validation of files that are uploaded to the web-based management interface. An attacker could exploit this vulnerability by sending a crafted file upload request to a specific API endpoint. A successful exploit could allow the attacker to upload arbitrary files to an affected system. To exploit this vulnerability, an attacker must have at least valid Config Managers credentials on the affected device.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 13.2%

CVSS Severity

CVSS v3 Score 4.3

References

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epni-arb-file-upload-jjdM2P83

Products affected by CVE-2025-20287

Cisco » Evolved Programmable Network Manager » Version: 1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.1
Cisco » Evolved Programmable Network Manager » Version: 1.1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.1.2
Cisco » Evolved Programmable Network Manager » Version: 1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2
Cisco » Evolved Programmable Network Manager » Version: 1.2.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.0
Cisco » Evolved Programmable Network Manager » Version: 1.2.1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.1.2
Cisco » Evolved Programmable Network Manager » Version: 1.2.1.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.1.3
Cisco » Evolved Programmable Network Manager » Version: 1.2.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.2
Cisco » Evolved Programmable Network Manager » Version: 1.2.2.4

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.2.4
Cisco » Evolved Programmable Network Manager » Version: 1.2.200

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.200
Cisco » Evolved Programmable Network Manager » Version: 1.2.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.3
Cisco » Evolved Programmable Network Manager » Version: 1.2.300

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.300
Cisco » Evolved Programmable Network Manager » Version: 1.2.4

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.4
Cisco » Evolved Programmable Network Manager » Version: 1.2.4.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.4.2
Cisco » Evolved Programmable Network Manager » Version: 1.2.400

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.400
Cisco » Evolved Programmable Network Manager » Version: 1.2.5

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.5
Cisco » Evolved Programmable Network Manager » Version: 1.2.500

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.500
Cisco » Evolved Programmable Network Manager » Version: 1.2.6

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.6
Cisco » Evolved Programmable Network Manager » Version: 1.2.600

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.600
Cisco » Evolved Programmable Network Manager » Version: 1.2.7

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.7
Cisco » Evolved Programmable Network Manager » Version: 1.2.700

cpe:2.3:a:cisco:evolved_programmable_network_manager:1.2.700
Cisco » Evolved Programmable Network Manager » Version: 2.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0
Cisco » Evolved Programmable Network Manager » Version: 2.0(4.0.45b)

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0(4.0.45b)
Cisco » Evolved Programmable Network Manager » Version: 2.0(4.0.45d)

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0(4.0.45d)
Cisco » Evolved Programmable Network Manager » Version: 2.0.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.1
Cisco » Evolved Programmable Network Manager » Version: 2.0.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.1.1
Cisco » Evolved Programmable Network Manager » Version: 2.0.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.2
Cisco » Evolved Programmable Network Manager » Version: 2.0.2.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.2.1
Cisco » Evolved Programmable Network Manager » Version: 2.0.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.3
Cisco » Evolved Programmable Network Manager » Version: 2.0.4

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.4
Cisco » Evolved Programmable Network Manager » Version: 2.0.4.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.4.1
Cisco » Evolved Programmable Network Manager » Version: 2.0.4.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.0.4.2
Cisco » Evolved Programmable Network Manager » Version: 2.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1
Cisco » Evolved Programmable Network Manager » Version: 2.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.1
Cisco » Evolved Programmable Network Manager » Version: 2.1.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.1.1
Cisco » Evolved Programmable Network Manager » Version: 2.1.1.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.1.3
Cisco » Evolved Programmable Network Manager » Version: 2.1.1.4

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.1.4
Cisco » Evolved Programmable Network Manager » Version: 2.1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.2
Cisco » Evolved Programmable Network Manager » Version: 2.1.2.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.2.2
Cisco » Evolved Programmable Network Manager » Version: 2.1.2.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.2.3
Cisco » Evolved Programmable Network Manager » Version: 2.1.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.3
Cisco » Evolved Programmable Network Manager » Version: 2.1.3.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.3.2
Cisco » Evolved Programmable Network Manager » Version: 2.1.3.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.3.3
Cisco » Evolved Programmable Network Manager » Version: 2.1.3.4

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.3.4
Cisco » Evolved Programmable Network Manager » Version: 2.1.3.5

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.3.5
Cisco » Evolved Programmable Network Manager » Version: 2.1.4

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.1.4
Cisco » Evolved Programmable Network Manager » Version: 2.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.2
Cisco » Evolved Programmable Network Manager » Version: 2.2.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.2.1
Cisco » Evolved Programmable Network Manager » Version: 2.2.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.2.1.1
Cisco » Evolved Programmable Network Manager » Version: 2.2.1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.2.1.2
Cisco » Evolved Programmable Network Manager » Version: 2.2.1.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.2.1.3
Cisco » Evolved Programmable Network Manager » Version: 2.2.1.4

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.2.1.4
Cisco » Evolved Programmable Network Manager » Version: 2.2.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.2.3
Cisco » Evolved Programmable Network Manager » Version: 2.2.4

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.2.4
Cisco » Evolved Programmable Network Manager » Version: 2.2.5

cpe:2.3:a:cisco:evolved_programmable_network_manager:2.2.5
Cisco » Evolved Programmable Network Manager » Version: 3.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:3.0
Cisco » Evolved Programmable Network Manager » Version: 3.0.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:3.0.0
Cisco » Evolved Programmable Network Manager » Version: 3.0.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:3.0.1
Cisco » Evolved Programmable Network Manager » Version: 3.0.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:3.0.2
Cisco » Evolved Programmable Network Manager » Version: 3.0.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:3.0.3
Cisco » Evolved Programmable Network Manager » Version: 3.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:3.1
Cisco » Evolved Programmable Network Manager » Version: 3.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:3.1.1
Cisco » Evolved Programmable Network Manager » Version: 3.1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:3.1.2
Cisco » Evolved Programmable Network Manager » Version: 3.1.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:3.1.3
Cisco » Evolved Programmable Network Manager » Version: 4.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:4.0
Cisco » Evolved Programmable Network Manager » Version: 4.0.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:4.0.1
Cisco » Evolved Programmable Network Manager » Version: 4.0.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:4.0.2
Cisco » Evolved Programmable Network Manager » Version: 4.0.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:4.0.3
Cisco » Evolved Programmable Network Manager » Version: 4.0.3.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:4.0.3.1
Cisco » Evolved Programmable Network Manager » Version: 4.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:4.1
Cisco » Evolved Programmable Network Manager » Version: 4.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:4.1.1
Cisco » Evolved Programmable Network Manager » Version: 4.1.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:4.1.1.1
Cisco » Evolved Programmable Network Manager » Version: 4.1.1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:4.1.1.2
Cisco » Evolved Programmable Network Manager » Version: 5.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.0
Cisco » Evolved Programmable Network Manager » Version: 5.0.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.0.1
Cisco » Evolved Programmable Network Manager » Version: 5.0.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.0.2
Cisco » Evolved Programmable Network Manager » Version: 5.0.2.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.0.2.1
Cisco » Evolved Programmable Network Manager » Version: 5.0.2.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.0.2.2
Cisco » Evolved Programmable Network Manager » Version: 5.0.2.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.0.2.3
Cisco » Evolved Programmable Network Manager » Version: 5.0.2.4

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.0.2.4
Cisco » Evolved Programmable Network Manager » Version: 5.0.2.5

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.0.2.5
Cisco » Evolved Programmable Network Manager » Version: 5.0.2.6

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.0.2.6
Cisco » Evolved Programmable Network Manager » Version: 5.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.1
Cisco » Evolved Programmable Network Manager » Version: 5.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.1.1
Cisco » Evolved Programmable Network Manager » Version: 5.1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.1.2
Cisco » Evolved Programmable Network Manager » Version: 5.1.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.1.3
Cisco » Evolved Programmable Network Manager » Version: 5.1.3.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.1.3.1
Cisco » Evolved Programmable Network Manager » Version: 5.1.3.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.1.3.2
Cisco » Evolved Programmable Network Manager » Version: 5.1.4

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.1.4
Cisco » Evolved Programmable Network Manager » Version: 5.1.4.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.1.4.1
Cisco » Evolved Programmable Network Manager » Version: 5.1.4.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.1.4.2
Cisco » Evolved Programmable Network Manager » Version: 5.1.4.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.1.4.3
Cisco » Evolved Programmable Network Manager » Version: 5.1.4.4

cpe:2.3:a:cisco:evolved_programmable_network_manager:5.1.4.4
Cisco » Evolved Programmable Network Manager » Version: 6.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.0
Cisco » Evolved Programmable Network Manager » Version: 6.0.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.0.0
Cisco » Evolved Programmable Network Manager » Version: 6.0.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.0.1
Cisco » Evolved Programmable Network Manager » Version: 6.0.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.0.1.1
Cisco » Evolved Programmable Network Manager » Version: 6.0.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.0.2
Cisco » Evolved Programmable Network Manager » Version: 6.0.2.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.0.2.1
Cisco » Evolved Programmable Network Manager » Version: 6.0.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.0.3
Cisco » Evolved Programmable Network Manager » Version: 6.0.3.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.0.3.1
Cisco » Evolved Programmable Network Manager » Version: 6.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.1
Cisco » Evolved Programmable Network Manager » Version: 6.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.1.1
Cisco » Evolved Programmable Network Manager » Version: 6.1.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.1.1.1
Cisco » Evolved Programmable Network Manager » Version: 6.1.1.2.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.1.1.2.2
Cisco » Evolved Programmable Network Manager » Version: 6.1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.1.2
Cisco » Evolved Programmable Network Manager » Version: 6.1.2.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.1.2.1
Cisco » Evolved Programmable Network Manager » Version: 6.1.2.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.1.2.2
Cisco » Evolved Programmable Network Manager » Version: 6.1.2.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:6.1.2.3
Cisco » Evolved Programmable Network Manager » Version: 7.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:7.0
Cisco » Evolved Programmable Network Manager » Version: 7.0.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:7.0.0
Cisco » Evolved Programmable Network Manager » Version: 7.0.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:7.0.1
Cisco » Evolved Programmable Network Manager » Version: 7.0.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:7.0.1.1
Cisco » Evolved Programmable Network Manager » Version: 7.0.1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:7.0.1.2
Cisco » Evolved Programmable Network Manager » Version: 7.0.1.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:7.0.1.3
Cisco » Evolved Programmable Network Manager » Version: 7.1.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:7.1.0
Cisco » Evolved Programmable Network Manager » Version: 7.1.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:7.1.1
Cisco » Evolved Programmable Network Manager » Version: 7.1.2

cpe:2.3:a:cisco:evolved_programmable_network_manager:7.1.2
Cisco » Evolved Programmable Network Manager » Version: 7.1.2.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:7.1.2.1
Cisco » Evolved Programmable Network Manager » Version: 7.1.3

cpe:2.3:a:cisco:evolved_programmable_network_manager:7.1.3
Cisco » Evolved Programmable Network Manager » Version: 7.1.3.1

cpe:2.3:a:cisco:evolved_programmable_network_manager:7.1.3.1
Cisco » Evolved Programmable Network Manager » Version: 7.1.4

cpe:2.3:a:cisco:evolved_programmable_network_manager:7.1.4
Cisco » Evolved Programmable Network Manager » Version: 8.0.0

cpe:2.3:a:cisco:evolved_programmable_network_manager:8.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-20287

Products

Pricing

Contact Us