How severe is CVE-2025-20269?

CVE-2025-20269 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.

Is CVE-2025-20269 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (31st percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2025-20269?

CVE-2025-20269 primarily affects Cisco Evolved Programmable Network Manager. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2025-20269?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-20269 have an EU (EUVD) identifier?

Yes. CVE-2025-20269 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-25391.

When was CVE-2025-20269 published?

CVE-2025-20269 was published on 2025-08-20 and last updated on 2026-06-17.

CVE-2025-20269

CVE-2025-20269 is a medium-severity vulnerability in Cisco Evolved Programmable Network Manager with a CVSS 3.x base score of 6.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-73.

Key facts

Severity: Medium (CVSS 3.x base score 6.5)
EPSS exploit prediction: 0% (31st percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-25391
Weakness: CWE-73
Affected product: Cisco Evolved Programmable Network Manager
Published: 2025-08-20
Last modified: 2026-06-17

Description

A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, low-privileged, remote attacker to retrieve arbitrary files from the underlying file system on an affected device. This vulnerability is due to insufficient input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface on an affected device. A successful exploit could allow the attacker to access sensitive files from the affected device.

Frequently asked questions

What is CVE-2025-20269?: A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, low-privileged, remote attacker to retrieve arbitrary files from the underlying file system on an affected device. This vulnerability is due to insufficient input validation for specific HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface on an affected device. A successful exploit could allow the attacker to access sensitive files from the affected device.
How severe is CVE-2025-20269?: CVE-2025-20269 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over network with low attack complexity, requires low privileges and no user interaction. Impact on confidentiality is high, integrity none, and availability none.
Is CVE-2025-20269 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (31st percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2025-20269?: CVE-2025-20269 primarily affects Cisco Evolved Programmable Network Manager. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2025-20269?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-20269 have an EU (EUVD) identifier?: Yes. CVE-2025-20269 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-25391.
When was CVE-2025-20269 published?: CVE-2025-20269 was published on 2025-08-20 and last updated on 2026-06-17.

References

Affected products (5)

cpe:2.3:a:cisco:evolved_programmable_network_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:evolved_programmable_network_manager:8.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:evolved_programmable_network_manager:8.1.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:prime_infrastructure:*:*:*:*:*:*:*:*
cpe:2.3:a:cisco:prime_infrastructure:3.10.6:security_update_01:*:*:*:*:*:*

More vulnerabilities in Cisco Evolved Programmable Network Manager

CVE-2021-44228 — Critical (CVSS 10.0): Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in…
CVE-2019-15958 — Critical (CVSS 9.8): A vulnerability in the REST API of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable Network Manager…
CVE-2016-1289 — Critical (CVSS 9.8): The API in Cisco Prime Infrastructure 1.2 through 3.0 and Evolved Programmable Network Manager (EPNM) 1.2 allows remote…
CVE-2016-1291 — Critical (CVSS 9.8): Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote…
CVE-2021-1487 — High (CVSS 8.8): A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network…
CVE-2019-1823 — High (CVSS 8.8): A vulnerability in the web-based management interface of Cisco Prime Infrastructure (PI) and Cisco Evolved Programmable…

All CVEs affecting Cisco Evolved Programmable Network Manager →

Other CWE-73 vulnerabilities

CVE-2025-71338 — Critical (CVSS 10.0): Flowise contains a path traversal vulnerability in the /api/v1/document-store/loader/process endpoint that allows…
CVE-2026-39907 — Critical (CVSS 10.0): Unisys WebPerfect Image Suite versions 3.0.3960.22810 and 3.0.3960.22604 expose an unauthenticated WCF SOAP endpoint on…
CVE-2026-27211 — Critical (CVSS 10.0): Cloud Hypervisor is a Virtual Machine Monitor for Cloud workloads. Versions 34.0 through 50.0 arevulnerable to…
CVE-2025-71334 — Critical (CVSS 9.8): Flowise before 3.0.6 (affected versions 2.2.8 and earlier) contains an arbitrary file access vulnerability due to…
CVE-2025-71333 — Critical (CVSS 9.8): Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments…
CVE-2026-39006 — Critical (CVSS 9.8): An issue in SNMP4J-Agent 3.8.3 allows a remote attacker to execute arbitrary code via the snmp4jCfgStoragePath…

Browse all CWE-73 vulnerabilities →