References https://nvd.nist.gov/vuln/detail/CVE-2025-20270 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-info-dis-zhPPMfgz https://securethinklab.com/blog/2025-09-23-cisco-multiple-cves/ https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-pi-epnm-TET4GxBX https://vuldb.com/?id.322415 https://www.tenablecloud.cn/plugins/nessus/261504 https://cve.imfht.com/product/Cisco%20Evolved%20Programmable%20Network%20Manager%20(EPNM) https://avd.aliyun.com/product?prod=evolved_programmable_network_manager https://access.redhat.com/security/cve/cve-2025-20270 https://www.incibe.es/index.php/incibe-cert/alerta-temprana/vulnerabilidades/cve-2025-20270
Related Vulnerabilities(CVE-2025-20280) 思科EPNM和Prime Infrastructure存储型跨站脚本漏洞PoCCVE-2017-1000486: Primetek Primefaces 5.x - Remote Code ExecutionPoCCVE-2019-1821: Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code ExecutionPoCCVE-2023-6505: Prime Mover < 1.9.3 - Sensitive Data ExposureCisco Evolved Programmable Network Manager和Cisco Prime Infrastructure 跨站脚本漏洞WordPress plugin Prime Slider 跨站脚本漏洞(CVE-2024-20514) 思科 EPNM 及 Prime 基础设施 Web 管理界面 存储式跨站脚本漏洞WordPress plugin EventPrime 跨站脚本漏洞H3C IMC 用户自助服务系统 primefaces 表达式注入漏洞Primetek Primefaces 5.x -远程命令执行(CVE-2017-1000486)