References https://www.cisco.com/c/en/us/support/docs/csa/cisco-sa-epnm-pi-stored-xss-XjQZsyCP.html https://nvd.nist.gov/vuln/detail/CVE-2025-20280 https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-epnm-pi-stored-xss-XjQZsyCP https://securethinklab.com/blog/2025-09-23-cisco-multiple-cves/ https://poseidon-us.com/2025/09/03/cisco-evolved-programmable-network-manager-and-cisco-prime-infrastructure-stored-cross-site-scripting-vulnerability/ http://cve.scap.org.cn/vulnerability/VHN-288662 https://www.govcert.gov.hk/en/alerts_detail.php?id=1632 https://bst.cisco.com/quickview/bug/CSCwp65180
Related Vulnerabilities(CVE-2025-20270)思科EPNM和Prime基础架构API请求验证不当导致信息泄露漏洞PoCCVE-2017-1000486: Primetek Primefaces 5.x - Remote Code ExecutionPoCCVE-2019-1821: Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager - Remote Code ExecutionPoCCVE-2021-29203: HPE Edgeline Infrastructure Manager <1.22 - Authentication BypassPoCCVE-2021-33690: SAP NetWeaver Development Infrastructure - Server Side Request ForgeryPoCCVE-2021-38647: Microsoft Open Management Infrastructure - Remote Code ExecutionPoCCVE-2023-6505: Prime Mover < 1.9.3 - Sensitive Data ExposureCVE-2023-45249: Acronis Cyber Infrastructure - Default PasswordPoCazure-storage-encryption-missing: Azure Storage Infrastructure Encryption Not EnabledPoCexposed-pki-cert: Exposed Internal PKI Infrastructure - DetectCisco Evolved Programmable Network Manager和Cisco Prime Infrastructure 跨站脚本漏洞