What’s Vulnerable › Products

Cisco Evolved Programmable Network Manager (EPNM) vulnerabilities

51 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.

Check whether your Cisco Evolved Programmable Network Manager (EPNM) version is affected

Exploited Cisco Evolved Programmable Network Manager (EPNM) vulnerabilities

• CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability

Latest Cisco Evolved Programmable Network Manager (EPNM) vulnerabilities

• CVE-2026-20155 — Cisco Evolved Programmable Network Manager Improper Authorization Vulnerability (CVSS 8.0)
• CVE-2026-20123 — Cisco Prime Infrastructure and Evolved Programmable Network Manager Open Redirect Vulnerability (CVSS 6.1)
• CVE-2026-20075 — Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability (CVSS 4.8)
• CVE-2025-20287 — Cisco Evolved Programmable Network Manager Arbitrary File Upload Vulnerability (CVSS 8.8)
• CVE-2025-20280 — Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability (CVSS 4.8)
• CVE-2025-20270 — Cisco Evolved Programmable Network Manager Information Disclosure Vulnerability (CVSS 6.5)
• CVE-2025-20269 — Cisco Evolved Programmable Network Manager and Prime Infrastructure Arbitrary File Download Vulnerability (CVSS 6.5)
• CVE-2025-20272 — Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Blind SQL Injection Vulnerability (CVSS 4.3)
• CVE-2025-20203 — (CVSS 4.8)
• CVE-2025-20120 — (CVSS 6.1)
• CVE-2022-20657 — Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Cross-Site Scripting Vulnerability (CVSS 6.1)
• CVE-2022-20656 — Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Path Traversal Vulnerability (CVSS 6.5)
• CVE-2024-20514 — Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability (CVSS 5.4)
• CVE-2023-20271 — (CVSS 6.5)
• CVE-2023-20260 — (CVSS 6.7)
• CVE-2023-20258 — (CVSS 7.2)
• CVE-2023-20257 — (CVSS 4.8)
• CVE-2023-20222 — (CVSS 6.1)
• CVE-2023-20205 — (CVSS 5.4)
• CVE-2023-20203 — (CVSS 5.4)
• CVE-2023-20201 — (CVSS 5.4)
• CVE-2023-20121 — Cisco Evolved Programmable Network Manager, Cisco Identity Services Engine, and Cisco Prime Infrastructure Command Injection Vulnerabilities (CVSS 6.7)
• CVE-2023-20131 — Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities (CVSS 5.4)
• CVE-2023-20130 — Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities (CVSS 6.5)
• CVE-2023-20129 — Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities (CVSS 6.5)