Cisco Security Updates – 03 April 2025

The addressed vulnerabilities could allow the attacker to conduct cross-site scripting attacks or perform denial of service attacks on the affected product.

Sample of the addressed vulnerabilities:

1. Cisco Meraki MX and Z Series AnyConnect VPN Denial of Service Vulnerability (CVE-2025-20212):

• CVSS: 7.7
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Denial of Service

2. Cisco Prime Infrastructure Stored Cross-Site Scripting Vulnerability (CVE-2025-20120):

• CVSS: 6.1
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Cross-Site Scripting

Affected Products:

• Cisco Evolved Programmable Network Manager.
• Cisco Prime Infrastructure.
• Cisco Enterprise Chat and Email.
• Cisco Meraki MX and Z Series AnyConnect VPN.