Analysis Summary

CVE-2025-20212 CVSS:7.7

A vulnerability exists in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series devices that could allow an authenticated, remote attacker to cause a denial of service (DoS) condition. An attacker with valid VPN user credentials can potentially trigger this vulnerability by not initializing a specific variable during SSL VPN session establishment. When exploited, the vulnerability can cause the Cisco AnyConnect VPN server to restart, which interrupts existing SSL VPN sessions and forces remote users to reconnect and reauthenticate. The attack could prevent new SSL VPN connections from being established, though the VPN server will automatically recover once the attack traffic stops.

CVE-2025-20203 CVSS:4.8

Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure are vulnerable to cross-site scripting, caused by insufficient input validation by the web-based management interface. A remote authenticated attacker could conduct a cross-site scripting (XSS) attack against a user of the interface.

CVE-2025-20139 CVSS:7.5

Cisco Enterprise Chat and Email (ECE) are vulnerable to a denial of service, caused by improper validation of user-supplied input to chat entry points. By sending specially crafted requests to a messaging chat entry point, a remote could exploit this vulnerability to cause a denial of service.

CVE-2025-20120 CVSS:6.1

Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure are vulnerable to cross-site scripting, caused by insufficient input validation by the web-based management interface. A remote attacker could conduct a cross-site scripting (XSS) attack against a user of the interface.

Impact

• Denial of Service
• Cross-Site Scripting

Indicators of Compromise

CVE

• CVE-2025-20212

• CVE-2025-20203

• CVE-2025-20139

• CVE-2025-20120

Affected Vendors

Remediation

Refer to Cisco Security Advisory for patch, upgrade, or suggested workaround information.

CVE-2025-20212

CVE-2025-20203

CVE-2025-20139

CVE-2025-20120