Cisco security advisory (AV25-532)

Serial number: AV25-532
Date: August 20, 2025

On August 20, 2025, Cisco published security advisories to address vulnerabilities in the following products:

• Cisco Duo Authentication Proxy – version 5.8.2 and prior and version 6.5.1 and prior
• Cisco Evolved Programmable Network Manager (EPNM) – version 7.1 and prior, versions 8.0 and 8.1
• Cisco Prime Infrastructure – version 3.9 and prior and version 3.10
• Cisco Identity Services Engine (ISE) – version 3.1 and prior, versions 3.2 and 3.3

The Cyber Centre encourages users and administrators to review the provided web links, perform the suggested mitigations and apply the necessary updates if available.

• Cisco Duo Authentication Proxy Information Disclosure Vulnerability
• Cisco Evolved Programmable Network Manager and Cisco Prime Infrastructure Sensitive Information Disclosure Vulnerability
• Cisco Identity Services Engine Arbitrary File Upload Vulnerability
• Cisco Security Advisories