Cisco Cisco Application Policy Infrastructure Controller (APIC)
30 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-76500 | 5.2(1g) ; 5.2(2e) ; 5.2(2f) ; … | Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime … | CRITICAL 9.8 | 0.3 % | ||
| CVE-2026-76499 | 5.2(1g) ; 5.2(2e) ; 5.2(2f) ; … | Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities | CRITICAL 9.8 | 0.3 % | ||
| CVE-2026-76498 | 5.2(1g) ; 5.2(2e) ; 5.2(2f) ; … | Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities | CRITICAL 9.8 | 0.3 % | ||
| CVE-2026-76488 | 5.2(1g) ; 5.2(2e) ; 5.2(2f) ; … | Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-20321 | 5.3(1d) ; 5.3(2a) ; 5.3(2b) ; … | Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-20107 | 6.1(1f) ; 6.1(2f) ; 6.1(2g) ; … | Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability | MEDIUM 5.5 | 0.1 % | ||
| CVE-2025-20119 | 3.2(8d) ; 3.2(1m) ; 3.2(5e) ; … | Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability | MEDIUM 6.0 | 0.1 % | ||
| CVE-2025-20118 | 3.2(8d) ; 3.2(1m) ; 3.2(5e) ; … | Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability | MEDIUM 4.4 | 0.2 % | ||
| CVE-2025-20117 | 3.2(8d) ; 3.2(1m) ; 3.2(5e) ; … | Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability | MEDIUM 6.7 | 0.2 % | ||
| CVE-2025-20116 | 3.2(8d) ; 3.2(1m) ; 3.2(5e) ; … | Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability | MEDIUM 4.8 | 0.3 % | ||
| CVE-2024-20478 | 3.2(8d) ; 2.2(1o) ; 1.2(2h) ; … | Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability | HIGH 7.2 | 0.7 % | ||
| CVE-2024-20279 | 3.2(8d) ; 2.2(1o) ; 1.2(2h) ; … | Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability | MEDIUM 4.3 | 0.3 % | ||
| CVE-2023-20230 | 5.2(6e) ; 5.2(6g) ; 5.2(7f) ; … | A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an | MEDIUM 5.4 | 0.4 % | ||
| CVE-2023-20011 | n/a | Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability | HIGH 8.8 | 0.4 % | ||
| CVE-2021-1582 | n/a | Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability | MEDIUM 5.4 | 0.6 % | ||
| CVE-2021-1581 | n/a | Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities | CRITICAL 9.1 | 1.1 % | ||
| CVE-2021-1580 | n/a | Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities | HIGH 7.2 | 1.8 % | ||
| CVE-2021-1579 | n/a | Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability | HIGH 8.8 | 2.1 % | ||
| CVE-2021-1578 | n/a | Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability | HIGH 8.8 | 2.0 % | ||
| CVE-2021-1577 | n/a | Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability | CRITICAL 9.1 | 1.3 % | ||
| CVE-2020-3335 | n/a | Cisco Application Services Engine Software Authorization Vulnerability | MEDIUM 5.5 | 0.3 % | ||
| CVE-2020-3333 | n/a | Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability | MEDIUM 5.3 | 1.0 % | ||
| CVE-2020-3139 | prior to 4.2(3j) | Cisco Application Policy Infrastructure Controller Out Of Band Management IP Tables Bypass Vulnerability | MEDIUM 5.3 | 1.0 % | ||
| CVE-2019-1889 | unspecified – < 4.1(2g) | Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability | HIGH 7.2 | 2.8 % | ||
| CVE-2019-1838 | unspecified – < 4.1(1i) | Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability | MEDIUM 5.4 | 0.8 % | ||
| CVE-2019-1692 | unspecified – < 4.1(1i) | Cisco Application Policy Infrastructure Controller Web-Based Management Interface Usage Information Disclosure Vulnerability | MEDIUM 5.3 | 1.2 % | ||
| CVE-2019-1682 | unspecified – < 4.1(1i) | Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability | HIGH 7.8 | 0.4 % | ||
| CVE-2019-1586 | unspecified – < 4.2(0.33c) | Cisco Application Policy Infrastructure Controller Recoverable Encryption Key Vulnerability | MEDIUM 4.6 | 0.2 % | ||
| CVE-2019-1587 | unspecified – < 4.2(0.33c) | Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Filter Query Information Disclosure Vulnerability | MEDIUM 4.3 | 1.2 % | ||
| CVE-2019-1690 | unspecified – < 4.2(0.21c) | Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability | MEDIUM 6.5 | 0.6 % |