AP
Product
Application Policy Infrastructure Controller
34
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 10Medium 18Low 0
Watch
Add Application Policy Infrastructure Controller to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1388 | 10.0 | Feb 24 | A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could allow an unauthenticated, remote attacker to… Affected: 3.0(3i) |
| CVE-2021-1393 | 9.8 | Feb 24 | Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn… Affected: 1.1.3; 1.1.3 |
| CVE-2021-1581 | 9.1 | Aug 25 | Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform… Affected: before 3.2\(10f\); 4.0 before 4.2\(7l\); 5.0 before 5.2\(1g\) |
| CVE-2021-1577 | 9.1 | Aug 25 | A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could… Affected: before 3.2\(10e\); 4.0 before 4.2\(6h\); 5.0 before 5.1\(3e\) |
| CVE-2023-20011 | 8.8 | Feb 23 | A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC,… Affected: 4.2\(6\) before 5.2\(7g\); 6.0 before 6.0\(2h\) |
| CVE-2021-1579 | 8.8 | Aug 25 | A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could… Affected: before 3.2\(10f\); 4.0 before 4.2\(7l\); 5.0 before 5.2\(2f\) |
| CVE-2021-1578 | 8.8 | Aug 25 | A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could… Affected: 5.0 through 5.1\(3e\); 5.0(2h) |
| CVE-2019-1682 | 7.8 | May 3 | A vulnerability in the FUSE filesystem functionality for Cisco Application Policy Infrastructure Controller (APIC) software could allow an authenticated, local attacker to… Affected: before 4.1\(1i\) |
| CVE-2017-6768 | 7.8 | Aug 17 | A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application Policy Infrastructure Controller (APIC) devices could allow… Affected: 1.1(0.920a); 1.1(1j); 1.1(3f); 1.2(2); 1.2(3); 1.2.2; +6 more |
| CVE-2016-6413 | 7.8 | Sep 24 | The installation procedure on Cisco Application Policy Infrastructure Controller (APIC) devices 1.3(2f) mishandles binary files, which allows local users to obtain root access via… Affected: 1.3(2f) |
| CVE-2024-20478 | 7.2 | Aug 28 | A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC,… Affected: 1.1(1d); 1.1(1j); 1.1(1n); 1.1(1o); 1.1(1r); 1.1(1s); +34 more |
| CVE-2021-1580 | 7.2 | Aug 25 | Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform… Affected: before 3.2\(10e\); 4.0 before 4.2\(6h\); 5.0 before 5.1\(3e\) |
| CVE-2019-1889 | 7.2 | Jul 4 | A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an authenticated, remote attacker… Affected: 4.1(1j) |
| CVE-2017-6767 | 7.1 | Aug 17 | A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to gain higher privileges than the account is assigned Affected: 1.0(1e); 1.0(1h); 1.0(1k); 1.0(1n); 1.0(2j); 1.0(2m); +18 more |
| CVE-2025-20117 | 6.7 | Feb 26 | A vulnerability in the CLI of Cisco APIC could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected… Affected: 3.2(1l); 3.2(1m); 3.2(2l); 3.2(2o); 3.2(3i); 3.2(3j); +34 more |
| CVE-2017-12352 | 6.7 | Nov 30 | A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker… Affected: 2.3(1f) |
| CVE-2021-1396 | 6.5 | Feb 24 | Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn… Affected: 1.1.3; 1.1.3 |
| CVE-2019-1890 | 6.5 | Jul 4 | A vulnerability in the fabric infrastructure VLAN connection establishment of the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow… Affected: 7.3(0)zn(0.113) |
| CVE-2019-1690 | 6.5 | Mar 11 | Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability Affected: before 4.2\(0.21c\) |
| CVE-2016-6457 | 6.5 | Nov 19 | A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure (ACI) could allow an unauthenticated, adjacent attacker to cause a… Affected: 1.2(2); 1.2(3); 1.3(1); 1.3(2); 2.0(1) |
| CVE-2025-20119 | 5.7 | Feb 26 | A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS… Affected: 3.2(1l); 3.2(1m); 3.2(2l); 3.2(2o); 3.2(3i); 3.2(3j); +34 more |
| CVE-2020-3335 | 5.5 | Jun 3 | A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attacker to read sensitive information of other users on an… Affected: 1.1(0c) |
| CVE-2023-20230 | 5.4 | Aug 23 | A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to… Affected: 5.2 before 5.2\(8d\); 6.0 before 6.0\(3d\) |
| CVE-2021-1582 | 5.4 | Aug 25 | A vulnerability in the web UI of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow an authenticated, remote attacker to perform a stored… Affected: before 3.2\(10f\); 4.0 before 4.2\(7i\); 5.0 before 5.2\(2f\) |
| CVE-2019-1838 | 5.4 | May 3 | A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to conduct a… Affected: 3.2(5d); 4.0(3d) |
| CVE-2020-3333 | 5.3 | Jun 3 | A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device Affected: 1.1(0c) |
| CVE-2020-3139 | 5.3 | Jan 26 | A vulnerability in the out of band (OOB) management interface IP table rule programming for Cisco Application Policy Infrastructure Controller (APIC) could allow an… Affected: before 4.2\(3j\) |
| CVE-2019-1692 | 5.3 | May 3 | A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, remote attacker to… Affected: before 4.1\(1i\); 8.3(1)s6 |
| CVE-2025-20116 | 4.8 | Feb 26 | A vulnerability in the web UI of Cisco APIC could allow an authenticated, remote attacker to perform a stored XSS attack on an affected system Affected: 3.2(1l); 3.2(1m); 3.2(2l); 3.2(2o); 3.2(3i); 3.2(3j); +34 more |
| CVE-2019-1586 | 4.6 | May 3 | A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, local attacker with physical access to obtain sensitive… Affected: 4.1(0.90a) |
| CVE-2025-20118 | 4.4 | Feb 26 | A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authenticated, local attacker to access sensitive information on an affected… Affected: 3.2(1l); 3.2(1m); 3.2(2l); 3.2(2o); 3.2(3i); 3.2(3j); +34 more |
| CVE-2024-20279 | 4.3 | Aug 28 | A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to… Affected: 1.1(1d); 1.1(1j); 1.1(1n); 1.1(1o); 1.1(1r); 1.1(1s); +34 more |
| CVE-2015-6424 | – | Dec 18 | The boot manager in Cisco Application Policy Infrastructure Controller (APIC) 1.1(0.920a) allows local users to bypass intended access restrictions and obtain single-user-mode… Affected: 1.1(0.920a) |
| CVE-2015-6333 | – | Oct 16 | Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076 Affected: 1.1(1j) |
Showing 34