Application Policy Infrastructure Controller Enterprise Module vulnerabilities

Product

Application Policy Infrastructure Controller Enterprise Module

by Cisco · last CVE Aug 15, 2018

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities8 In the news0 Timeline

Severity mix

Critical 0High 5Medium 3Low 0

Severity

All severities8 Critical0 High5 Medium3 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Application Policy Infrastructure Controller Enterprise Module to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2018-0427	8.8	6%	Aug 15	A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a command injection attack Affected: dnac1.1
CVE-2017-12262	8.8	1%	Nov 2	A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauthenticated, adjacent… Affected: before 1.5
CVE-2016-1365	8.8	3%	Aug 18	The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands… Affected: 1.0.10
CVE-2018-0368	7.8	0%	Jul 16	A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, local attacker to access sensitive information on an affected system Affected: 1.1_base
CVE-2016-1386	7.5	1%	Apr 28	The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted… Affected: 1.0.(1)
CVE-2016-1318	6.1	1%	Feb 9	Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web… Affected: 1.1_base
CVE-2016-1305	6.1	1%	Feb 7	Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web… Affected: 1.1_base
CVE-2015-6337	6.1	1%	Jan 26	Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10 allows remote attackers to inject arbitrary web… Affected: 1.0.10; 1.0_ga