Cloud Application Policy Infrastructure Controller vulnerabilities

Product

Cloud Application Policy Infrastructure Controller

by Cisco · last CVE Aug 25, 2021

CVEs

On KEV

9.1

Max CVSS

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 2High 3Medium 1Low 0

Severity

All severities6 Critical2 High3 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Cloud Application Policy Infrastructure Controller to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-1581	9.1	1%	Aug 25	Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform… Affected: before 3.2\(10f\); 4.0 before 4.2\(7l\); 5.0 before 5.2\(1g\)
CVE-2021-1577	9.1	1%	Aug 25	A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could… Affected: before 3.2\(10e\); 4.0 before 4.2\(6h\); 5.0 before 5.1\(3e\)
CVE-2021-1579	8.8	2%	Aug 25	A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could… Affected: before 3.2\(10f\); 4.0 before 4.2\(7l\); 5.0 before 5.2\(2f\)
CVE-2021-1578	8.8	2%	Aug 25	A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could… Affected: 5.0 through 5.1\(3e\); 5.0(2h)
CVE-2021-1580	7.2	2%	Aug 25	Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform… Affected: before 3.2\(10e\); 4.0 before 4.2\(6h\); 5.0 before 5.1\(3e\)
CVE-2021-1582	5.4	1%	Aug 25	A vulnerability in the web UI of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow an authenticated, remote attacker to perform a stored… Affected: before 3.2\(10f\); 4.0 before 4.2\(7i\); 5.0 before 5.2\(1h\)