Priority MEDIUM 64
A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could allow an unauthenticated, remote attacker to bypass authentication on an affected device.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.14847 · Published 2021-02-24 · No fix listed CWE-269
Priority MEDIUM 53
Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0233 · Published 2021-02-24 · No fix listed CWE-306
Priority MEDIUM 51
Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01042 · Published 2021-02-24 · No fix listed CWE-306
Priority MEDIUM 50
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated, remote attacker to…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01303 · Published 2021-08-25 · No fix listed CWE-284
Priority MEDIUM 44
Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection or file upload attack…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01139 · Published 2021-08-25 · No fix listed CWE-284
Priority MEDIUM 44
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker to e…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01971 · Published 2021-08-25 · No fix listed CWE-636
Priority MEDIUM 42
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker with…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.02125 · Published 2021-08-25 · No fix listed CWE-250
Priority MEDIUM 40
A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC, could allow an unauthenticated, remote att…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00362 · Published 2023-02-23 · No fix listed CWE-352
Priority LOW 39
A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an authenticated, remote attacker to escalate privileges to root on an affe…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.02766 · Published 2019-07-04 · Fixed in 4.1(2g) CWE-264
Priority LOW 37
Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection or file upload attack…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01779 · Published 2021-08-25 · No fix listed CWE-284
Priority LOW 36
A vulnerability in the FUSE filesystem functionality for Cisco Application Policy Infrastructure Controller (APIC) software could allow an authenticated, local attacker to escalate privileges to root on an affected devic…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00352 · Published 2019-05-03 · Fixed in 4.1(1i) CWE-264
Priority LOW 35
A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC, could allow an authenticated, remote atta…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0074 · Published 2024-08-28 · No fix listed CWE-250
Priority LOW 34
A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application Policy Infrastructure Controller (APIC) devices could allow an authenticated, local attacker to gain…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00422 · Published 2017-08-17 · No fix listed CWE-426
Priority LOW 34
A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to gain higher privileges than the account is assigned.
CVSS 3.0HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.0118 · Published 2017-08-17 · No fix listed CWE-269
Priority LOW 34
The installation procedure on Cisco Application Policy Infrastructure Controller (APIC) devices 1.3(2f) mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCva504…
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00327 · Published 2016-09-24 · No fix listed CWE-264
Priority LOW 32
A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0104 · Published 2020-06-03 · No fix listed CWE-306
Priority LOW 32
A vulnerability in the out of band (OOB) management interface IP table rule programming for Cisco Application Policy Infrastructure Controller (APIC) could allow an unauthenticated, remote attacker to bypass configured d…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01042 · Published 2020-01-26 · Fixed in 4.2(3j) CWE-20
Priority LOW 32
A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, remote attacker to access sensitive system usage information.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01197 · Published 2019-05-03 · Fixed in 4.1(1i) CWE-200
Priority LOW 32
The boot manager in Cisco Application Policy Infrastructure Controller (APIC) 1.1(0.920a) allows local users to bypass intended access restrictions and obtain single-user-mode root access via unspecified vectors, aka Bug…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00383 · Published 2015-12-18 · No fix listed CWE-255
Priority LOW 31
A vulnerability in the CLI of Cisco APIC could allow an authenticated, local attacker to execute arbitrary commands as root on the underlying operating system of an affected device.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00187 · Published 2025-02-26 · No fix listed CWE-77
Priority LOW 30
A vulnerability in the fabric infrastructure VLAN connection establishment of the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, adjacent attacker to…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00633 · Published 2019-07-04 · Fixed in 14.1(2g) CWE-284
Priority LOW 30
A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller (APIC) software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device.
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00615 · Published 2019-03-11 · Fixed in 4.2(0.21c) CWE-284
Priority LOW 30
A vulnerability in certain system script files that are installed at boot time on Cisco Application Policy Infrastructure Controllers could allow an authenticated, local attacker to gain elevated privileges and execute a…
CVSS 3.0MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00445 · Published 2017-11-30 · No fix listed CWE-77
Priority LOW 30
A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure (ACI) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the aff…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.0072 · Published 2016-11-19 · No fix listed CWE-119
Priority LOW 26
A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attacker to overwrite critical system files, which could cause a DoS condition.
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.001 · Published 2025-02-26 · No fix listed CWE-362
Load more