Read the docs

Cisco

Records7060All Threatist records
Exploited (KEV)107In CISA KEV
CVSS critical694CVSS 9.0–10.0
CVSS high2793CVSS 7.0–8.9

Exploited now

Cisco records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Application Policy Infrastructure Controller Enterprise Module · all components

Priority MEDIUM 49

A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a command injection attack.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.06063 Published 2018-08-15 No fix listed CWE-77
Priority MEDIUM 43

The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter,…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02656 Published 2016-08-18 No fix listed CWE-20
Priority LOW 39

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauthenticated, adjacent attacker to gain privileged access to servi…

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.00781 Published 2017-11-02 No fix listed CWE-284
Priority LOW 29

Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via crafted markup data, aka B…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01009 Published 2016-02-09 No fix listed CWE-79
Priority LOW 29

Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving HTML ent…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01009 Published 2016-02-07 No fix listed CWE-79
Priority LOW 29

Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10 allows remote attackers to inject arbitrary web script or HTML via a crafted hostname in a…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01009 Published 2016-01-26 No fix listed CWE-79
Open these records in search →