# Cisco Application Policy Infrastructure Controller (APIC).

Every CVE that names Cisco Application Policy Infrastructure Controller (APIC) among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities](https://agentprime.io/advisories/CVE-2026-76500.md)
  `CVE-2026-76500` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-664
- [Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities](https://agentprime.io/advisories/CVE-2026-76498.md)
  `CVE-2026-76498` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control
- [Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities](https://agentprime.io/advisories/CVE-2026-76499.md)
  `CVE-2026-76499` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-707
- [Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-76488.md)
  `CVE-2026-76488` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-264
- [Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2026-20321.md)
  `CVE-2026-20321` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-544
- [Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20107.md)
  `CVE-2026-20107` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 5.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: CWE-1220
- [Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20119.md)
  `CVE-2025-20119` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 6.0 Medium · Not analysed yet · Published 26 Feb 2025 · Tags: Race condition
- [Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-20118.md)
  `CVE-2025-20118` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 4.4 Medium · Not analysed yet · Published 26 Feb 2025 · Tags: CWE-212
- [Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability](https://agentprime.io/advisories/CVE-2025-20117.md)
  `CVE-2025-20117` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 5.1 Medium · Not analysed yet · Published 26 Feb 2025 · Tags: Command injection
- [Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2025-20116.md)
  `CVE-2025-20116` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 4.8 Medium · Not analysed yet · Published 26 Feb 2025 · Tags: Cross-site scripting (XSS)
- [Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2024-20478.md)
  `CVE-2024-20478` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 6.5 Medium · Not analysed yet · Published 28 Aug 2024 · Tags: Privilege escalation
- [Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability](https://agentprime.io/advisories/CVE-2024-20279.md)
  `CVE-2024-20279` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 4.3 Medium · Not analysed yet · Published 28 Aug 2024 · Tags: Broken access control
- [Improper access control in Cisco Application Policy Infrastructure Controller (APIC)](https://agentprime.io/advisories/CVE-2023-20230.md)
  `CVE-2023-20230` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 5.4 Medium · Not analysed yet · Published 23 Aug 2023 · Tags: Broken access control
- [Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2023-20011.md)
  `CVE-2023-20011` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 8.8 High · Not analysed yet · Published 23 Feb 2023 · Tags: Cross-site request forgery (CSRF)
- [Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2021-1582.md)
  `CVE-2021-1582` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 5.4 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: Cross-site scripting (XSS)
- [Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1581.md)
  `CVE-2021-1581` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: Broken access control
- [Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities](https://agentprime.io/advisories/CVE-2021-1580.md)
  `CVE-2021-1580` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 6.5 Medium · Not analysed yet · Published 25 Aug 2021 · Tags: Broken access control
- [Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-1579.md)
  `CVE-2021-1579` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 8.1 High · Not analysed yet · Published 25 Aug 2021 · Tags: Privilege escalation
- [Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-1578.md)
  `CVE-2021-1578` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 8.8 High · Not analysed yet · Published 25 Aug 2021 · Tags: CWE-636
- [Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability](https://agentprime.io/advisories/CVE-2021-1577.md)
  `CVE-2021-1577` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Aug 2021 · Tags: Broken access control
- [Cisco Application Services Engine Software Authorization Vulnerability](https://agentprime.io/advisories/CVE-2020-3335.md)
  `CVE-2020-3335` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 5.5 Medium · Not analysed yet · Published 3 Jun 2020 · Tags: Authentication bypass
- [Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability](https://agentprime.io/advisories/CVE-2020-3333.md)
  `CVE-2020-3333` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 5.3 Medium · Not analysed yet · Published 3 Jun 2020 · Tags: Authentication bypass
- [Cisco Application Policy Infrastructure Controller Out Of Band Management IP Tables Bypass Vulnerability](https://agentprime.io/advisories/CVE-2020-3139.md)
  `CVE-2020-3139` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 5.3 Medium · Not analysed yet · Published 26 Jan 2020 · Tags: CWE-20
- [Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1889.md)
  `CVE-2019-1889` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 7.2 High · Not analysed yet · Published 4 Jul 2019 · Tags: CWE-264
- [Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability](https://agentprime.io/advisories/CVE-2019-1838.md)
  `CVE-2019-1838` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 5.4 Medium · Not analysed yet · Published 3 May 2019 · Tags: Cross-site scripting (XSS)
- [Cisco Application Policy Infrastructure Controller Web-Based Management Interface Usage Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2019-1692.md)
  `CVE-2019-1692` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 5.3 Medium · Not analysed yet · Published 3 May 2019 · Tags: Information disclosure
- [Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2019-1682.md)
  `CVE-2019-1682` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 7.8 High · Not analysed yet · Published 3 May 2019 · Tags: CWE-264
- [Cisco Application Policy Infrastructure Controller Recoverable Encryption Key Vulnerability](https://agentprime.io/advisories/CVE-2019-1586.md)
  `CVE-2019-1586` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 4.6 Medium · Not analysed yet · Published 3 May 2019 · Tags: CWE-320
- [Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Filter Query Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2019-1587.md)
  `CVE-2019-1587` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 4.3 Medium · Not analysed yet · Published 3 May 2019 · Tags: CWE-399
- [Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability](https://agentprime.io/advisories/CVE-2019-1690.md)
  `CVE-2019-1690` · CVE record: Cisco Cisco Application Policy Infrastructure Controller (APIC) · CVSS 4.3 Medium · Not analysed yet · Published 11 Mar 2019 · Tags: Broken access control

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=cisco-application-policy-infrastructure-controller-apic>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/cisco-application-policy-infrastructure-controller-apic/>. Everything for agents: <https://agentprime.io/llms.txt>.