Advisories · Technology
Cisco Application Policy Infrastructure Controller (APIC).
Every CVE that names Cisco Application Policy Infrastructure Controller (APIC) among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.8 CriticalCritical · CVSS 9+
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-664
- CVSS 9.8 CriticalCritical · CVSS 9+
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities
- Cisco Application Policy Infrastructure Controller (APIC)
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-707
- CVSS 6.5 Medium
Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-264
- CVSS 6.5 Medium
Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-544
- CVSS 5.5 Medium
Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-1220
- CVSS 6.0 Medium
Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Race condition
- CVSS 4.4 Medium
Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-212
- CVSS 5.1 Medium
Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Command injection
- CVSS 4.8 Medium
Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Privilege escalation
- CVSS 4.3 Medium
Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Broken access control
- CVSS 5.4 Medium
Improper access control in Cisco Application Policy Infrastructure Controller (APIC)
- Cisco Application Policy Infrastructure Controller (APIC)
- Broken access control
- CVSS 8.8 High
Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Cross-site request forgery (CSRF)
- CVSS 5.4 Medium
Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Cross-site scripting (XSS)
- CVSS 6.5 Medium
Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities
- Cisco Application Policy Infrastructure Controller (APIC)
- Broken access control
- CVSS 6.5 Medium
Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities
- Cisco Application Policy Infrastructure Controller (APIC)
- Broken access control
- CVSS 8.1 High
Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Privilege escalation
- CVSS 8.8 High
Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-636
- CVSS 9.1 CriticalCritical · CVSS 9+
Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Broken access control
- CVSS 5.5 Medium
Cisco Application Services Engine Software Authorization Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Authentication bypass
- CVSS 5.3 Medium
Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Authentication bypass
- CVSS 5.3 Medium
Cisco Application Policy Infrastructure Controller Out Of Band Management IP Tables Bypass Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-20
- CVSS 7.2 High
Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-264
- CVSS 5.4 Medium
Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
Cisco Application Policy Infrastructure Controller Web-Based Management Interface Usage Information Disclosure Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Information disclosure
- CVSS 7.8 High
Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-264
- CVSS 4.6 Medium
Cisco Application Policy Infrastructure Controller Recoverable Encryption Key Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-320
- CVSS 4.3 Medium
Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Filter Query Information Disclosure Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- CWE-399
- CVSS 4.3 Medium
Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability
- Cisco Application Policy Infrastructure Controller (APIC)
- Broken access control