Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Vulnerabilities fixed in Cisco Application Policy Infrastructure Controller (APIC).

🗓️ 26 Aug 2021 00:00:00Reported by NCSCType 
ncsc
 ncsc🔗 advisories.ncsc.nl👁 4 Views

Cisco APIC fixes XSS, data manipulation, remote code execution, data access, and elevated rights.

Related
ReporterTitlePublishedViews
Family
BDU FSTEC		The vulnerabilities of Cisco Application Policy Infrastructure Controller and Cisco Cloud Application Policy Infrastructure Controller, related to insufficient handling of exceptional states, allow attackers to increase their privileges within the system.
1 Dec 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the endpoint of the Cisco Application Policy Infrastructure Controller, related to access control deficiencies, allows a hacker to write arbitrary files.
1 Dec 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the Web interface and API of the Cisco Application Policy Infrastructure Controller allows attackers to execute cross-site scripting attacks.
3 Dec 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the web interface and API of the Cisco Application Policy Infrastructure Controller allows a perpetrator to execute arbitrary commands.
20 Dec 202100:00
–bdu_fstec
BDU FSTEC		The vulnerability of the web interface and API of the Cisco Application Policy Infrastructure Controller allows a perpetrator to execute arbitrary commands.
20 Dec 202100:00
–bdu_fstec
Circl		CVE-2021-1577
26 Aug 202117:05
–circl
Cisco		Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability
25 Aug 202116:00
–cisco
Cisco		Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability
25 Aug 202116:00
–cisco
Cisco		Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities
25 Aug 202116:00
–cisco
Cisco		Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability
25 Aug 202116:00
–cisco
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
26 Aug 2021 00:00Current
7.1High risk
Vulners AI Score7.1
CVSS 29
CVSS 3.19.1
EPSS0.03001
SSVC
Cross Site ScriptingData manipulationRemote code executionData accessElevated rights
4