Application Policy Infrastructure Controller vulnerabilitiesRanked by how likely they are to be used.
Application Policy Infrastructure Controller is made by Cisco. We track 28 published vulnerabilities listed under that exact name, across 461 versions. None of them is on the list of flaws known to be exploited today. Cisco lists newer releases under their own names, such as Application Policy Infrastructure Controller Enterprise Module, so check those pages too.
We keep watching the known-exploited list.
Is Application Policy Infrastructure Controller listed under other names? Yes.
Cisco also lists Application Policy Infrastructure Controller under more specific names, such as Application Policy Infrastructure Controller Enterprise Module and Application Policy Infrastructure Controller (apic). Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.
- Application Policy Infrastructure Controller Enterprise Module8 published vulnerabilities
- Application Policy Infrastructure Controller (apic)1 published vulnerability
- Application Policy Infrastructure Controller Firmware1 published vulnerability
- Application Policy Infrastructure Controller Software1 published vulnerability
Which Application Policy Infrastructure Controller vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Application Policy Infrastructure Controller's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Application Policy Infrastructure Controller flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 15%CVE-2021-1388Critical
A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could allow an unauthenticated, remote attacker to bypass authentication on an affected device.
- 2.8%CVE-2019-1889High
A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an authenticated, remote attacker to escalate privileges to root on an...
- 2.3%CVE-2021-1393Critical
Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create...
- 2.1%CVE-2021-1579High
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker...
- 2.0%CVE-2021-1578High
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker...
- 1.8%CVE-2021-1580High
Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection or file upload...
- 1.3%CVE-2021-1577Critical
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated, remote...
- 1.2%CVE-2019-1692Medium
A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, remote attacker to access sensitive system usage information.
- 1.2%CVE-2017-6767High
A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to gain higher privileges than the account is assigned.
- 1.1%CVE-2021-1581Critical
Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection or file upload...
Running Application Policy Infrastructure Controller? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is due to improper token validation on a specific API endpoint. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to receive a token with administrator-level privileges that could be used to authenticate to the API on affected MSO and managed Cisco Application Policy Infrastructure Controller (APIC) devices.
- Matched to
- Application Policy Infrastructure Controller on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
We track 28 published vulnerabilities listed under the name Application Policy Infrastructure Controller, across 461 versions.
None of Application Policy Infrastructure Controller's vulnerabilities is on the list of flaws known to be exploited today.
Cisco also lists Application Policy Infrastructure Controller under more specific names, such as Application Policy Infrastructure Controller Enterprise Module and Application Policy Infrastructure Controller (apic). Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.
Create a Precursor Intelligence account and track Application Policy Infrastructure Controller. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.