Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco cloud application policy infrastructure controller vulnerabilities and exploits

(subscribe to this query)
6.4
CVSSv2
CVE-2021-1577
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an unauthenticated, remote malicious user to read or write arbitrary files on an affected system. ...
Cisco Application Policy Infrastructure ControllerCisco Cloud Application Policy Infrastructure Controller
9
CVSSv2
CVE-2021-1578
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote malicious user to elevate privileges to Administrator on an affected devi...
Cisco Cloud Application Policy Infrastructure Controller 5.0\\(2h\\)Cisco Application Policy Infrastructure Controller 5.0\\(2h\\)Cisco Cloud Application Policy Infrastructure ControllerCisco Application Policy Infrastructure Controller
NA
CVE-2023-20011
A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC, could allow an unauthenticated, remote malicious user to conduct a cross-site request forgery (CSRF) a...
Cisco Cloud Network ControllerCisco Application Policy Infrastructure Controller
9
CVSSv2
CVE-2021-1580
Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote malicious user to perform a command injection or file upload attack on an affected system. For more information about the...
Cisco Application Policy Infrastructure ControllerCisco Cloud Application Policy Infrastructure Controller
6.4
CVSSv2
CVE-2021-1581
Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote malicious user to perform a command injection or file upload attack on an affected system. For more information about the...
Cisco Application Policy Infrastructure ControllerCisco Cloud Application Policy Infrastructure Controller
3.5
CVSSv2
CVE-2021-1582
A vulnerability in the web UI of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow an authenticated, remote malicious user to perform a stored cross-site scripting attack on an affected system. This vulnerability is due to improper input va...
Cisco Application Policy Infrastructure ControllerCisco Cloud Application Policy Infrastructure Controller
9
CVSSv2
CVE-2021-1579
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker with Administrator read-only credentials to elevate privileges o...
Cisco Application Policy Infrastructure ControllerCisco Cloud Application Policy Infrastructure Controller
NA
CVE-2022-20860
A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard could allow an unauthenticated, remote malicious user to alter communications with associated controllers or view sensitive information. This vulnerability exists because SSL server certificates are not valida...
Cisco Nexus Dashboard
7.5
CVSSv2
CVE-2022-22965
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring FrameworkCisco Cx Cloud AgentOracle Sd-wan Edge 9.0Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Sd-wan Edge 9.1Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Oracle Product Lifecycle Analytics 3.6.1Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 22.1.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0
9.3
CVSSv2
CVE-2021-44228
Apache Log4j2 2.0-beta9 up to and including 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can contr...
Apache Log4j 2.0Apache Log4jSiemens Sppa-t3000 Ses3000 FirmwareSiemens Logo\\! Soft ComfortSiemens Spectrum Power 4 4.70Siemens Spectrum Power 4Siemens Siveillance Control ProSiemens Energyip Prepay 3.7Siemens Energyip Prepay 3.8Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Siveillance CommandSiemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Siemens Head-end System Universal Device Integration SystemSiemens Gma-managerSiemens Energyip 8.5Siemens Energyip 8.6Siemens Energyip 8.7Siemens Energyip 9.0Siemens Energy Engage 3.1Siemens E-car Operation Center
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook