CA
Product
Cisco Application Policy Infrastructure Controller (APIC)
15
CVEs
0
On KEV
9.8
Max CVSS
5
New 30D
Severity mix
Critical 3High 2Medium 10Low 0
Watch
Add Cisco Application Policy Infrastructure Controller (APIC) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-20117 | 6.7 | Feb 26 | Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability Affected: 3.2(8d); 3.2(1m); 3.2(5e); 4.1(2m); 3.2(41d); 3.2(3s); +34 more |
| CVE-2026-76488 | 6.5 | Oct 7 | Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability Affected: 5.2(1g); 5.2(2e); 5.2(2f); 5.2(2g); 5.2(2h); 5.2(3f); +34 more |
| CVE-2026-20321 | 6.5 | Oct 7 | Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability Affected: 5.3(1d); 5.3(2a); 5.3(2b); 5.3(2c); 5.3(2d); 5.3(2e); +5 more |
| CVE-2019-1690 | 6.5 | Mar 11 | Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability Affected: before 4.2(0.21c) |
| CVE-2025-20119 | 5.7 | Feb 26 | Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability Affected: 3.2(8d); 3.2(1m); 3.2(5e); 4.1(2m); 3.2(41d); 3.2(3s); +34 more |
| CVE-2026-20107 | 5.5 | Feb 25 | Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability Affected: 6.1(1f); 6.1(2f); 6.1(2g); 6.1(3f); 6.1(3g) |
| CVE-2023-20230 | 5.4 | Aug 23 | A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to… Affected: 5.2(6e); 5.2(6g); 5.2(7f); 5.2(7g); 6.0(1g); 6.0(1j); +2 more |
| CVE-2025-20116 | 4.8 | Feb 26 | Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability Affected: 3.2(8d); 3.2(1m); 3.2(5e); 4.1(2m); 3.2(41d); 3.2(3s); +34 more |
| CVE-2025-20118 | 4.4 | Feb 26 | Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability Affected: 3.2(8d); 3.2(1m); 3.2(5e); 4.1(2m); 3.2(41d); 3.2(3s); +34 more |
| CVE-2024-20279 | 4.3 | Aug 28 | Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability Affected: 3.2(8d); 2.2(1o); 1.2(2h); 2.2(2i); 1.2(1k); 2.2(1k); +34 more |
Showing 10