Known vulnerabilities in Cisco Application Policy Infrastructure Controller

Software CPE: cpe:2.3:a:cisco_systems:cisco_application_policy_infrastructure_controller:*:*:*:*:*:*:*:*
Total vulnerabilities: 19
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Application Policy Infrastructure Controller Cisco Application Policy Infrastructure Controller is affected by 19 known vulnerabilities: 1 high, 5 medium, 13 low Critical High Medium Low

Vulnerabilities (19)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105084 - Exposure of sensitive information to an unauthorized actor
CVE-2025-20118
CWE-200 Low
No
No
16.0(8e), 16.0(8f), 16.1(2f) 27.02.2025 SB20250227187
#VU105067 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-20117
CWE-78 Low
No
No
16.0(8e), 16.0(8f) 27.02.2025 SB20250227187
#VU105041 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-20116
CWE-79 Low
No
No
16.0(8e), 16.0(8f), 16.1(2f) 27.02.2025 SB20250227187
#VU96605 - Improper Access Control
CVE-2024-20279
CWE-284 Low
No
No
5.3(2c), 6.0(6c) 29.08.2024 SB2024082902
#VU96604 - Execution with Unnecessary Privileges
CVE-2024-20478
CWE-250 Low
No
No
5.3(2d), 6.0(6c) 29.08.2024 SB2024082901
#VU79966 - Improper Access Control
CVE-2023-20230
CWE-284 Medium
No
No
5.2(8d), 6.0(3d) 25.08.2023 SB2023082504
#VU72508 - Cross-Site Request Forgery (CSRF)
CVE-2023-20011
CWE-352 Low
No
No
5.2(7g), 6.0(2e) 23.02.2023 SB2023022302
#VU56112 - Execution with Unnecessary Privileges
CVE-2021-1579
CWE-250 Medium
No
No
3.2.10f, 4.2.7l, 5.2.2f 26.08.2021 SB2021082611
#VU56111 - Improper Access Control
CVE-2021-1577
CWE-284 High
No
No
3.2.10e, 4.2.6h, 5.1.3e 26.08.2021 SB2021082610
#VU56110 - Improper Access Control
CVE-2021-1581
CWE-284 Medium
No
No
3.2.10f, 4.2.7l, 5.2.1g 26.08.2021 SB2021082607
#VU56109 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-1580
CWE-78 Low
No
No
3.2.10e, 4.2.6h, 5.1.3e, 5.2.1g 26.08.2021 SB2021082606
#VU56108 - Permissions, Privileges, and Access Controls
CVE-2021-1578
CWE-264 Medium
No
No
5.1.3e 26.08.2021 SB2021082609
#VU56105 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1582
CWE-79 Low
No
No
3.2.10f, 4.2.7l, 5.2.1h, 5.2.2f 26.08.2021 SB2021082608
#VU24667 - Improper input validation
CVE-2020-3139
CWE-20 Medium
No
No
4.2.3j 27.01.2020 SB2020012707
#VU9511 - Improper input validation
CVE-2017-12352
CWE-20 Low
No
No
- 30.11.2017 SB2017120112
#VU9091 - Improper Access Control
CVE-2017-12262
CWE-284 Low
No
No
- 02.11.2017 SB2017110211
#VU7976 - Permissions, Privileges, and Access Controls
CVE-2017-6767
CWE-264 Low
No
No
- 17.08.2017 SB2017081705
#VU7975 - Untrusted Search Path
CVE-2017-6768
CWE-426 Low
No
No
- 17.08.2017 SB2017081705
#VU631 - Permissions, Privileges, and Access Controls
CVE-2016-6413
CWE-264 Low
No
No
- 22.09.2016 SB2016092225