Known vulnerabilities in Cisco Cloud Application Policy Infrastructure Controller

Vendor: Cisco Systems, Inc
Software: Cisco Cloud Application Policy Infrastructure Controller
Software CPE: cpe:2.3:a:cisco_systems:cisco_cloud_application_policy_infrastructure_controller:*:*:*:*:*:*:*:*
Website: https://www.cisco.com
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cisco Cloud Application Policy Infrastructure Controller Cisco Cloud Application Policy Infrastructure Controller is affected by 7 known vulnerabilities: 1 high, 3 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72508 - Cross-Site Request Forgery (CSRF)
CVE-2023-20011		 CWE-352 Low
No
No
 25.0(5) 23.02.2023 SB2023022302
#VU56112 - Execution with Unnecessary Privileges
CVE-2021-1579		 CWE-250 Medium
No
No
 3.2.10f, 4.2.7l, 5.2.2f 26.08.2021 SB2021082611
#VU56111 - Improper Access Control
CVE-2021-1577		 CWE-284 High
No
No
 3.2.10e, 4.2.6h, 5.1.3e 26.08.2021 SB2021082610
#VU56110 - Improper Access Control
CVE-2021-1581		 CWE-284 Medium
No
No
 3.2.10f, 4.2.7l, 5.2.1g 26.08.2021 SB2021082607
#VU56109 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-1580		 CWE-78 Low
No
No
 3.2.10e, 4.2.6h, 5.1.3e, 5.2.1g 26.08.2021 SB2021082606
#VU56108 - Permissions, Privileges, and Access Controls
CVE-2021-1578		 CWE-264 Medium
No
No
 5.1.3e 26.08.2021 SB2021082609
#VU56105 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-1582		 CWE-79 Low
No
No
 3.2.10f, 4.2.7l, 5.2.1h, 5.2.2f 26.08.2021 SB2021082608