Cisco Application Policy Infrastructure Controller any version

Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability

Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities

Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability

Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability

Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities

Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability

Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability

Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability

Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability

A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to read, modify, or delete non-tenant policies (for example, access policies) created by users associated with a different security domain on an affected system. This vulnerability is due to improper access control when restricted security domains are used to implement multi-tenancy for policies outside the tenant boundaries. An attacker with a valid user account associated with a restricted security domain could exploit this vulnerability. A successful exploit could allow the attacker to read, modify, or delete policies created by users associated with a different security domain. Exploitation is not possible for policies under tenants that an attacker has no authorization to access.

Cisco Application Policy Infrastructure Controller Web-Based Management Interface Usage Information Disclosure Vulnerability

Cisco Application Policy Infrastructure Controller Out Of Band Management IP Tables Bypass Vulnerability