Cisco Application Policy Infrastructure Controller (APIC) 4.2(6n)

CPE Details

Cisco Application Policy Infrastructure Controller (APIC) 4.2(6n)
cisco
application_policy_infrastructure_controller
4.2\(6n\)
2021-08-31
10h21 +00:00
2021-10-13
21h19 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:cisco:application_policy_infrastructure_controller:4.2\(6n\):*:*:*:*:*:*:*

Informations

Vendor

cisco

Product

application_policy_infrastructure_controller

Version

4.2\(6n\)

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-20011 2023-02-22 23h00 +00:00 A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Network Controller, formerly Cisco Cloud APIC, could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. If the affected user has administrative privileges, these actions could include modifying the system configuration and creating new privileged accounts.
8.8
High
CVE-2021-1582 2021-08-25 19h10 +00:00 A vulnerability in the web UI of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow an authenticated, remote attacker to perform a stored cross-site scripting attack on an affected system. This vulnerability is due to improper input validation in the web UI. An authenticated attacker could exploit this vulnerability by sending malicious input to the web UI. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web-based interface or access sensitive, browser-based information.
5.4
Medium
CVE-2021-1581 2021-08-25 19h10 +00:00 Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection or file upload attack on an affected system. For more information about these vulnerabilities, see the Details section of this advisory.
9.1
Critical
CVE-2021-1579 2021-08-25 19h10 +00:00 A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker with Administrator read-only credentials to elevate privileges on an affected system. This vulnerability is due to an insufficient role-based access control (RBAC). An attacker with Administrator read-only credentials could exploit this vulnerability by sending a specific API request using an app with admin write credentials. A successful exploit could allow the attacker to elevate privileges to Administrator with write privileges on the affected device.
8.8
High