CVE-2015-4225: Cisco NX-OS

Medium severity, CVSS 4.0. EPSS: 2% chance of exploitation in the next 30 days.

Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485.

Affected products

• Cisco NX-OS: version 1.0(1.110a) only; version 1.0(1e) only

Published 2015-06-27. Last modified 2026-06-17.