Cisco Application Policy Infrastructure Controller Enterprise Module vulnerabilities

8 CVEs affecting Cisco Application Policy Infrastructure Controller Enterprise Module, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-0427, published 2018-08-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0427, published 2018-08-15. High severity, CVSS 8.8. EPSS: 6.1% chance of exploitation in the next 30 days. A vulnerability in the CronJob scheduler API of Cisco Digital Network Architecture (DNA) Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability…
CVE-2016-1365, published 2016-08-18. High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days. The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a…
CVE-2016-1386, published 2016-04-28. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka…
CVE-2016-1318, published 2016-02-09. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2016-1305, published 2016-02-07. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.1 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2015-6337, published 2016-01-26. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10 allows remote attackers to inject arbitrary web script or HTML via a…
CVE-2017-12262, published 2017-11-02. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauthenticated, adjacent attacker to gain…
CVE-2018-0368, published 2018-07-16. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability in Cisco Digital Network Architecture (DNA) Center could allow an authenticated, local attacker to access sensitive information on an affected system. The vulnerability is due to…