Cisco Cloud Application Policy Infrastructure Controller vulnerabilities

6 CVEs affecting Cisco Cloud Application Policy Infrastructure Controller, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1582, published 2021-08-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-1579, published 2021-08-25. High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days. A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated,…
CVE-2021-1578, published 2021-08-25. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated,…
CVE-2021-1580, published 2021-08-25. High severity, CVSS 7.2. EPSS: 1.8% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection…
CVE-2021-1577, published 2021-08-25. Critical severity, CVSS 9.1. EPSS: 1.3% chance of exploitation in the next 30 days. A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an…
CVE-2021-1581, published 2021-08-25. Critical severity, CVSS 9.1. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow a remote attacker to perform a command injection…
CVE-2021-1582, published 2021-08-25. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web UI of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC could allow an authenticated, remote attacker to perform a stored cross-site scripting…