Cisco

Application Policy Infrastructure Controller

32 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.5

CVE-2020-3335

  • EPSS 0.28%
  • Veröffentlicht 03.06.2020 18:15:22
  • Zuletzt bearbeitet 21.11.2024 05:30:49

A vulnerability in the key store of Cisco Application Services Engine Software could allow an authenticated, local attacker to read sensitive information of other users on an affected device. The vulnerability is due to insufficient authorization lim...

5.3

CVE-2020-3333

  • EPSS 1.04%
  • Veröffentlicht 03.06.2020 18:15:22
  • Zuletzt bearbeitet 21.11.2024 05:30:49

A vulnerability in the API of Cisco Application Services Engine Software could allow an unauthenticated, remote attacker to update event policies on an affected device. The vulnerability is due to insufficient authentication of users who modify polic...

5.3

CVE-2020-3139

  • EPSS 1.04%
  • Veröffentlicht 26.01.2020 05:15:17
  • Zuletzt bearbeitet 21.11.2024 05:30:24

A vulnerability in the out of band (OOB) management interface IP table rule programming for Cisco Application Policy Infrastructure Controller (APIC) could allow an unauthenticated, remote attacker to bypass configured deny entries for specific IP po...

6.5

CVE-2019-1890

  • EPSS 0.63%
  • Veröffentlicht 04.07.2019 20:15:11
  • Zuletzt bearbeitet 21.11.2024 04:37:37

A vulnerability in the fabric infrastructure VLAN connection establishment of the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, adjacent attacker to bypass security validations a...

9

CVE-2019-1889

  • EPSS 2.82%
  • Veröffentlicht 04.07.2019 20:15:11
  • Zuletzt bearbeitet 21.11.2024 04:37:37

A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an authenticated, remote attacker to escalate privileges to root on an affected device. The vulnerability...

5.4

CVE-2019-1838

  • EPSS 0.83%
  • Veröffentlicht 03.05.2019 17:29:01
  • Zuletzt bearbeitet 21.11.2024 04:37:30

A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management...

5.3

CVE-2019-1692

  • EPSS 1.2%
  • Veröffentlicht 03.05.2019 15:29:00
  • Zuletzt bearbeitet 21.11.2024 04:37:06

A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, remote attacker to access sensitive system usage information. The vulnerability is due to a la...

7.8

CVE-2019-1682

  • EPSS 0.35%
  • Veröffentlicht 03.05.2019 15:29:00
  • Zuletzt bearbeitet 21.11.2024 04:37:05

A vulnerability in the FUSE filesystem functionality for Cisco Application Policy Infrastructure Controller (APIC) software could allow an authenticated, local attacker to escalate privileges to root on an affected device. The vulnerability is due to...

4.6

CVE-2019-1586

  • EPSS 0.2%
  • Veröffentlicht 03.05.2019 15:29:00
  • Zuletzt bearbeitet 21.11.2024 04:36:51

A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an unauthenticated, local attacker with physical access to obtain sensitive information from an affected device. The vulnerability is due to insecure re...

6.5

CVE-2019-1690

  • EPSS 0.62%
  • Veröffentlicht 11.03.2019 21:29:01
  • Zuletzt bearbeitet 21.11.2024 04:37:06

A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller (APIC) software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack ...