📦 Application Policy Infrastructure Controller

This vulnerability allows unauthenticated remote attackers to read or write arbitrary files on Cisco APIC and Cloud APIC systems due to improper access control in a specific API endpoint. Attackers ca...

This vulnerability allows unauthenticated remote attackers to bypass authentication on Cisco ACI Multi-Site Orchestrator (MSO) by exploiting improper token validation in a specific API endpoint. Succe...

Multiple vulnerabilities in Cisco Application Services Engine allow unauthenticated remote attackers to gain privileged access to host-level operations, access device-specific information, create diag...

This CSRF vulnerability in Cisco APIC and Cloud Network Controller web interfaces allows unauthenticated attackers to trick authenticated users into executing malicious actions via crafted links. If e...

This vulnerability allows authenticated remote attackers with Administrator read-only credentials to elevate privileges to Administrator with write privileges on Cisco APIC and Cloud APIC systems. Att...

This stored XSS vulnerability in Cisco APIC's web UI allows authenticated administrators to inject malicious scripts that execute when other users view affected pages. Only systems running vulnerable ...

This vulnerability in Cisco APIC allows authenticated local administrators to access sensitive information through insufficiently masked CLI command outputs. Attackers with valid administrative creden...