Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Cisco Application Policy Infrastructure Controller (APIC) — Vulnerabilities & Security Advisories 25

All 25 CVE vulnerabilities found in Cisco Application Policy Infrastructure Controller (APIC), with AI-generated Chinese analysis, references, and POCs.

This page documents known security weaknesses for the Cisco Application Policy Infrastructure Controller, categorized by Common Weakness Enumerations. It aggregates a comprehensive list of vulnerabilities affecting this specific network controller product, covering incidents reported from its initial release through recent updates to ensure a complete historical record. Users can track Cisco’s security advisories as they are released, gain a deeper understanding of the specific weakness classes exploited in this environment, and look up the product’s full vulnerability history to assess long-term risk exposure. The content is structured to help security professionals, system administrators, and compliance officers quickly identify critical flaws that may impact the integrity, confidentiality, or availability of software-defined networking environments. By centralizing this information, the resource facilitates informed decision-making regarding patch management, risk acceptance, and architectural mitigations. The data reflects public disclosures and verified reports, providing a transparent view of the security posture of the APIC over time. This aggregation serves as a reference for understanding the evolution of security issues within the Cisco ACI ecosystem, allowing teams to prioritize remediation efforts based on severity and relevance to their deployment. It is designed to support ongoing security operations by offering clear, accessible data without unnecessary commentary or promotional material.

Vendor: Cisco

CVE IDTitleCVSSSeverityPublished
CVE-2026-20107 Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability CWE-1220 5.5 Medium2026-02-25
CVE-2025-20119 Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability CWE-362 6.0 Medium2025-02-26
CVE-2025-20118 Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability CWE-212 4.4 Medium2025-02-26
CVE-2025-20117 Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability CWE-77 5.1 Medium2025-02-26
CVE-2025-20116 Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability CWE-79 4.8 Medium2025-02-26
CVE-2024-20478 Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability CWE-250 6.5 Medium2024-08-28
CVE-2024-20279 Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability CWE-284 4.3 Medium2024-08-28
CVE-2023-20230 Cisco Application Policy Infrastructure Controller 安全漏洞 CWE-284 5.4 Medium2023-08-23
CVE-2023-20011 Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability CWE-352 8.8 High2023-02-23
CVE-2021-1582 Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability CWE-79 5.4 Medium2021-08-25
CVE-2021-1581 Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities CWE-284 6.5 Medium2021-08-25
CVE-2021-1580 Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities CWE-284 6.5 Medium2021-08-25
CVE-2021-1579 Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability CWE-250 8.1 High2021-08-25
CVE-2021-1578 Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability CWE-636 8.8 High2021-08-25
CVE-2021-1577 Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability CWE-284 9.1 Critical2021-08-25
CVE-2020-3335 Cisco Application Services Engine Software Authorization Vulnerability CWE-306 5.5 -2020-06-03
CVE-2020-3333 Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability CWE-306 5.3 -2020-06-03
CVE-2020-3139 Cisco Application Policy Infrastructure Controller Out Of Band Management IP Tables Bypass Vulnerability CWE-20 5.3 -2020-01-26
CVE-2019-1889 Cisco Application Policy Infrastructure Controller REST API Privilege Escalation Vulnerability CWE-264 7.2 -2019-07-04
CVE-2019-1838 Cisco Application Policy Infrastructure Controller Web-Based Management Interface Cross-Site Scripting Vulnerability CWE-79 5.4 -2019-05-03
CVE-2019-1692 Cisco Application Policy Infrastructure Controller Web-Based Management Interface Usage Information Disclosure Vulnerability CWE-200 5.3 -2019-05-03
CVE-2019-1682 Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability CWE-264 7.8 -2019-05-03
CVE-2019-1586 Cisco Application Policy Infrastructure Controller Recoverable Encryption Key Vulnerability CWE-320 4.6 -2019-05-03
CVE-2019-1587 Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Filter Query Information Disclosure Vulnerability CWE-399 4.3 -2019-05-03
CVE-2019-1690 Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability CWE-284 8.3 -2019-03-11

All 25 known CVE vulnerabilities affecting Cisco Application Policy Infrastructure Controller (APIC) with full Chinese analysis, references, and POCs where available.