What’s Vulnerable › Products
Cisco Application Policy Infrastructure Controller (APIC) vulnerabilities
40 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.
Check whether your Cisco Application Policy Infrastructure Controller (APIC) version is affected
Latest Cisco Application Policy Infrastructure Controller (APIC) vulnerabilities
- CVE-2026-76500 — Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Control of a Resource Through its Lifetime Vulnerabilities (CVSS 9.8)
- CVE-2026-76499 — Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities (CVSS 9.8)
- CVE-2026-76498 — Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities (CVSS 9.8)
- CVE-2026-76488 — Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability (CVSS 6.5)
- CVE-2026-20321 — Cisco Application Policy Infrastructure Controller API Command Injection Vulnerability (CVSS 6.5)
- CVE-2026-20107 — Cisco Application Policy Infrastructure Controller Denial of Service Vulnerability (CVSS 5.5)
- CVE-2025-20119 — Cisco Application Policy Infrastructure Controller Authenticated Local Denial of Service Vulnerability (CVSS 5.7)
- CVE-2025-20118 — Cisco Application Policy Infrastructure Controller Authenticated Command Injection Due to Sensitive Disclosure Vulnerability (CVSS 4.4)
- CVE-2025-20117 — Cisco Application Policy Infrastructure Controller Authenticated Command Injection Vulnerability (CVSS 6.7)
- CVE-2025-20116 — Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability (CVSS 4.8)
- CVE-2024-20478 — Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability (CVSS 7.2)
- CVE-2024-20279 — Cisco Application Policy Infrastructure Controller Unauthorized Policy Actions Vulnerability (CVSS 4.3)
- CVE-2023-20230 — (CVSS 5.4)
- CVE-2023-20011 — Cisco Application Policy Infrastructure Controller and Cisco Cloud Network Controller Cross-Site Request Forgery Vulnerability (CVSS 8.8)
- CVE-2021-1582 — Cisco Application Policy Infrastructure Controller Stored Cross-Site Scripting Vulnerability (CVSS 5.4)
- CVE-2021-1581 — Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities (CVSS 9.1)
- CVE-2021-1580 — Cisco Application Policy Infrastructure Controller Command Injection and File Upload Vulnerabilities (CVSS 7.2)
- CVE-2021-1579 — Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability (CVSS 8.8)
- CVE-2021-1578 — Cisco Application Policy Infrastructure Controller Privilege Escalation Vulnerability (CVSS 8.8)
- CVE-2021-1577 — Cisco Application Policy Infrastructure Controller Arbitrary File Read and Write Vulnerability (CVSS 9.1)
- CVE-2021-1396 — Cisco Application Services Engine Unauthorized Access Vulnerabilities (CVSS 6.5)
- CVE-2021-1393 — Cisco Application Services Engine Unauthorized Access Vulnerabilities (CVSS 9.8)
- CVE-2021-1388 — Cisco ACI Multi-Site Orchestrator Application Services Engine Deployment Authentication Bypass Vulnerability (CVSS 10.0)
- CVE-2020-3335 — Cisco Application Services Engine Software Authorization Vulnerability (CVSS 5.5)
- CVE-2020-3333 — Cisco Application Services Engine Software Unauthenticated Event Policies Update Vulnerability (CVSS 5.3)