Cisco Application Policy Infrastructure Controller Vulnérabilités

Chronologie

Version

1.16
1.04
1.1(0.920a)3
1.3(2f)3
1.22

Contre-mesures

Official Fix19
Temporary Fix0
Workaround0
Unavailable0
Not Defined11

Exploitabilité

High0
Functional0
Proof-of-Concept0
Unproven1
Not Defined29

Vecteur d'accès

Not Defined0
Physical1
Local7
Adjacent2
Network20

Authentification

Not Defined0
High2
Low15
None13

Interaction de l'utilisateur

Not Defined0
Required5
None25

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤42
≤52
≤64
≤76
≤811
≤95
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤42
≤53
≤63
≤79
≤88
≤95
≤100

VulDB

≤10
≤20
≤31
≤41
≤53
≤62
≤77
≤810
≤96
≤100

NVD

≤10
≤20
≤30
≤40
≤51
≤63
≤75
≤87
≤93
≤100

CNA

≤10
≤20
≤30
≤40
≤52
≤64
≤70
≤82
≤91
≤100

Fournisseur

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploiter 0 jour

<1k1
<2k0
<5k1
<10k8
<25k18
<50k2
<100k0
≥100k0

Exploiter aujourd'hui

<1k18
<2k2
<5k6
<10k4
<25k0
<50k0
<100k0
≥100k0

Exploiter le volume du marché

🔴 CTI Activités

Affected Versions (33): 1.0, 1.0(1), 1.0(1.110a), 1.0(1e), 1.0(1h), 1.0(1k), 1.0(1n), 1.0(2j), 1.0(2m), 1.0(3f), 1.0(3i), 1.0(3k), 1.0(3n), 1.0(4h), 1.0(4o), 1.0.1, 1.1, 1.1(0.920a), 1.1(1j), 1.1(3f), 1.1j, 1.2, 1.2 Base, 1.2(2), 1.2(3), 1.2.2, 1.3, 1.3(1), 1.3(2), 1.3(2f), 1.4, 2.0 Base, 2.0(1)

Link to Product Website: https://www.cisco.com/

PubliéBaseTempVulnérabilité0dayAujourd'huiExpConCTICVE
23/08/20236.46.2Cisco Application Policy Infrastructure Controller Security Domain elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2023-20230
22/02/20237.37.2Cisco Application Policy Infrastructure Controller cross site request forgery$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2023-20011
26/08/20213.53.4Cisco Application Policy Infrastructure Controller Web UI cross site scripting$0-$5k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1582
26/08/20218.88.4Cisco Application Policy Infrastructure Controller API Endpoint elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1579
26/08/20217.26.9Cisco Application Policy Infrastructure Controller Web UI/API Endpoint elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1581
26/08/20217.26.9Cisco Application Policy Infrastructure Controller Web UI/API Endpoint elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1580
26/08/20218.88.4Cisco Application Policy Infrastructure Controller API Endpoint Privilege Escalation$25k-$100k$0-$5kNot DefinedOfficial Fix0.00CVE-2021-1578
26/08/20217.37.0Cisco Application Policy Infrastructure Controller API Endpoint elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2021-1577
26/01/20206.05.9Cisco Application Policy Infrastructure Controller OOB Management Interface elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.04CVE-2020-3139
04/07/20197.77.6Cisco Application Policy Infrastructure Controller REST API elévation de privilèges$5k-$25k$0-$5kNot DefinedOfficial Fix0.02CVE-2019-1889

20 plus d'entrées ne sont pas affichées

plus d'entrées par Cisco

Want to stay up to date on a daily basis?

Enable the mail alert feature now!