application policy infrastructure controller vulnerabilities and fixes

Recent CVEs affecting application policy infrastructure controller, with upgrade or downgrade steps. 6 tracked.

Also searched as: applicationpolicyinfrastructurecontroller.

application policy infrastructure controller has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-26. Highest priority: CVE-2024-20478 (score 36/100).

CVE-2025-20119 MEDIUM 6.0 MITIGATE A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attac
CVE-2025-20118 MEDIUM 4.4 MITIGATE A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authentica
CVE-2025-20117 MEDIUM 5.1 MITIGATE A vulnerability in the CLI of Cisco APIC could allow an authenticated, local attacker to execute arbitrary com
CVE-2025-20116 MEDIUM 4.8 MITIGATE A vulnerability in the web UI of Cisco APIC could allow an authenticated, remote attacker to perform a stored
CVE-2024-20478 MEDIUM 6.5 MITIGATE A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC)
CVE-2024-20279 MEDIUM 4.3 MITIGATE A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Co

FAQ

How do I fix application policy infrastructure controller vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is application policy infrastructure controller being exploited right now?

None of the tracked application policy infrastructure controller CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which application policy infrastructure controller CVE should I patch first?

CVE-2024-20478 currently ranks highest (36/100): A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC).

RSS feed for application policy infrastructure controller · ← Back to latest CVEs