Vulnerabilities > Cisco > Application Policy Infrastructure Controller Enterprise Module > 1.0.1

DATE CVE VULNERABILITY TITLE RISK
2017-11-02 CVE-2017-12262 Improper Initialization vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module
A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) could allow an unauthenticated, adjacent attacker to gain privileged access to services only available on the internal network of the device.
low complexity
cisco CWE-665
5.8
2016-04-28 CVE-2016-1386 Permissions, Privileges, and Access Controls vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module 1.0.(1)
The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka Bug ID CSCux15521.
network
low complexity
cisco CWE-264
5.0