Back to CVE Browser

CVE-2016-1386

HIGH

7.5

CVSS Severity Score

EPSS Score0.1180%

EPSS Percentile32.73th

PublishedApr 28, 2016

Last ModifiedMay 6, 2026

Vulnerability Description

The API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1) allows remote attackers to spoof administrative notifications via crafted attribute-value pairs, aka Bug ID CSCux15521.

Affected Platforms (CPE)

📦

Cisco

Application Policy Infrastructure Controller Enterprise Module

= 1.0.\(1\)

References & Advisories

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-apic

🔗 http://www.securitytracker.com/id/1035702

🔗 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160428-apic

🔗 http://www.securitytracker.com/id/1035702

Related Vulnerabilities

CVE-2017-122628.8

A vulnerability within the firewall configuration of the Cisco Application Policy Infrastructure Controller Enterprise Module (API...

CVE-2016-13658.8

The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote a...

CVE-2017-38737.5

A vulnerability in the Plug-and-Play (PnP) subsystem of the Cisco Aironet 1800, 2800, and 3800 Series Access Points running a Ligh...

CVE-2015-63376.1

Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0.10 ...