{"id":"CVE-2015-4225","aliases":["EUVD-2015-4248","GHSA-37rg-q6m8-6h7g"],"status":"published","title":"Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000...","description":"Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485.","severity":{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02012,"percentile":0.81016,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2015-06-27T10:00:00Z","modified":"2026-06-17T00:26:57Z","products":[{"vendor":"cisco","product":"nx-os"}],"references":[{"url":"http://www.securityfocus.com/bid/75433","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=39529","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1032735","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4225"},{"url":"https://github.com/advisories/GHSA-37rg-q6m8-6h7g"}],"sources":{"cve":[{"id":"CVE-2015-4225","description":"Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485.","status":"published","published":"2015-06-27T10:00:00Z","modified":"2024-08-06T06:11:11.783Z","updated_at":"2026-11-02T14:35:43.322279Z"}],"euvd":[{"id":"EUVD-2015-4248","description":"Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485.","status":"published","published":"2015-06-27T10:00:00Z","modified":"2024-08-06T06:11:11Z","updated_at":"2026-11-03T02:22:04.533858Z"}],"ghsa":[{"id":"GHSA-37rg-q6m8-6h7g","title":"Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000...","description":"Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485.","status":"published","published":"2022-05-17T03:13:36Z","modified":"2023-01-27T05:06:57Z","updated_at":"2026-11-02T14:43:01.321842Z"}],"nvd":[{"id":"CVE-2015-4225","description":"Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC health scoring, which allows remote authenticated users to obtain sensitive information via unspecified vectors, aka Bug ID CSCuq77485.","status":"published","published":"2015-06-27T10:59:01.173Z","modified":"2026-06-17T00:26:57.343Z","cvss":[{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:03:05.884985Z"}]}}