512 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in Cisco Secure Access Control Server ACS 5.70.15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
Design/Logic Flaw
The Solution Engine in Cisco Secure Access Control Server ACS 5.70.15 allows remote authenticated users to bypass intended RBAC restrictions, and create a dashboard or portlet, by visiting an unspecified web page...
CVE-2015-6347
CVE-2015-6347 affects Cisco Secure Access Control Server (ACS) 5.7(0.15) where the Solution Engine allows remote authenticated users to bypass RBAC and create a dashboard or portlet by visiting an unrestricted web page. The root cause is flawed RBAC validation when creating administrative dashboa...
CVE-2015-6348
The CVE-2015-6348 issue affects Cisco Secure Access Control Server (ACS) 5.7(0.15) where the report-generation web interface contains RBAC validation weaknesses. An authenticated remote user could access restricted report/status pages via the report-generation web interface, potentially exposing ...
CVE-2015-6345
CVE-2015-6345 affects Cisco Secure ACS 5.7(0.15) with the Solution Engine. Root cause: lack of input validation in SQL queries, enabling a remote authenticated attacker to run arbitrary SQL commands via a crafted URL. Impact: partial confidentiality, integrity, and availability. Cisco has publish...
CVE-2015-6345
SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server ACS 5.70.15 allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug ID CSCuw24700...
CVE-2015-6346
CVE-2015-6346 is a cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server (ACS) web interface, specifically in ACS 5.7(0.15). The root cause, per Cisco’s advisory, is a lack of input validation in DOM handling, enabling a DOM-based XSS when a crafted URL is processed. The ...
CVE-2015-6346
Cross-site scripting XSS vulnerability in Cisco Secure Access Control Server ACS 5.70.15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2015-6349
CVE-2015-6349 affects Cisco Secure Access Control Server (ACS) 5.7(0.15) Solution Engine, where the web interface is vulnerable to reflecte d cross-site scripting due to lack of input validation on user-supplied input. An unauthenticated, remote attacker could exploit a crafted URL to inject arbi...
CVE-2015-6348
The report-generation web interface in the Solution Engine in Cisco Secure Access Control Server ACS 5.70.15 allows remote authenticated users to bypass intended RBAC restrictions, and read report or status information, by visiting an unspecified web page...
CVE-2015-6349
Cross-site scripting XSS vulnerability in the web interface in the Solution Engine in Cisco Secure Access Control Server ACS 5.70.15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...
CVE-2015-6347
The Solution Engine in Cisco Secure Access Control Server ACS 5.70.15 allows remote authenticated users to bypass intended RBAC restrictions, and create a dashboard or portlet, by visiting an unspecified web page...
Cisco Secure Access Control Server Reflective Cross-Site Scripting Vulnerability
A vulnerability in the Cisco Secure Access Control Server ACS web interface could allow an unauthenticated, remote attacker to impact the integrity of the system by executing a reflective cross-site scripting XSS attack. The vulnerability is due to a lack of input validation on user-supplied...
CVE-2015-6300
Cisco Secure Access Control Server ACS Solution Engine 5.70.15 allows remote authenticated users to cause a denial of service SSH screen process crash via crafted 1 CLI or 2 GUI commands, aka Bug ID CSCuw24694...
Code injection
Cisco Secure Access Control Server ACS Solution Engine 5.70.15 allows remote authenticated users to cause a denial of service SSH screen process crash via crafted 1 CLI or 2 GUI commands, aka Bug ID CSCuw24694...
CVE-2015-6300
CVE-2015-6300 affects Cisco Secure Access Control Server (ACS) Solution Engine 5.7(0.15). A vulnerability in the SSH feature allows remote authenticated users to cause a denial of service by issuing crafted commands via CLI or GUI, triggering an SSH screen process crash (Bug ID CSCuw24694). The C...
CVE-2015-6300
Cisco Secure Access Control Server ACS Solution Engine 5.70.15 allows remote authenticated users to cause a denial of service SSH screen process crash via crafted 1 CLI or 2 GUI commands, aka Bug ID CSCuw24694...
Microsoft has Built its own Linux Operating System
Sit Tight on your seats, because you're gonna get a Shock. Microsoft has developed an Operating System powered by LINUX. Close your mouth first. It’s True! Microsoft has built its own Linux-based operating system called Azure Cloud Switch ACS and believe me, under Satya Nadella, Microsoft has...
Improper access control
The REST API in Cisco Access Control Server ACS 5.50.46.2 allows remote attackers to cause a denial of service API outage by sending many requests, aka Bug ID CSCut62022...