1096 matches found
Cisco Secure Desktop (CSD) Arbitrary Command Execution Vulnerability
Cisco Secure Desktop CSD is a secure desktop product from Cisco that reduces the risk of remote users logging off and cookies, browser history, temporary files, and downloads being left on the system after the SSL VPN session times out with encryption. An arbitrary command execution vulnerability...
CVE-2015-0700
Cross-site request forgery CSRF vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.50.46.5 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj62924...
Command injection
A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop CSD, allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001...
CVE-2015-0691
A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop CSD, allows remote attackers to execute arbitrary commands via a crafted web site, aka Bug ID CSCup83001...
CVE-2015-0691
CVE-2015-0691 concerns Cisco Secure Desktop (CSD) Cache Cleaner, where a Cisco-signed Java Archive (JAR) in the Cache Cleaner component could allow an unauthenticated, remote attacker to execute arbitrary commands via a crafted web site (Bug CSCup83001). The issue: code execution via the signed J...
CVE-2015-0700
Cross-site request forgery CSRF vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.50.46.5 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj62924...
CVE-2014-2130
Cisco Secure Access Control Server ACS provides an unintentional administration web interface based on Apache Tomcat, which allows remote authenticated users to modify application files and configuration files, and consequently execute arbitrary code, by leveraging administrative privileges, aka...
CVE-2014-2130
Cisco Secure Access Control Server ACS provides an unintentional administration web interface based on Apache Tomcat, which allows remote authenticated users to modify application files and configuration files, and consequently execute arbitrary code, by leveraging administrative privileges, aka...
Cisco Secure Access Control System SQLi Vulnerability (cisco-sa-20150211-csacs)
The version of Cisco Secure Access Control System ACS running on the remote host is prior to 5.5 patch 7. It is, therefore, affected by a SQL injection vulnerability due to not properly sanitizing user input to the ACS View reporting interface pages. An authenticated, remote attacker, using craft...
CVE-2015-0580
Summary: CVE-2015-0580 affects Cisco Secure Access Control System (ACS) prior to 5.5 patch 7, via multiple SQL injection flaws in the ACS View reporting interface. An authenticated remote attacker can craft HTTPS requests to disclose or modify data in ACS View databases due to improper input sani...
Multiple Cross-Site Scripting Vulnerabilities in Cisco Secure Access Control Server (CNVD-2015-00230)
Cisco Secure ACS Access Control Server is a multifunction AAA authentication server. Multiple cross-site scripting vulnerabilities exist in Cisco Secure Access Control Server, allowing remote attackers to inject arbitrary web script or HTML via unspecified parameters...
Cisco Secure Access Control Server Elevation of Privilege Vulnerability
Cisco Secure ACS Access Control Server is a multifunction AAA authentication server. An elevation of privilege vulnerability exists in Cisco Secure Access Control Server, which allows remote authenticated users to gain network device administrator privileges via crafted HTTP requests to create,...
CVE-2014-8029
Open redirect vulnerability in the web interface in Cisco Secure Access Control System ACS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCuq74150...
Open redirect
Open redirect vulnerability in the web interface in Cisco Secure Access Control System ACS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCuq74150...
CVE-2014-8028
Multiple cross-site scripting XSS vulnerabilities in the web framework in Cisco Secure Access Control System ACS allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq79019...
Cisco Secure ACS 2.3 LoginProxy.CGI Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18449/info Cisco Secure ACS is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitra...
Cisco Secure ACS Portal Interface Session Hijacking
The version of Cisco Secure Access Control System ACS on the remote host is affected by a vulnerability in the Portal Interface. Due to insufficient session management, this could allow a remote, authenticated attacker to perform actions in the portal with the privileges of another user. C Tenabl...
Cisco Secure ACS Portal XSS (CSCue65949)
The version of Cisco Secure Access Control System ACS running on the remote host is affected by a cross-site scripting XSS vulnerability due to insufficient input validation of a parameter. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid72141; scriptversion"1.7";...
Cisco Secure ACS RMI Arbitrary File Read (CSCud75169)
The version of Cisco Secure Access Control System ACS on the remote host is affected by a vulnerability in the Remote Method Invocation RMI interface. Due to insufficient authorization enforcement, this issue could allow a remote, authenticated attacker to read arbitrary files on the ACS server. ...
Cross site scripting
Cross-site scripting XSS vulnerability in the portal in Cisco Secure Access Control System ACS allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCue65949...