Cisco Secure Access Control Server SSH Login Denial of Service Vulnerability

The Cisco Secure Access Control System is the access policy control platform. A security vulnerability exists within the Secure Shell SSH of the Cisco Secure Access Control Server ACS, which can be exploited by a remote attacker to cause an unexpected termination of the SSH screen process,...

CVE-2015-6300

CVE-2015-6300 affects Cisco Secure Access Control Server (ACS) Solution Engine 5.7(0.15). A vulnerability in the SSH feature allows remote authenticated users to cause a denial of service by issuing crafted commands via CLI or GUI, triggering an SSH screen process crash (Bug ID CSCuw24694). The C...

PT-2015-7164

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control Server ACS Solution Engine version 5.70.15 Description The issue allows remote authenticated users to cause a denial of service, resulting in an SSH screen process crash. This can be achieved via crafted commands,...

CVE-2015-6300: Improper Input Validation

Cisco Secure Access Control Server ACS Solution Engine 5.70.15 allows remote authenticated users to cause a denial of service SSH screen process crash via crafted 1 CLI or 2 GUI commands, aka Bug ID CSCuw24694...

Cisco Secure Access Control Server SSH Login Denial of Service Vulnerability

A vulnerability in the Secure Shell SSH feature of the Cisco Secure Access Control Server ACS could allow an authenticated, remote attacker to cause a partial denial of service DoS condition due to the SSH screen process unexpectedly terminating. The vulnerability is due to improper input...

CVE-2015-0746

The REST API in Cisco Access Control Server ACS 5.50.46.2 allows remote attackers to cause a denial of service API outage by sending many requests, aka Bug ID CSCut62022...

CVE-2015-0746: Undefined Security Weakness

The REST API in Cisco Access Control Server ACS 5.50.46.2 allows remote attackers to cause a denial of service API outage by sending many requests, aka Bug ID CSCut62022...

CVE-2015-0746

Cisco ACS REST API Denial of Service vulnerability (CVE-2015-0746) affects ACS 5.5(0.46.2). A remote attacker can cause API outages by sending large numbers of requests to the REST API (Bug CSCut62022). Affected component is the REST API; root cause described in Cisco advisory. Remediation status...

Cisco Access Control Server Representational State Transfer Application Programming Interface Denial of Service Vulnerability

A vulnerability in the Representational State Transfer REST application programming interface API of the Cisco Access Control Server ACS could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to how the ACS REST API handles increased...

PT-2015-1382

Name of the Vulnerable Software and Affected Versions Cisco Access Control Server ACS version 5.50.46.2 Description The issue is related to the REST API in Cisco Access Control Server, which allows remote attackers to cause a denial of service by sending many requests. This is due to errors in...

CVE-2015-0729: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Secure Access Control Server Solution Engine ACSE 5.50.1 allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005...

PT-2015-4844

Name of the Vulnerable Software and Affected Versions Cisco Secure Access Control Server Solution Engine ACSE version 5.50.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack. Recommendations For version 5.50.1,...

CVE-2015-0728

Cross-site scripting XSS vulnerability in Cisco Access Control Server ACS 5.50.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu11002...

Cross site scripting

Cross-site scripting XSS vulnerability in Cisco Access Control Server ACS 5.50.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu11002...

PT-2015-4843

Name of the Vulnerable Software and Affected Versions Cisco Access Control Server ACS version 5.50.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. Recommendations For Cisco Access Control Server ACS version 5.50.1,...

CVE-2015-0728: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Cisco Access Control Server ACS 5.50.1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu11002...

Cisco Access Control Server File Inclusion Vulnerability

A vulnerability in Cisco Access Control Server ACS could allow an unauthenticated, remote attacker to perform a file inclusion attack. The vulnerability is due to improper input validation of certain parameters passed to an affected device. An attacker could exploit this vulnerability by convinci...

Cisco Access Control Server Cross-Site Scripting Vulnerability

A vulnerability in Cisco Access Control Server ACS could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack. The vulnerability is due to improper input validation of certain parameters passed to an affected device. An attacker could exploit this vulnerability b...

CVE-2015-0700

Cross-site request forgery CSRF vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.50.46.5 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj62924...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.50.46.5 allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj62924...