Secure Access Control System Security Vulnerabilities and Issues — Secure Access Control System CVE List

Lucene search

CiscoSecure Access Control System

12 matches found

CVE•added 2015/06/24 10:59 a.m.•50 views

CVE-2015-4219

Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force attempts to send valid c...

4CVSS6AI score0.00408EPSS

CVE•added 2015/05/15 1:59 a.m.•48 views

CVE-2015-0728

Cross-site scripting (XSS) vulnerability in Cisco Access Control Server (ACS) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuu11002.

4.3CVSS5.8AI score0.00263EPSS

CVE•added 2013/12/02 10:55 p.m.•47 views

CVE-2013-6695

The RBAC implementation in Cisco Secure Access Control System (ACS) does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug...

4CVSS5.7AI score0.00176EPSS

CVE•added 2013/07/12 9:55 p.m.•41 views

CVE-2013-3422

Cross-site scripting (XSS) vulnerability in Administration pages in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165.

4.3CVSS5.8AI score0.00263EPSS

CVE•added 2013/07/15 3:55 p.m.•39 views

CVE-2013-3428

The web interface in Cisco Secure Access Control System (ACS) does not properly suppress error-condition details, which allows remote authenticated users to obtain sensitive information via an unspecified request that triggers an error, aka Bug ID CSCue65957.

4CVSS5.9AI score0.00162EPSS

CVE•added 2017/02/22 2:59 a.m.•39 views

CVE-2017-3839

An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc04845. Known Affected Releases: 5...

4.3CVSS4.3AI score0.00397EPSS

CVE•added 2013/07/12 9:55 p.m.•38 views

CVE-2013-3423

Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCud75174.

4.3CVSS5.8AI score0.00263EPSS

CVE•added 2014/01/10 12:2 p.m.•38 views

CVE-2013-6974

4.3CVSS5.8AI score0.0042EPSS

CVE•added 2014/01/20 4:58 a.m.•37 views

CVE-2014-0668

Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCue65949.

4.3CVSS5.8AI score0.00561EPSS

CVE•added 2015/01/09 2:59 a.m.•36 views

CVE-2014-8028

Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Secure Access Control System (ACS) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCuq79019.

4.3CVSS5.8AI score0.00329EPSS

CVE•added 2013/07/12 9:55 p.m.•34 views

CVE-2013-3421

Cross-site scripting (XSS) vulnerability in the Help index page in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170.

4.3CVSS5.8AI score0.00263EPSS

CVE•added 2014/01/10 4:47 p.m.•34 views

CVE-2014-0663

Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum03625.

4.3CVSS5.8AI score0.00561EPSS