Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CiscoSecure Access Control System

10 matches found

CVE
CVE•added 2013/04/29 9:55 p.m.•50 views

CVE-2013-1196

The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System, Prime LAN Management Solution (LMS), Prime Collaboration, Unified Provisioning Manager, Network Ser...

6.8CVSS6.3AI score0.00084EPSS
CVE
CVE•added 2017/02/22 2:59 a.m.•48 views

CVE-2017-3840

A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect Vulnerability. More Information: CSCvc04849. Known Affected Releases: 5.8(2.5).

6.1CVSS6.2AI score0.00278EPSS
CVE
CVE•added 2013/02/19 11:55 p.m.•44 views

CVE-2013-1125

The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and N...

6.8CVSS6.3AI score0.00084EPSS
CVE
CVE•added 2015/01/09 2:59 a.m.•43 views

CVE-2014-8027

The RBAC component in Cisco Secure Access Control System (ACS) allows remote authenticated users to obtain Network Device Administrator privileges for Create, Delete, Read, and Update operations via crafted HTTP requests, aka Bug ID CSCuq79034.

6.5CVSS6.4AI score0.00161EPSS
CVE
CVE•added 2017/02/22 2:59 a.m.•43 views

CVE-2017-3838

A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvc04838. Known Affected Releases: 5.8(2.5).

6.1CVSS5.9AI score0.0032EPSS
CVE
CVE•added 2015/02/12 1:59 a.m.•41 views

CVE-2015-0580

Multiple SQL injection vulnerabilities in the ACS View reporting interface pages in Cisco Secure Access Control System (ACS) before 5.5 patch 7 allow remote authenticated administrators to execute arbitrary SQL commands via crafted HTTPS requests, aka Bug ID CSCuq79027.

6.5CVSS8.2AI score0.00105EPSS
CVE
CVE•added 2014/01/16 7:55 p.m.•40 views

CVE-2014-0667

The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authenticated users to read arbitrary files via a request to this interface, aka Bug ID CSCud75169.

6.3CVSS6.3AI score0.00623EPSS
CVE
CVE•added 2013/05/16 3:36 a.m.•39 views

CVE-2013-1200

Session fixation vulnerability in Cisco Secure Access Control System (ACS) allows remote attackers to hijack web sessions via unspecified vectors, aka Bug ID CSCud95787.

6.8CVSS6.8AI score0.00365EPSS
CVE
CVE•added 2015/03/06 2:59 a.m.•36 views

CVE-2014-2130

Cisco Secure Access Control Server (ACS) provides an unintentional administration web interface based on Apache Tomcat, which allows remote authenticated users to modify application files and configuration files, and consequently execute arbitrary code, by leveraging administrative privileges, aka ...

6.5CVSS7.1AI score0.01153EPSS
CVE
CVE•added 2013/07/12 9:55 p.m.•35 views

CVE-2013-3424

Cross-site request forgery (CSRF) vulnerability in Administration and View pages in Cisco Secure Access Control System (ACS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177.

6.8CVSS7.3AI score0.00116EPSS