Secure Access Control System (Cisco) - vulnerabilities (CVEs)

35 CVEs, 0 in the last 30 days, 46 known versions, newest CVE from 2018-05-02. Vendor: Cisco.

CVEs of Secure Access Control System

CVE-2018-0253 - CVSS 9.8 (critical), 2018-05-02: A vulnerability in the ACS Report component of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary…
CVE-2018-0147 - CVSS 9.8 (critical), 2018-03-08: A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote…
CVE-2017-12354 - CVSS 5.3 (medium), 2017-11-30: A vulnerability in the web-based interface of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to view sensitive…
CVE-2017-6769 - CVSS 5.4 (medium), 2017-08-07: A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote attacker to conduct…
CVE-2017-3838 - CVSS 6.1 (medium), 2017-02-22: A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-site scripting (XSS)…
CVE-2017-3841 - CVSS 7.5 (high), 2017-02-22: A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to disclose sensitive…
CVE-2017-3840 - CVSS 6.1 (medium), 2017-02-22: A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to redirect a user to a…
CVE-2017-3839 - CVSS 4.3 (medium), 2017-02-22: An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote…
CVE-2015-4219 - CVSS 4 (medium), 2015-06-24: Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access…
CVE-2015-0728 - CVSS 4.3 (medium), 2015-05-15: Cross-site scripting (XSS) vulnerability in Cisco Access Control Server (ACS) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a…
CVE-2014-2130 - CVSS 6.5 (medium), 2015-03-06: Cisco Secure Access Control Server (ACS) provides an unintentional administration web interface based on Apache Tomcat, which allows remote authenticated…
CVE-2015-0580 - CVSS 6.5 (medium), 2015-02-12: Multiple SQL injection vulnerabilities in the ACS View reporting interface pages in Cisco Secure Access Control System (ACS) before 5.5 patch 7 allow remote…
CVE-2014-8029 - CVSS 5.8 (medium), 2015-01-09: Open redirect vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to redirect users to arbitrary web sites…
CVE-2014-8028 - CVSS 4.3 (medium), 2015-01-09: Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco Secure Access Control System (ACS) allow remote attackers to inject…
CVE-2014-8027 - CVSS 6.5 (medium), 2015-01-09: The RBAC component in Cisco Secure Access Control System (ACS) allows remote authenticated users to obtain Network Device Administrator privileges for Create,…
CVE-2014-0678 - CVSS 5.5 (medium), 2014-01-25: The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote authenticated users to hijack sessions…
CVE-2014-0668 - CVSS 4.3 (medium), 2014-01-20: Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or…
CVE-2014-0648 - CVSS 10 (critical), 2014-01-16: The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which…
CVE-2014-0667 - CVSS 6.3 (medium), 2014-01-16: The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authenticated users to…
CVE-2014-0650 - CVSS 10 (critical), 2014-01-16: The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands…
CVE-2014-0649 - CVSS 9 (critical), 2014-01-16: The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote…
CVE-2014-0663 - CVSS 4.3 (medium), 2014-01-10: Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web…
CVE-2013-6974 - CVSS 4.3 (medium), 2014-01-10: Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web…
CVE-2013-6695 - CVSS 4 (medium), 2013-12-02: The RBAC implementation in Cisco Secure Access Control System (ACS) does not properly verify privileges for support-bundle downloads, which allows remote…
CVE-2013-5536 - CVSS 5 (medium), 2013-10-24: Cisco Secure Access Control System (ACS) does not properly implement an incoming-packet firewall rule, which allows remote attackers to cause a denial of…
CVE-2013-5470 - CVSS 5 (medium), 2013-09-04: Cisco Secure Access Control System (ACS) does not properly handle requests to read from the TACACS+ socket, which allows remote attackers to cause a denial of…
CVE-2013-3428 - CVSS 4 (medium), 2013-07-15: The web interface in Cisco Secure Access Control System (ACS) does not properly suppress error-condition details, which allows remote authenticated users to…
CVE-2013-3422 - CVSS 4.3 (medium), 2013-07-12: Cross-site scripting (XSS) vulnerability in Administration pages in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web…
CVE-2013-3424 - CVSS 6.8 (medium), 2013-07-12: Cross-site request forgery (CSRF) vulnerability in Administration and View pages in Cisco Secure Access Control System (ACS) allows remote attackers to hijack…
CVE-2013-3423 - CVSS 4.3 (medium), 2013-07-12: Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web…
CVE-2013-3421 - CVSS 4.3 (medium), 2013-07-12: Cross-site scripting (XSS) vulnerability in the Help index page in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web…
CVE-2013-1200 - CVSS 6.8 (medium), 2013-05-16: Session fixation vulnerability in Cisco Secure Access Control System (ACS) allows remote attackers to hijack web sessions via unspecified vectors, aka Bug ID…
CVE-2013-1196 - CVSS 6.8 (medium), 2013-04-29: The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking…
CVE-2013-1125 - CVSS 6.8 (medium), 2013-02-19: The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN…
CVE-2011-0951 - CVSS 5 (medium), 2011-04-04: The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to…