Show filters
42 Total Results
Displaying 11-20 of 42
Sort by:
Attacker Value
Unknown
CVE-2015-6346
Disclosure Date: October 30, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
0
Attacker Value
Unknown
CVE-2015-6300
Disclosure Date: September 20, 2015 (last updated October 05, 2023)
Cisco Secure Access Control Server (ACS) Solution Engine 5.7(0.15) allows remote authenticated users to cause a denial of service (SSH screen process crash) via crafted (1) CLI or (2) GUI commands, aka Bug ID CSCuw24694.
0
Attacker Value
Unknown
CVE-2015-0746
Disclosure Date: May 22, 2015 (last updated October 05, 2023)
The REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) allows remote attackers to cause a denial of service (API outage) by sending many requests, aka Bug ID CSCut62022.
0
Attacker Value
Unknown
CVE-2015-0729
Disclosure Date: May 16, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server Solution Engine (ACSE) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005.
0
Attacker Value
Unknown
CVE-2015-0700
Disclosure Date: April 17, 2015 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.5(0.46.5) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj62924.
0
Attacker Value
Unknown
CVE-2013-3466
Disclosure Date: August 29, 2013 (last updated October 05, 2023)
The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote attackers to execute arbitrary commands via crafted EAP-FAST packets, aka Bug ID CSCui57636.
0
Attacker Value
Unknown
CVE-2013-3380
Disclosure Date: June 12, 2013 (last updated October 05, 2023)
The administrative web interface in the Access Control Server in Cisco Secure Access Control System (ACS) does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279.
0
Attacker Value
Unknown
CVE-2012-5424
Disclosure Date: November 07, 2012 (last updated October 05, 2023)
Cisco Secure Access Control System (ACS) 5.x before 5.2 Patch 11 and 5.3 before 5.3 Patch 7, when a certain configuration involving TACACS+ and LDAP is used, does not properly validate passwords, which allows remote attackers to bypass authentication by sending a valid username and a crafted password string, aka Bug ID CSCuc65634.
0
Attacker Value
Unknown
CVE-2011-3293
Disclosure Date: May 02, 2012 (last updated October 04, 2023)
Multiple cross-site request forgery (CSRF) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences, aka Bug ID CSCtr78143.
0
Attacker Value
Unknown
CVE-2011-3317
Disclosure Date: May 02, 2012 (last updated October 04, 2023)
Multiple cross-site scripting (XSS) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtr78192.
0
