Cisco Secure Access Control System
7 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-0253 | Cisco Secure Access Control System | A vulnerability in the ACS Report component of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to e | CRITICAL 9.8 | 6.7 % | ||
| CVE-2018-0147 | Cisco Secure Access Control System | A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthe | CRITICAL 9.8 | 18 % | KEV | |
| CVE-2017-12354 | Cisco Secure Access Control System | A vulnerability in the web-based interface of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to vi | MEDIUM 5.3 | 2.2 % | ||
| CVE-2017-3841 | Cisco Secure Access Control System | A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to disc | HIGH 7.5 | 2.4 % | ||
| CVE-2017-3840 | Cisco Secure Access Control System | A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to redi | MEDIUM 6.1 | 1.5 % | ||
| CVE-2017-3839 | Cisco Secure Access Control System | An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthen | MEDIUM 4.3 | 1.6 % | ||
| CVE-2017-3838 | Cisco Secure Access Control System | A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-sit | MEDIUM 6.1 | 1.5 % |