SA
Product
Secure Access Control System
On CISA KEVExploited in the wild
35
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 1Medium 5Low 0
Watch
Add Secure Access Control System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-3840 | 6.1 | Feb 22 | A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page,… Affected: 5.8(2.5) |
| CVE-2017-3838 | 6.1 | Feb 22 | A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-site scripting (XSS) attack against the… Affected: 5.8(2.5) |
| CVE-2017-6769 | 5.4 | Aug 7 | A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote attacker to conduct a stored cross-site… Affected: 5.8(0.8); 5.8(1.5) |
| CVE-2017-12354 | 5.3 | Nov 30 | A vulnerability in the web-based interface of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to view sensitive information on an affected… Affected: 5.8(0.32) |
| CVE-2017-3839 | 4.3 | Feb 22 | An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to have read… Affected: 5.8(2.5) |
Showing 5