Cisco Secure Access Control Server vulnerabilities

34 CVEs affecting Cisco Secure Access Control Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-6349, published 2015-10-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-0356, published 2005-05-31. Medium severity, CVSS 5.0. EPSS: 82.8% chance of exploitation in the next 30 days. Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackers to cause a denial of service (connection loss) via a…
CVE-2006-3101, published 2006-06-21. Medium severity, CVSS 4.3. EPSS: 24% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote attackers to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok…
CVE-2006-4098, published 2006-12-31. High severity, CVSS 10.0. EPSS: 12.9% chance of exploitation in the next 30 days. Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary…
CVE-2007-0105, published 2007-01-09. High severity, CVSS 7.5. EPSS: 11.2% chance of exploitation in the next 30 days. Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows remote attackers to execute arbitrary…
CVE-2004-1099, published 2005-01-10. High severity, CVSS 10.0. EPSS: 10.2% chance of exploitation in the next 30 days. Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when the EAP-TLS protocol is enabled, does not…
CVE-2000-1054, published 2000-12-11. High severity, CVSS 10.0. EPSS: 8.4% chance of exploitation in the next 30 days. Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a large packet.
CVE-2003-0210, published 2003-05-12. High severity, CVSS 7.5. EPSS: 6% chance of exploitation in the next 30 days. Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS before 3.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long user…
CVE-2002-0159, published 2002-04-22. High severity, CVSS 7.5. EPSS: 5.4% chance of exploitation in the next 30 days. Format string vulnerability in the administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to crash…
CVE-2013-3466, published 2013-08-29. High severity, CVSS 9.3. EPSS: 5.1% chance of exploitation in the next 30 days. The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which…
CVE-2006-4097, published 2006-12-31. High severity, CVSS 7.8. EPSS: 4.3% chance of exploitation in the next 30 days. Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allow remote attackers to cause a…

Latest

CVE-2015-6349, published 2015-10-30. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote attackers to inject arbitrary web script or…
CVE-2015-6348, published 2015-10-30. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. The report-generation web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrictions, and read…
CVE-2015-6347, published 2015-10-30. Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days. The Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrictions, and create a dashboard or portlet, by visiting an…
CVE-2015-6346, published 2015-10-30. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
CVE-2015-6345, published 2015-10-30. Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days. SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to execute arbitrary SQL commands via a crafted URL, aka Bug…
CVE-2015-6300, published 2015-09-20. Medium severity, CVSS 4.0. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco Secure Access Control Server (ACS) Solution Engine 5.7(0.15) allows remote authenticated users to cause a denial of service (SSH screen process crash) via crafted (1) CLI or (2) GUI commands,…
CVE-2015-0746, published 2015-05-22. Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days. The REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) allows remote attackers to cause a denial of service (API outage) by sending many requests, aka Bug ID CSCut62022.
CVE-2015-0729, published 2015-05-16. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server Solution Engine (ACSE) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a file-inclusion…
CVE-2012-5424, published 2012-11-07. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. Cisco Secure Access Control System (ACS) 5.x before 5.2 Patch 11 and 5.3 before 5.3 Patch 7, when a certain configuration involving TACACS+ and LDAP is used, does not properly validate passwords,…