Cisco Secure Access Control Server Solution Engine vulnerabilities

5 CVEs affecting Cisco Secure Access Control Server Solution Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-0414, published 2018-10-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0414, published 2018-10-05. Medium severity, CVSS 5.7. EPSS: 1.8% chance of exploitation in the next 30 days. A vulnerability in the web-based UI of Cisco Secure Access Control Server could allow an authenticated, remote attacker to gain read access to certain information in an affected system. The…
CVE-2018-0218, published 2018-03-08. Low severity, CVSS 3.3. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticated, remote attacker to gain read access to certain…
CVE-2018-0207, published 2018-03-08. Low severity, CVSS 3.3. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability in the web-based user interface of the Cisco Secure Access Control Server prior to 5.8 patch 9 could allow an unauthenticated, remote attacker to gain read access to certain…
CVE-2015-0700, published 2015-04-17. Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.5(0.46.5) allows remote…
CVE-2013-3380, published 2013-06-12. Medium severity, CVSS 4.0. EPSS: 1.3% chance of exploitation in the next 30 days. The administrative web interface in the Access Control Server in Cisco Secure Access Control System (ACS) does not properly restrict the report view page, which allows remote authenticated users to…