Cisco Secure ACS Solution Engine vulnerabilities

4 CVEs affecting Cisco Secure ACS Solution Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2004-1099, published 2005-01-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2004-1099, published 2005-01-10. High severity, CVSS 10.0. EPSS: 10.2% chance of exploitation in the next 30 days. Cisco Secure Access Control Server for Windows (ACS Windows) and Cisco Secure Access Control Server Solution Engine (ACS Solution Engine) 3.3.1, when the EAP-TLS protocol is enabled, does not…
CVE-2004-1458, published 2004-12-31. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. The CSAdmin web administration interface for Cisco Secure Access Control Server (ACS) 3.2(2) build 15 allows remote attackers to cause a denial of service (hang) via a flood of TCP connections to…
CVE-2004-1461, published 2004-12-31. High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days. Cisco Secure Access Control Server (ACS) 3.2(3) and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers…
CVE-2004-1460, published 2004-12-31. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Cisco Secure Access Control Server (ACS) 3.2(3) and earlier, when configured with an anonymous bind in Novell Directory Services (NDS) and authenticating NDS users with NDS, allows remote attackers…