Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco secure access control system - vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2006-4098
Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows prior to 4.1 and ACS Solution Engine prior to 4.1 allows remote malicious users to execute arbitrary code via a crafted RADIUS Accounting-Request packet.
Cisco Secure Access Control Server 3.0Cisco Secure Access Control Server 3.1Cisco Secure Access Control Server 3.2.2Cisco Secure Access Control Server 3.3Cisco Secure Access Control Server 3.2\\(1.20\\)Cisco Secure Access Control Server 3.2\\(2\\)Cisco Secure Access Control Server 4.0Cisco Secure Access Control Server 4.0.1Cisco Secure Access Control Server 3.2\\(3\\)Cisco Secure Access Control Server 3.2.1Cisco Secure Access Control Server 3.2Cisco Secure Access Control Server 3.2\\(1\\)Cisco Secure Access Control Server 3.3\\(1\\)Cisco Secure Access Control Server 3.3.1Cisco Secure Access Control Server 3.3.2
7.5
CVSSv2
CVE-2003-0210
Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS prior to 3.1.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002.
Cisco Secure Access Control Server 2.5Cisco Secure Access Control Server 2.6Cisco Secure Access Control Server 3.1.1Cisco Secure Access Control Server 2.6.2Cisco Secure Access Control Server 2.6.3Cisco Secure Access Control Server 2.1Cisco Secure Access Control Server 2.6.4Cisco Secure Access Control Server 3.0Cisco Secure Access Control Server 2.3Cisco Secure Access Control Server 2.4Cisco Secure Access Control Server 3.0.1Cisco Secure Access Control Server 3.0.3
10
CVSSv2
CVE-2014-0648
The RMI interface in Cisco Secure Access Control System (ACS) 5.x prior to 5.5 does not properly enforce authentication and authorization requirements, which allows remote malicious users to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.
Cisco Secure Access Control System 5.4.0.46.5Cisco Secure Access Control SystemCisco Secure Access Control System 5.3.0.40.8Cisco Secure Access Control System 5.3.0.40.9Cisco Secure Access Control System 5.1.0.44.5Cisco Secure Access Control System 5.2Cisco Secure Access Control System 5.4.0.46.1Cisco Secure Access Control System 5.4.0.46.2Cisco Secure Access Control System 5.3.0.40.4Cisco Secure Access Control System 5.3.0.40.5Cisco Secure Access Control System 5.1.0.44.1Cisco Secure Access Control System 5.1.0.44.2Cisco Secure Access Control System 5.2.0.26.2Cisco Secure Access Control System 5.4.0.46.3Cisco Secure Access Control System 5.4.0.46.4Cisco Secure Access Control System 5.3.0.40.6Cisco Secure Access Control System 5.3.0.40.7Cisco Secure Access Control System 5.1.0.44.3Cisco Secure Access Control System 5.1.0.44.4Cisco Secure Access Control System 5.3.0.40.1Cisco Secure Access Control System 5.3.0.40.2Cisco Secure Access Control System 5.3.0.40.3
9
CVSSv2
CVE-2014-0649
The RMI interface in Cisco Secure Access Control System (ACS) 5.x prior to 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.
Cisco Secure Access Control System 5.4.0.46.3Cisco Secure Access Control System 5.4.0.46.4Cisco Secure Access Control System 5.4.0.46.5Cisco Secure Access Control System 5.3.0.40.6Cisco Secure Access Control System 5.3.0.40.2Cisco Secure Access Control System 5.3.0.40.3Cisco Secure Access Control System 5.1Cisco Secure Access Control System 5.1.0.44Cisco Secure Access Control System 5.2.0.26Cisco Secure Access Control System 5.2.0.26.1Cisco Secure Access Control System 5.3.0.40.7Cisco Secure Access Control System 5.1.0.44.3Cisco Secure Access Control System 5.1.0.44.4Cisco Secure Access Control System 5.4.0.46.1Cisco Secure Access Control System 5.4.0.46.2Cisco Secure Access Control System 5.3.0.40.4Cisco Secure Access Control System 5.3.0.40.5Cisco Secure Access Control System 5.1.0.44.1Cisco Secure Access Control System 5.1.0.44.2Cisco Secure Access Control System 5.2.0.26.2Cisco Secure Access Control SystemCisco Secure Access Control System 5.3.0.40.1
5
CVSSv2
CVE-2013-5470
Cisco Secure Access Control System (ACS) does not properly handle requests to read from the TACACS+ socket, which allows remote malicious users to cause a denial of service (process crash) via malformed TCP packets, aka Bug ID CSCuh12488.
Cisco Secure Access Control System -
6.5
CVSSv2
CVE-2015-0580
Multiple SQL injection vulnerabilities in the ACS View reporting interface pages in Cisco Secure Access Control System (ACS) prior to 5.5 patch 7 allow remote authenticated administrators to execute arbitrary SQL commands via crafted HTTPS requests, aka Bug ID CSCuq79027.
Cisco Secure Access Control System
6.5
CVSSv2
CVE-2014-2130
Cisco Secure Access Control Server (ACS) provides an unintentional administration web interface based on Apache Tomcat, which allows remote authenticated users to modify application files and configuration files, and consequently execute arbitrary code, by leveraging administrati...
Cisco Secure Access Control System -
4.3
CVSSv2
CVE-2013-3421
Cross-site scripting (XSS) vulnerability in the Help index page in Cisco Secure Access Control System (ACS) allows remote malicious users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170.
Cisco Secure Access Control System -
4.3
CVSSv2
CVE-2013-3422
Cross-site scripting (XSS) vulnerability in Administration pages in Cisco Secure Access Control System (ACS) allows remote malicious users to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165.
Cisco Secure Access Control System -
6.8
CVSSv2
CVE-2013-1200
Session fixation vulnerability in Cisco Secure Access Control System (ACS) allows remote malicious users to hijack web sessions via unspecified vectors, aka Bug ID CSCud95787.
Cisco Secure Access Control System -
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook