Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cisco secure acs vulnerabilities and exploits
(subscribe to this query)
445
VMScore
CVE-2002-0160
The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and previous versions and 3.x up to and including 3.01 (build 40), allows remote malicious users to read HTML, Java class, and image files outside the web root via a ..\.. (modified ..) in ...
Cisco Secure Access Control Server 2.6.2
Cisco Secure Access Control Server 2.6.3
Cisco Secure Access Control Server 2.6.4
Cisco Secure Access Control Server 2.6
Cisco Secure Access Control Server 3.0
Cisco Secure Access Control Server 3.0.1
312
VMScore
CVE-2017-6769
A vulnerability in the web-based management interface of the Cisco Secure Access Control System (ACS) could allow an authenticated, remote malicious user to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of the affected system. More Informa...
Cisco Secure Access Control System 5.8\\(0.8\\)
Cisco Secure Access Control System 5.8\\(1.5\\)
668
VMScore
CVE-2003-0210
Buffer overflow in the administration service (CSAdmin) for Cisco Secure ACS prior to 3.1.2 allows remote malicious users to cause a denial of service and possibly execute arbitrary code via a long user parameter to port 2002.
Cisco Secure Access Control Server 2.5
Cisco Secure Access Control Server 2.6
Cisco Secure Access Control Server 3.1.1
Cisco Secure Access Control Server 2.6.2
Cisco Secure Access Control Server 2.6.3
Cisco Secure Access Control Server 2.1
Cisco Secure Access Control Server 2.6.4
Cisco Secure Access Control Server 3.0
Cisco Secure Access Control Server 2.3
Cisco Secure Access Control Server 2.4
Cisco Secure Access Control Server 3.0.1
Cisco Secure Access Control Server 3.0.3
445
VMScore
CVE-2017-12354
A vulnerability in the web-based interface of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote malicious user to view sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect s...
Cisco Secure Access Control System 5.8\\(0.32\\)
1000
VMScore
CVE-2000-1054
Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and previous versions allows remote malicious users to cause a denial of service and possibly execute arbitrary commands via a large packet.
Cisco Secure Access Control Server 2.4\\(2\\)
Cisco Secure Access Control Server 2.1
Cisco Secure Access Control Server 2.3\\(3\\)
1 EDB exploit
890
VMScore
CVE-2006-4098
Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows prior to 4.1 and ACS Solution Engine prior to 4.1 allows remote malicious users to execute arbitrary code via a crafted RADIUS Accounting-Request packet.
Cisco Secure Access Control Server 3.0
Cisco Secure Access Control Server 3.1
Cisco Secure Access Control Server 3.2.2
Cisco Secure Access Control Server 3.3
Cisco Secure Access Control Server 3.2\\(1.20\\)
Cisco Secure Access Control Server 3.2\\(2\\)
Cisco Secure Access Control Server 4.0
Cisco Secure Access Control Server 4.0.1
Cisco Secure Access Control Server 3.2\\(3\\)
Cisco Secure Access Control Server 3.2.1
Cisco Secure Access Control Server 3.2
Cisco Secure Access Control Server 3.2\\(1\\)
Cisco Secure Access Control Server 3.3\\(1\\)
Cisco Secure Access Control Server 3.3.1
Cisco Secure Access Control Server 3.3.2
755
VMScore
CVE-2002-0938
Cross-site scripting vulnerability in CiscoSecure ACS 3.0 allows remote malicious users to execute arbitrary script or HTML as other web users via the action argument in a link to setup.exe.
Cisco Secure Access Control Server 3.0
Cisco Secure Access Control Server 3.0.1
1 EDB exploit
641
VMScore
CVE-2006-0561
Cisco Secure Access Control Server (ACS) 3.x for Windows stores ACS administrator passwords and the master key in the registry with insecure permissions, which allows local users and remote administrators to decrypt the passwords by using Microsoft's cryptographic API functi...
Cisco Secure Access Control Server 3.0
Cisco Secure Access Control Server 3.1.1
Cisco Secure Access Control Server 3.1
Cisco Secure Access Control Server 3.2
Cisco Secure Access Control Server 3.0.1
Cisco Secure Access Control Server 3.0.3
Cisco Secure Access Control Server 3.3
828
VMScore
CVE-2013-3466
The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x prior to 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote malicious users to execute arbitrary commands via crafted EAP-FAST ...
Cisco Secure Access Control Server
Cisco Secure Access Control Server 4.2.1.15.9
Cisco Secure Access Control Server 4.2.1.15.7
Cisco Secure Access Control Server 4.2.1.15.4
Cisco Secure Access Control Server 4.2.1.15.2
Cisco Secure Access Control Server 4.2.1.15.1
Cisco Secure Access Control Server 4.2.1.15.0
Cisco Secure Access Control Server 4.2.1.15.8
Cisco Secure Access Control Server 4.2.1.15.6
Cisco Secure Access Control Server 4.2.1.15.3
435
VMScore
CVE-2006-3101
Cross-site scripting (XSS) vulnerability in LogonProxy.cgi in Cisco Secure ACS for UNIX 2.3 allows remote malicious users to inject arbitrary web script or HTML via the (1) error, (2) SSL, and (3) Ok parameters.
Cisco Secure Access Control Server 2.3
1 EDB exploit
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
bypass
open redirect
CVE-2024-4358
CVE-2024-24199
CVE-2024-5550
CVE-2024-5305
CVE-2024-30373
CVE-2024-1800
deserialization
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »