Cisco Secure Access Control System
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-0253 | Cisco Secure Access Control System | A vulnerability in the ACS Report component of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to e | CRITICAL 9.8 | 6.7 % | ||
| CVE-2018-0147 | Cisco Secure Access Control System | A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthe | CRITICAL 9.8 | 18 % | KEV | |
| CVE-2017-12354 | Cisco Secure Access Control System | A vulnerability in the web-based interface of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to vi | MEDIUM 5.3 | 2.2 % | ||
| CVE-2017-3841 | Cisco Secure Access Control System | A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to disc | HIGH 7.5 | 2.4 % | ||
| CVE-2017-3840 | Cisco Secure Access Control System | A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to redi | MEDIUM 6.1 | 1.5 % | ||
| CVE-2017-3839 | Cisco Secure Access Control System | An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthen | MEDIUM 4.3 | 1.6 % | ||
| CVE-2017-3838 | Cisco Secure Access Control System | A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-sit | MEDIUM 6.1 | 1.5 % |