Product by Cisco
Cisco Secure Access Control System
35 known vulnerabilities in Cisco Secure Access Control System (Cisco), 1 of them actively exploited (CISA KEV).
Key figures
35
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2018-0147 | Cisco Secure Access Control System Java Deserialization Vulnerability In CISA KEV | 9.8 | |
| Critical | CVE-2018-0253 | Cisco Secure Access Control System: Improper Input Validation | 9.8 | |
| High | CVE-2017-3841 | Cisco Secure Access Control System: security vulnerability | 7.5 | |
| Medium | CVE-2017-12354 | Cisco Secure Access Control System: Exposure of Sensitive Information to an Unauthorized Actor | 5.3 | |
| Medium | CVE-2017-3838 | Cisco Secure Access Control System: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2017-3840 | Cisco Secure Access Control System: Open Redirect | 6.1 | |
| Not rated | CVE-2011-0951 | Cisco Secure Access Control System: security vulnerability | — | |
| Not rated | CVE-2014-0648 | Cisco Secure Access Control System: security vulnerability | — | |
| Medium | CVE-2017-3839 | Cisco Secure Access Control System: XML External Entity (XXE) | 4.3 | |
| Not rated | CVE-2014-2130 | Cisco Secure Access Control System: Code Execution | — | |
| Not rated | CVE-2014-0650 | Cisco Secure Access Control System: security vulnerability | — | |
| Not rated | CVE-2014-0649 | Cisco Secure Access Control System: security vulnerability | — | |
| Medium | CVE-2017-6769 | Cisco Access Control System: Cross-Site Scripting (XSS) | 5.4 | |
| Not rated | CVE-2015-4219 | Cisco Secure Access Control System: Information Disclosure | — | |
| Not rated | CVE-2013-5470 | Cisco Secure Access Control System: Denial of Service | — | |
| Not rated | CVE-2014-8027 | Cisco Secure Access Control System: security vulnerability | — | |
| Not rated | CVE-2015-0728 | Cisco Secure Access Control System: Cross-Site Scripting (XSS) | — | |
| Not rated | CVE-2013-5536 | Cisco Secure Access Control System: Denial of Service | — | |
| Not rated | CVE-2014-0668 | Cisco Secure Access Control System: Cross-Site Scripting (XSS) | — | |
| Not rated | CVE-2014-0663 | Cisco Secure Access Control System: Cross-Site Scripting (XSS) | — | |
| Not rated | CVE-2013-6974 | Cisco Secure Access Control System: Cross-Site Scripting (XSS) | — | |
| Not rated | CVE-2014-0678 | Cisco Secure Access Control System: Privilege Escalation | — | |
| Not rated | CVE-2014-0667 | Cisco Secure Access Control System: security vulnerability | — | |
| Not rated | CVE-2013-1200 | Cisco Secure Access Control System: Session Fixation | — | |
| Not rated | CVE-2013-3424 | Cisco Secure Access Control System: Cross-Site Request Forgery (CSRF) | — |