Not rated
CVE-2017-3838 A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a…
Description
A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvc04838. Known Affected Releases: 5.8(2.5).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Secure Access Control System | Versions not published |
References
- 1037835 www.securitytracker.com
- 96234 www.securityfocus.com
- tools.cisco.com tools.cisco.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Secure Access Control System
The 7 CVEs of Cisco Secure Access Control System →
CVE-2018-0253
A vulnerability in the ACS Report component of Cisco Secure Access Control System (ACS) could allow an…
Not rated
CVE-2018-0147
Cisco Secure Access Control System Java Deserialization Vulnerability
9.8
Critical
CVE-2017-12354
A vulnerability in the web-based interface of Cisco Secure Access Control System (ACS) could allow an unauthenticated,…
Not rated
CVE-2017-3839
An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS)…
Not rated