[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpgwfL_49FO5_tWkYQRr-dqwN3AxFpiqWc0i5wzlNo60":3,"g5a-family:cisco\u002Fsecure_access_control_system":233,"g5a-ex:cisco\u002Fsecure_access_control_system@*":234},{"success":4,"data":5},true,{"product":6,"versions":102,"topVulnerabilitiesByEpss":144,"kevVulnerabilities":205,"seoMetadata":211,"meta":230},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":101},"cisco","secure_access_control_system",41,35,1,"2018-05-02",[14,19,21,23,25,27,29,31,33,35,37,39,41,43,46,48,50,52,54,56,58,60,62,64,66,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"5.1",4,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"5.1.0.44",{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},"5.1.0.44.1",{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},"5.1.0.44.2",{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},"5.1.0.44.3",{"version":28,"cve_count":16,"kev_count":17,"has_kev":18},"5.1.0.44.4",{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},"5.1.0.44.5",{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},"5.2",{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},"5.2.0.26",{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},"5.2.0.26.1",{"version":38,"cve_count":16,"kev_count":17,"has_kev":18},"5.2.0.26.2",{"version":40,"cve_count":11,"kev_count":11,"has_kev":4},"5.2\\(0.3\\)",{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},"5.2\\\\(0.3\\\\)",{"version":44,"cve_count":45,"kev_count":17,"has_kev":18},"5.3.0.40.1",3,{"version":47,"cve_count":45,"kev_count":17,"has_kev":18},"5.3.0.40.2",{"version":49,"cve_count":45,"kev_count":17,"has_kev":18},"5.3.0.40.3",{"version":51,"cve_count":45,"kev_count":17,"has_kev":18},"5.3.0.40.4",{"version":53,"cve_count":16,"kev_count":17,"has_kev":18},"5.3.0.40.5",{"version":55,"cve_count":45,"kev_count":17,"has_kev":18},"5.3.0.40.6",{"version":57,"cve_count":45,"kev_count":17,"has_kev":18},"5.3.0.40.7",{"version":59,"cve_count":45,"kev_count":17,"has_kev":18},"5.3.0.40.8",{"version":61,"cve_count":45,"kev_count":17,"has_kev":18},"5.3.0.40.9",{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},"5.4",{"version":65,"cve_count":45,"kev_count":17,"has_kev":18},"5.4.0.46.1",{"version":67,"cve_count":68,"kev_count":17,"has_kev":18},"5.4.0.46.2",2,{"version":70,"cve_count":68,"kev_count":17,"has_kev":18},"5.4.0.46.3",{"version":72,"cve_count":68,"kev_count":17,"has_kev":18},"5.4.0.46.4",{"version":74,"cve_count":68,"kev_count":17,"has_kev":18},"5.4.0.46.5",{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},"5.4.0.46.6",{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},"5.5",{"version":80,"cve_count":11,"kev_count":17,"has_kev":18},"5.5\\(0.1\\)",{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},"5.5.0.46",{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},"5.6",{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},"5.7",{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},"5.7\\(0.15\\)",{"version":90,"cve_count":11,"kev_count":17,"has_kev":18},"5.8",{"version":92,"cve_count":11,"kev_count":17,"has_kev":18},"5.8\\(0.32\\)",{"version":94,"cve_count":68,"kev_count":17,"has_kev":18},"5.8\\(0.8\\)",{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},"5.8.1",{"version":98,"cve_count":11,"kev_count":17,"has_kev":18},"5.8\\(1.5\\)",{"version":100,"cve_count":16,"kev_count":17,"has_kev":18},"5.8\\(2.5\\)","Secure Access Control System by Cisco is a technology product with 41 tracked versions and 35 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},{"version":26,"cve_count":16,"kev_count":17,"has_kev":18},{"version":28,"cve_count":16,"kev_count":17,"has_kev":18},{"version":30,"cve_count":16,"kev_count":17,"has_kev":18},{"version":32,"cve_count":16,"kev_count":17,"has_kev":18},{"version":34,"cve_count":16,"kev_count":17,"has_kev":18},{"version":36,"cve_count":16,"kev_count":17,"has_kev":18},{"version":38,"cve_count":16,"kev_count":17,"has_kev":18},{"version":40,"cve_count":11,"kev_count":11,"has_kev":4},{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},{"version":44,"cve_count":45,"kev_count":17,"has_kev":18},{"version":47,"cve_count":45,"kev_count":17,"has_kev":18},{"version":49,"cve_count":45,"kev_count":17,"has_kev":18},{"version":51,"cve_count":45,"kev_count":17,"has_kev":18},{"version":53,"cve_count":16,"kev_count":17,"has_kev":18},{"version":55,"cve_count":45,"kev_count":17,"has_kev":18},{"version":57,"cve_count":45,"kev_count":17,"has_kev":18},{"version":59,"cve_count":45,"kev_count":17,"has_kev":18},{"version":61,"cve_count":45,"kev_count":17,"has_kev":18},{"version":63,"cve_count":17,"kev_count":17,"has_kev":18},{"version":65,"cve_count":45,"kev_count":17,"has_kev":18},{"version":67,"cve_count":68,"kev_count":17,"has_kev":18},{"version":70,"cve_count":68,"kev_count":17,"has_kev":18},{"version":72,"cve_count":68,"kev_count":17,"has_kev":18},{"version":74,"cve_count":68,"kev_count":17,"has_kev":18},{"version":76,"cve_count":17,"kev_count":17,"has_kev":18},{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},{"version":80,"cve_count":11,"kev_count":17,"has_kev":18},{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},{"version":90,"cve_count":11,"kev_count":17,"has_kev":18},{"version":92,"cve_count":11,"kev_count":17,"has_kev":18},{"version":94,"cve_count":68,"kev_count":17,"has_kev":18},{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},{"version":98,"cve_count":11,"kev_count":17,"has_kev":18},{"version":100,"cve_count":16,"kev_count":17,"has_kev":18},[145,153,161,166,172,178,182,187,194,200],{"cveId":146,"description":147,"publishedDate":148,"cvssScore":149,"cvssVersion":150,"severity":151,"isKev":4,"epssScore":152},"CVE-2018-0147","A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) prior to release 5.8 patch 9 could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software. An attacker could exploit this vulnerability by sending a crafted serialized Java object. An exploit could allow the attacker to execute arbitrary commands on the device with root privileges. Cisco Bug IDs: CSCvh25988.","2018-03-08",9.8,"v3.1","Critical",0.18212,{"cveId":154,"description":155,"publishedDate":156,"cvssScore":157,"cvssVersion":158,"severity":159,"isKev":18,"epssScore":160},"CVE-2011-0951","The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.","2011-04-04",5,"v2","Medium",0.1464,{"cveId":162,"description":163,"publishedDate":12,"cvssScore":149,"cvssVersion":164,"severity":151,"isKev":18,"epssScore":165},"CVE-2018-0253","A vulnerability in the ACS Report component of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected system. Commands executed by the attacker are processed at the targeted user's privilege level. The vulnerability is due to insufficient validation of the Action Message Format (AMF) protocol. An attacker could exploit this vulnerability by sending a crafted AMF message that contains malicious code to a targeted user. A successful exploit could allow the attacker to execute arbitrary commands on the ACS device. This vulnerability affects all releases of Cisco Secure ACS prior to Release 5.8 Patch 7. Cisco Bug IDs: CSCve69037.","v3.0",0.06719,{"cveId":167,"description":168,"publishedDate":169,"cvssScore":170,"cvssVersion":158,"severity":151,"isKev":18,"epssScore":171},"CVE-2014-0648","The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.","2014-01-16",10,0.05929,{"cveId":173,"description":174,"publishedDate":175,"cvssScore":176,"cvssVersion":158,"severity":159,"isKev":18,"epssScore":177},"CVE-2014-2130","Cisco Secure Access Control Server (ACS) provides an unintentional administration web interface based on Apache Tomcat, which allows remote authenticated users to modify application files and configuration files, and consequently execute arbitrary code, by leveraging administrative privileges, aka Bug ID CSCuj83189.","2015-03-06",6.5,0.04031,{"cveId":179,"description":180,"publishedDate":169,"cvssScore":170,"cvssVersion":158,"severity":151,"isKev":18,"epssScore":181},"CVE-2014-0650","The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.",0.03396,{"cveId":183,"description":184,"publishedDate":169,"cvssScore":185,"cvssVersion":158,"severity":151,"isKev":18,"epssScore":186},"CVE-2014-0649","The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.",9,0.02645,{"cveId":188,"description":189,"publishedDate":190,"cvssScore":191,"cvssVersion":164,"severity":192,"isKev":18,"epssScore":193},"CVE-2017-3841","A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to disclose sensitive information. More Information: CSCvc04854. Known Affected Releases: 5.8(2.5).","2017-02-22",7.5,"High",0.02399,{"cveId":195,"description":196,"publishedDate":197,"cvssScore":198,"cvssVersion":164,"severity":159,"isKev":18,"epssScore":199},"CVE-2017-12354","A vulnerability in the web-based interface of Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to view sensitive information on an affected system. The vulnerability exists because the affected software does not sufficiently protect system software version information when the software responds to HTTP requests that are sent to the web-based interface of the software. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based interface of the affected software. A successful exploit could allow the attacker to view sensitive information about the software, which the attacker could use to conduct additional reconnaissance attacks. Cisco Bug IDs: CSCvf66155.","2017-11-30",5.3,0.02247,{"cveId":201,"description":202,"publishedDate":203,"cvssScore":16,"cvssVersion":158,"severity":159,"isKev":18,"epssScore":204},"CVE-2015-4219","Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly implement access control for support bundles, which allows remote authenticated users to obtain sensitive information via brute-force attempts to send valid credentials, aka Bug IDs CSCue00833 and CSCub40331.","2015-06-24",0.02049,[206],{"cveId":146,"description":147,"publishedDate":148,"cvssScore":149,"severity":151,"isKev":4,"epssScore":152,"cisaVulnName":207,"cisaDateAdded":208,"cisaShortDescription":209,"cisaRequiredAction":210},"Cisco Secure Access Control System Java Deserialization Vulnerability","2022-03-25","A vulnerability in Java deserialization used by Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to execute arbitrary commands on an affected device. The vulnerability is due to insecure deserialization of user-supplied content by the affected software.","Apply updates per vendor instructions.",{"title":212,"metaDescription":213,"keywords":214,"structuredData":215},"Secure Access Control System by Cisco - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Secure Access Control System by Cisco covering 41 versions with 35 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Secure Access Control System vulnerabilities, Secure Access Control System security, Secure Access Control System CVE, Cisco Secure Access Control System, Secure Access Control System threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Secure Access Control System KEV, Secure Access Control System exploited vulnerabilities",{"@context":216,"@type":217,"name":218,"description":213,"url":219,"manufacturer":220,"applicationCategory":224,"softwareVersion":225,"mainEntity":226},"https:\u002F\u002Fschema.org","SoftwareApplication","Secure Access Control System","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Fsecure_access_control_system",{"@type":221,"name":222,"url":223},"Organization","Cisco","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fcisco","Security Software","41 versions tracked",{"@type":227,"name":228,"description":229,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Secure Access Control System Security Vulnerabilities","Security vulnerabilities affecting Secure Access Control System by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":231,"apiVersion":232},"2026-10-28T18:20:14.830Z","3.0",[],{"rows":235,"total":11,"capped":18,"failed":17},[236],{"cveId":146,"name":207,"severity":151,"cvss":149,"added":208,"epss":152,"published":237,"ranges":238,"checked":4,"hits":240,"covers":18},"2018-03-08T07:29:00.377",[239],"5.2(0.3)",[]]