VendorsCiscosecure_access_control_system5.3.0.40.9
Vulnerabilities

Cisco Secure Access Control System 5.3.0.40.9

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2014-0648
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187.
Published 2014-01-16 · Modified
10.0EPSS 0.059
CVE-2014-0650
The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962.
Published 2014-01-16 · Modified
10.0EPSS 0.034
CVE-2014-0649
The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180.
Published 2014-01-16 · Modified
9.0EPSS 0.026