Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas3006▼ 69 respecto a la semana anterior

Críticas / altas1420▲ 54 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)382▼ 128 respecto a la semana anterior

35 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2013-5470	Modificada	Media (5)	1.9%	—	Cisco Secure Access Control System	4/9/2013	16/6/2026	Cisco Secure Access Control System (ACS) does not properly handle requests to read from the TACACS+ socket, which allows remote attackers to cause a denial of service (process crash) via malformed TCP packets, aka Bug ID CSCuh12488.
CVE-2013-3428	Modificada	Media (4)	0.95%	—	Cisco Secure Access Control System	15/7/2013	16/6/2026	The web interface in Cisco Secure Access Control System (ACS) does not properly suppress error-condition details, which allows remote authenticated users to obtain sensitive information via an unspecified request that triggers an error, aka Bug ID CSCue65957.
CVE-2013-3424	Modificada	Media (6.8)	1.2%	—	Cisco Secure Access Control System	12/7/2013	16/6/2026	Cross-site request forgery (CSRF) vulnerability in Administration and View pages in Cisco Secure Access Control System (ACS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177.
CVE-2013-3423	Modificada	Media (4.3)	0.93%	—	Cisco Secure Access Control System	12/7/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCud75174.
CVE-2013-3422	Modificada	Media (4.3)	0.93%	—	Cisco Secure Access Control System	12/7/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in Administration pages in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165.
CVE-2013-3421	Modificada	Media (4.3)	0.93%	—	Cisco Secure Access Control System	12/7/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in the Help index page in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170.
CVE-2013-1200	Modificada	Media (6.8)	1.2%	—	Cisco Secure Access Control System	16/5/2013	16/6/2026	Session fixation vulnerability in Cisco Secure Access Control System (ACS) allows remote attackers to hijack web sessions via unspecified vectors, aka Bug ID CSCud95787.
CVE-2013-1196	Modificada	Media (6.8)	0.30%	—	Cisco Application Networking Manager Cisco Context Directory Agent Cisco Identity Services Engine Software Cisco Network Services Manager+7	29/4/2013	16/6/2026	The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System, Prime LAN Management Solution (LMS), Prime Collaboration, Unified Provisioning Manager, Network Services Manager, Prime…
CVE-2013-1125	Modificada	Media (6.8)	0.30%	—	Cisco Application Networking Manager Cisco Context Directory Agent Cisco Identity Services Engine Software Cisco Network Services Manager+6	19/2/2013	16/6/2026	The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Network Services…
CVE-2011-0951	Modificada	Media (5)	15%	—	Cisco Secure Access Control System	4/4/2011	16/6/2026	The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.