Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2987▼ 96 respecto a la semana anterior

Críticas / altas1458▲ 101 respecto a la semana anterior

Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior

Sin puntuar (sin CVSS)350▼ 160 respecto a la semana anterior

57 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2013-3422	Modificada	Media (4.3)	0.93%	—	Cisco Secure Access Control System	12/7/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in Administration pages in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165.
CVE-2013-3421	Modificada	Media (4.3)	0.93%	—	Cisco Secure Access Control System	12/7/2013	16/6/2026	Cross-site scripting (XSS) vulnerability in the Help index page in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170.
CVE-2013-1200	Modificada	Media (6.8)	1.2%	—	Cisco Secure Access Control System	16/5/2013	16/6/2026	Session fixation vulnerability in Cisco Secure Access Control System (ACS) allows remote attackers to hijack web sessions via unspecified vectors, aka Bug ID CSCud95787.
CVE-2013-1196	Modificada	Media (6.8)	0.30%	—	Cisco Application Networking Manager Cisco Context Directory Agent Cisco Identity Services Engine Software Cisco Network Services Manager+7	29/4/2013	16/6/2026	The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System, Prime LAN Management Solution (LMS), Prime Collaboration, Unified Provisioning Manager, Network Services Manager, Prime…
CVE-2013-1125	Modificada	Media (6.8)	0.30%	—	Cisco Application Networking Manager Cisco Context Directory Agent Cisco Identity Services Engine Software Cisco Network Services Manager+6	19/2/2013	16/6/2026	The command-line interface in Cisco Identity Services Engine Software, Secure Access Control System (ACS), Application Networking Manager (ANM), Prime LAN Management Solution (LMS), Prime Network Control System, Quad, Context Directory Agent, Prime Collaboration, Unified Provisioning Manager, and Network Services…
CVE-2011-0951	Modificada	Media (5)	15%	—	Cisco Secure Access Control System	4/4/2011	16/6/2026	The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.
CVE-2009-3734	Modificada	Media (5)	1.8%	—	S2sys Linear Emerge Access Control System	5/1/2010	16/6/2026	Unspecified vulnerability in the management console in the S2 Security Linear eMerge Access Control System 2.5.x allows remote attackers to cause a denial of service (configuration reset) via a request to a crafted URI.