Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
164 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.5) | 1.6% | — | Cisco Secure Access Control System | 9/1/2015 | 17/6/2026 | The RBAC component in Cisco Secure Access Control System (ACS) allows remote authenticated users to obtain Network Device Administrator privileges for Create, Delete, Read, and Update operations via crafted HTTP requests, aka Bug ID CSCuq79034. | |
| Modificada | Media (4.3) | 0.78% | — | Juniper Junos Pulse Access Control ServiceJuniper Junos Pulse Secure Access Service | 29/9/2014 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the SSL VPN/UAC web server in the Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS 7.1 before 7.1r16, 7.4 before 7.4r3, and 8.0 before 8.0r1 and the Juniper Junos Pulse Access Control Service devices with UAC OS 4.1 before 4.1r8, 4.4 before 4.4r3 and… | |
| Modificada | Media (5) | 0.74% | — | Juniper IVE OSJuniper Unified Access Control SoftwareJuniper Fips Infranet Controller 6500Juniper Fips Secure Access 4000+14 | 13/6/2014 | 17/6/2026 | The Juniper Junos Pulse Secure Access Service (SSL VPN) devices with IVE OS before 7.4r5 and 8.x before 8.0r1 and Junos Pulse Access Control Service (UAC) before 4.4r5 and 5.x before 5.0r1 enable cipher suites with weak encryption algorithms, which make it easier for remote attackers to obtain sensitive information by… | |
| Modificada | Media (5.5) | 1.4% | — | Cisco Secure Access Control System | 25/1/2014 | 17/6/2026 | The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote authenticated users to hijack sessions and gain privileges via unspecified vectors, aka Bug ID CSCue65951. | |
| Modificada | Media (4.3) | 1.5% | — | Cisco Secure Access Control System | 20/1/2014 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCue65949. | |
| Modificada | Media (6.3) | 1.4% | — | Cisco Secure Access Control System | 16/1/2014 | 17/6/2026 | The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authenticated users to read arbitrary files via a request to this interface, aka Bug ID CSCud75169. | |
| Modificada | Alta (10) | 3.4% | — | Cisco Secure Access Control System | 16/1/2014 | 17/6/2026 | The web interface in Cisco Secure Access Control System (ACS) 5.x before 5.4 Patch 3 allows remote attackers to execute arbitrary operating-system commands via a request to this interface, aka Bug ID CSCue65962. | |
| Modificada | Alta (9) | 2.6% | — | Cisco Secure Access Control System | 16/1/2014 | 17/6/2026 | The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authorization requirements, which allows remote authenticated users to obtain superadmin access via a request to this interface, aka Bug ID CSCud75180. | |
| Modificada | Alta (10) | 5.9% | — | Cisco Secure Access Control System | 16/1/2014 | 17/6/2026 | The RMI interface in Cisco Secure Access Control System (ACS) 5.x before 5.5 does not properly enforce authentication and authorization requirements, which allows remote attackers to obtain administrative access via a request to this interface, aka Bug ID CSCud75187. | |
| Modificada | Media (4.3) | 1.5% | — | Cisco Secure Access Control System | 10/1/2014 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum03625. | |
| Modificada | Media (4.3) | 1.4% | — | Cisco Secure Access Control System | 10/1/2014 | 17/6/2026 | Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud89431. | |
| Modificada | Media (4) | 0.95% | — | Cisco Secure Access Control System | 2/12/2013 | 17/6/2026 | The RBAC implementation in Cisco Secure Access Control System (ACS) does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCuj39274. | |
| Modificada | Media (5) | 1.5% | — | Cisco Secure Access Control System | 24/10/2013 | 16/6/2026 | Cisco Secure Access Control System (ACS) does not properly implement an incoming-packet firewall rule, which allows remote attackers to cause a denial of service (process crash) via a flood of crafted packets, aka Bug ID CSCui51521. | |
| Modificada | Media (5.4) | 1.8% | — | Juniper Junos Pulse Secure Access ServiceJuniper Junos Pulse Access Control Service | 16/9/2013 | 16/6/2026 | Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote attackers to… | |
| Modificada | Media (5) | 1.9% | — | Cisco Secure Access Control System | 4/9/2013 | 16/6/2026 | Cisco Secure Access Control System (ACS) does not properly handle requests to read from the TACACS+ socket, which allows remote attackers to cause a denial of service (process crash) via malformed TCP packets, aka Bug ID CSCuh12488. | |
| Modificada | Alta (9.3) | 5.1% | — | Cisco Secure Access Control Server | 29/8/2013 | 16/6/2026 | The EAP-FAST authentication module in Cisco Secure Access Control Server (ACS) 4.x before 4.2.1.15.11, when a RADIUS server configuration is enabled, does not properly parse user identities, which allows remote attackers to execute arbitrary commands via crafted EAP-FAST packets, aka Bug ID CSCui57636. | |
| Modificada | Media (4) | 0.95% | — | Cisco Secure Access Control System | 15/7/2013 | 16/6/2026 | The web interface in Cisco Secure Access Control System (ACS) does not properly suppress error-condition details, which allows remote authenticated users to obtain sensitive information via an unspecified request that triggers an error, aka Bug ID CSCue65957. | |
| Modificada | Media (6.8) | 1.2% | — | Cisco Secure Access Control System | 12/7/2013 | 16/6/2026 | Cross-site request forgery (CSRF) vulnerability in Administration and View pages in Cisco Secure Access Control System (ACS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177. | |
| Modificada | Media (4.3) | 0.93% | — | Cisco Secure Access Control System | 12/7/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCud75174. | |
| Modificada | Media (4.3) | 0.93% | — | Cisco Secure Access Control System | 12/7/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in Administration pages in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165. | |
| Modificada | Media (4.3) | 0.93% | — | Cisco Secure Access Control System | 12/7/2013 | 16/6/2026 | Cross-site scripting (XSS) vulnerability in the Help index page in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170. | |
| Modificada | Media (4.3) | 0.49% | — | Juniper Junos Pulse Secure Access ServiceJuniper Junos Pulse Access Control Service | 13/6/2013 | 16/6/2026 | Juniper Junos Pulse Secure Access Service (aka SSL VPN) with IVE OS 7.0r2 through 7.0r8 and 7.1r1 through 7.1r5 and Junos Pulse Access Control Service (aka UAC) with UAC OS 4.1r1 through 4.1r5 include a test Certification Authority (CA) certificate in the Trusted Server CAs list, which makes it easier for… | |
| Modificada | Media (4) | 1.3% | — | Cisco Secure Access Control Server Solution Engine | 12/6/2013 | 16/6/2026 | The administrative web interface in the Access Control Server in Cisco Secure Access Control System (ACS) does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279. | |
| Modificada | Media (6.8) | 1.2% | — | Cisco Secure Access Control System | 16/5/2013 | 16/6/2026 | Session fixation vulnerability in Cisco Secure Access Control System (ACS) allows remote attackers to hijack web sessions via unspecified vectors, aka Bug ID CSCud95787. | |
| Modificada | Media (6.8) | 0.30% | — | Cisco Application Networking ManagerCisco Context Directory AgentCisco Identity Services Engine SoftwareCisco Network Services Manager+7 | 29/4/2013 | 16/6/2026 | The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System, Prime LAN Management Solution (LMS), Prime Collaboration, Unified Provisioning Manager, Network Services Manager, Prime… |