Cisco Access Control Server Vulnerabilidad

Cronología

Versión

5.7(0.15)6
5.24
5.54
2.4.03
2.4.13

Contramedidas

Official Fix20
Temporary Fix0
Workaround2
Unavailable0
Not Defined10

Explotabilidad

High2
Functional0
Proof-of-Concept5
Unproven9
Not Defined16

Vector de acceso

Not Defined0
Physical0
Local0
Adjacent0
Network32

Autenticación

Not Defined0
High0
Low7
None25

La interacción del usuario

Not Defined0
Required10
None22

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤511
≤69
≤74
≤86
≤90
≤102

CVSSv3 Temp

≤10
≤20
≤30
≤43
≤513
≤66
≤75
≤83
≤91
≤101

VulDB

≤10
≤20
≤30
≤40
≤511
≤67
≤74
≤88
≤90
≤102

NVD

≤10
≤20
≤30
≤42
≤50
≤61
≤70
≤80
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k0
<2k0
<5k0
<10k11
<25k12
<50k9
<100k0
≥100k0

Explotar hoy

<1k27
<2k1
<5k2
<10k2
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Versions (20): 2.3, 2.4, 2.4.1, 2.4.2, 3.0, 3.01, 3.2, 3.2(3), 4.0, 5.0, 5.1, 5.2, 5.3, 5.4, 5.5, 5.5(0.1), 5.5(0.46.2), 5.6, 5.7(0.15), 5.8 Patch 8

Link to Product Website: https://www.cisco.com/

Tipo de software: Network Management Software

Fecha de publicaciónBaseTempVulnerabilidad0dayHoyExpConCTICVE
2018-10-055.04.9Cisco Secure Access Control Server Web UI XML External Entity$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2018-0414
2018-03-085.35.2Cisco Secure Access Control Server Web-based User Interface divulgación de información$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2018-0218
2018-03-085.35.2Cisco Secure Access Control Server divulgación de información$5k-$25k$0-$5kNot DefinedOfficial Fix0.03CVE-2018-0207
2015-10-306.36.3Cisco Secure Access Control Server Solution Engine sql injection$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2015-6345
2015-10-264.33.8Cisco Secure Access Control Server RBAC escalada de privilegios$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2015-6348
2015-10-264.33.8Cisco Secure Access Control Server RBAC escalada de privilegios$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2015-6347
2015-10-265.44.7Cisco Secure Access Control Server Web Interface cross site scripting$5k-$25k$0-$5kUnprovenOfficial Fix0.02CVE-2015-6349
2015-10-265.44.7Cisco Secure Access Control Server Web Interface cross site scripting$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2015-6346
2015-09-204.34.3Cisco Secure Access Control Server Solution Engine escalada de privilegios$5k-$25k$5k-$25kNot DefinedNot Defined0.02CVE-2015-6300
2015-05-225.34.6Cisco Access Control Server REST API escalada de privilegios$5k-$25k$0-$5kUnprovenOfficial Fix0.00CVE-2015-0746

22 no se muestran más entradas

🔒 Login Required

You need to signup and login to see more of the remaining 22 results.

más entradas por Cisco

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!