Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:secure_access_control_system:5.8\(2.5\):*:*:*:*:*:*:*

part: a version: 5.8(2.5) update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductSecure Access Control System (0cd7db24-ac3c-5039-952e-feacfd8a4aaa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-3841 vulnerable 2026-06-08 05:09:37.151845 Details available
A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to disclose sensitive information. More Information: CSCvc04854. Known Affected Releases: 5.8(2.5).
Published: 2017-02-22T02:00:00.000Z
Updated: 2024-08-05T14:39:41.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3840 vulnerable 2026-06-08 05:09:37.151539 Details available
A vulnerability in the web interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page, aka an Open Redirect Vulnerability. More Information: CSCvc04849. Known Affected Releases: 5.8(2.5).
Published: 2017-02-22T02:00:00.000Z
Updated: 2024-08-05T14:39:40.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3839 vulnerable 2026-06-08 05:09:37.151208 Details available
An XML External Entity vulnerability in the web-based user interface of the Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to have read access to part of the information stored in the affected system. More Information: CSCvc04845. Known Affected Releases: 5.8(2.5).
Published: 2017-02-22T02:00:00.000Z
Updated: 2024-08-05T14:39:41.127Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-3838 vulnerable 2026-06-08 05:09:37.150784 Details available
A vulnerability in Cisco Secure Access Control System (ACS) could allow an unauthenticated, remote attacker to conduct a DOM-based cross-site scripting (XSS) attack against the user of the web interface of the affected system. More Information: CSCvc04838. Known Affected Releases: 5.8(2.5).
Published: 2017-02-22T02:00:00.000Z
Updated: 2024-08-05T14:39:41.069Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.