cisco secure access control server

Name: cisco secure access control server
Brand: cisco

productUS

cpe:2.3:a:cisco:secure_access_control_server:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical17high14medium0low

updated 2026-10-28

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2005-0356US	medium5.0	82.8% (100th)	Exploit	no fix	2005-05-31	28 versions
CVE-2006-3101US	medium4.3	24.0% (98th)	Exploit	no fix	2006-06-21	= 2.3
CVE-2000-1054US	high10.0	8.39% (95th)	Exploit	no fix	2000-12-11	3 versions
CVE-2002-0938US	high7.5	3.06% (88th)	Exploit	no fix	2002-10-04	2 versions
CVE-2006-4098US	high10.0	12.9% (96th)	—	no fix	2006-12-31	15 versions
CVE-2007-0105US	high7.5	11.2% (96th)	—	no fix	2007-01-09	≤ 4.0.1
CVE-2004-1099US	high10.0	10.2% (96th)	—	no fix	2005-01-10	2 versions
CVE-2003-0210US	high7.5	6.01% (93rd)	—	no fix	2003-05-12	12 versions
CVE-2002-0159US	high7.5	5.44% (93rd)	—	no fix	2002-04-22	6 versions
CVE-2013-3466US	high9.3	5.12% (92nd)	—	no fix	2013-08-29	10 versions
CVE-2006-4097US	high7.8	4.29% (91st)	—	no fix	2006-12-31	2 versions
CVE-2000-1055US	high10.0	4.00% (90th)	—	no fix	2000-12-11	3 versions
CVE-2005-4499US	high7.5OT elevated	2.59% (85th)	—	no fix	2005-12-22	29 versions
CVE-2012-5424US	medium5.0	2.45% (84th)	—	no fix	2012-11-07	4 versions
CVE-2006-3226US	high7.5OT elevated	2.39% (84th)	—	no fix	2006-06-26	2 versions
CVE-2002-0160US	medium5.0	2.38% (84th)	—	no fix	2002-04-22	6 versions
CVE-2004-1458US	medium5.0OT elevated	1.80% (78th)	—	no fix	2004-12-31	8 versions
CVE-2000-1056US	high7.5	1.69% (77th)	—	no fix	2000-12-11	3 versions
CVE-2004-1461US	high7.5	1.68% (77th)	—	no fix	2004-12-31	8 versions
CVE-2002-0241US	high7.5	1.62% (76th)	—	no fix	2002-05-29	= 3.0.1
CVE-2015-6300US	medium4.0	1.59% (76th)	—	no fix	2015-09-20	= 5.7.0.15
CVE-2004-1460US	high7.5	1.57% (75th)	—	no fix	2004-12-31	8 versions
CVE-2015-6347US	medium4.0	1.37% (72nd)	—	no fix	2015-10-30	= 5.7.0.15
CVE-2015-6348US	medium4.0	1.37% (72nd)	—	no fix	2015-10-30	= 5.7.0.15
CVE-2015-6345US	medium6.5	1.36% (72nd)	—	no fix	2015-10-30	= 5.7.0.15
CVE-2015-6349US	medium4.3	1.36% (72nd)	—	no fix	2015-10-30	= 5.7.0.15
CVE-2015-6346US	medium4.3	1.36% (72nd)	—	no fix	2015-10-30	= 5.7.0.15
CVE-2015-0746US	medium5.0	1.22% (68th)	—	no fix	2015-05-22	= 5.5(0.46.2)
CVE-2015-0729US	medium4.3	1.09% (65th)	—	no fix	2015-05-16	= 5.5(0.1)
CVE-2002-1095US	medium5.0	1.01% (63rd)	—	no fix	2002-10-04	= 2.6.3
CVE-2006-0561US	high7.2	0.37% (31st)	—	no fix	2006-05-10	7 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-287Improper Authentication5 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-400Uncontrolled Resource Consumption3 CVEs
CWE-121Stack-based Buffer Overflow2 CVEs
CWE-264CWE-2642 CVEs
CWE-284Improper Access Control2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan