cisco secure access control system

Name: cisco secure access control system
Brand: cisco

productUS

cpe:2.3:a:cisco:secure_access_control_system:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical4high29medium0low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-0147US	critical9.8OT critical	18.2% (97th)	KEV	no fix	2018-03-08	= 5.2(0.3)
CVE-2011-0951US	medium5.0	14.6% (97th)	Exploit	no fix	2011-04-04	11 versions
CVE-2018-0253US	critical9.8	6.72% (94th)	—	5.8	2018-05-02	3 versions
CVE-2014-0648US	high10.0	5.93% (93rd)	—	no fix	2014-01-16	26 versions
CVE-2014-2130US	medium6.5	4.03% (91st)	—	no fix	2015-03-06	—
CVE-2014-0650US	high10.0	3.40% (89th)	—	no fix	2014-01-16	22 versions
CVE-2014-0649US	high9.0	2.65% (86th)	—	no fix	2014-01-16	26 versions
CVE-2017-3841US	high7.5	2.40% (84th)	—	no fix	2017-02-22	= 5.8(2.5)
CVE-2017-12354US	medium5.3	2.25% (83rd)	—	no fix	2017-11-30	= 5.8(0.32)
CVE-2015-4219US	medium4.0	2.05% (81st)	—	no fix	2015-06-24	2 versions
CVE-2013-5470US	medium5.0	1.86% (79th)	—	no fix	2013-09-04	—
CVE-2014-8027US	medium6.5	1.63% (76th)	—	no fix	2015-01-09	—
CVE-2017-3839US	medium4.3	1.55% (75th)	—	no fix	2017-02-22	= 5.8(2.5)
CVE-2017-3838US	medium6.1	1.54% (75th)	—	no fix	2017-02-22	= 5.8(2.5)
CVE-2015-0728US	medium4.3	1.54% (75th)	—	no fix	2015-05-15	= 5.5(0.1)
CVE-2017-3840US	medium6.1	1.51% (74th)	—	no fix	2017-02-22	= 5.8(2.5)
CVE-2013-5536US	medium5.0	1.50% (74th)	—	no fix	2013-10-24	—
CVE-2014-0668US	medium4.3	1.49% (74th)	—	no fix	2014-01-20	—
CVE-2014-0663US	medium4.3	1.49% (74th)	—	no fix	2014-01-10	—
CVE-2013-6974US	medium4.3	1.44% (73rd)	—	no fix	2014-01-10	—
CVE-2014-0678US	medium5.5	1.43% (73rd)	—	no fix	2014-01-25	—
CVE-2014-0667US	medium6.3	1.41% (72nd)	—	no fix	2014-01-16	—
CVE-2013-1200US	medium6.8	1.21% (68th)	—	no fix	2013-05-16	—
CVE-2013-3424US	medium6.8	1.19% (68th)	—	no fix	2013-07-12	—
CVE-2014-8029US	medium5.8	1.18% (68th)	—	no fix	2015-01-09	—
CVE-2014-8028US	medium4.3	1.16% (67th)	—	no fix	2015-01-09	—
CVE-2013-6695US	medium4.0	0.95% (61st)	—	no fix	2013-12-02	—
CVE-2013-3428US	medium4.0	0.95% (61st)	—	no fix	2013-07-15	—
CVE-2013-3423US	medium4.3	0.93% (61st)	—	no fix	2013-07-12	—
CVE-2013-3422US	medium4.3	0.93% (61st)	—	no fix	2013-07-12	—
CVE-2013-3421US	medium4.3	0.93% (61st)	—	no fix	2013-07-12	—
CVE-2015-0580US	medium6.5	0.92% (60th)	—	no fix	2015-02-12	≤ 5.5.0.46
CVE-2017-6769US	medium5.4	0.89% (59th)	—	no fix	2017-08-07	2 versions
CVE-2013-1196US	medium6.8	0.30% (23rd)	—	no fix	2013-04-29	—
CVE-2013-1125US	medium6.8	0.30% (23rd)	—	no fix	2013-02-19	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')10 CVEs
CWE-264CWE-2648 CVEs
CWE-20Improper Input Validation7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-255CWE-2551 CVEs
CWE-287Improper Authentication1 CVEs
CWE-352Cross-Site Request Forgery (CSRF)1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan