Vulnerabilities > Cisco > Secure Access Control Server Solution Engine > 5.5.0.36

DATE CVE VULNERABILITY TITLE RISK
2018-10-05 CVE-2018-0414 XXE vulnerability in Cisco Secure Access Control Server Solution Engine
A vulnerability in the web-based UI of Cisco Secure Access Control Server could allow an authenticated, remote attacker to gain read access to certain information in an affected system.
network
cisco CWE-611
3.5
3.5
2015-04-17 CVE-2015-0700 Cross-Site Request Forgery (CSRF) vulnerability in Cisco Secure Access Control Server Solution Engine 5.4.0.46.6/5.5.0.36/5.5.0.46.4
Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Server Solution Engine before 5.5(0.46.5) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCuj62924.
network
cisco CWE-352
6.8
6.8