CVE-2011-3317
Cisco Secure Access Control Server 5.2 - Cross-Site Scripting in Solution Engine
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCtr78192.
References (3)
Core 3
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/49101
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/53436
Vendor Advisory x_refsource_confirm
http://www.cisco.com/web/software/282766937/37718/Acs-5-2-0-26-9-Readme.txt
Scores
EPSS
0.0115
EPSS Percentile
63.5%
Details
CWE
CWE-79
Status
published
Products (1)
cisco/secure_access_control_server
5.2
Published
May 02, 2012
Tracked Since
Feb 18, 2026