CVE-2015-0729

Cisco Secure Access Control Server Solution Engine 5.5(0.1) - Cross-Site Scripting via File-Inclusion Attack

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server Solution Engine (ACSE) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory x_refsource_cisco
http://tools.cisco.com/security/center/viewAlert.x?alertId=38864
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1032338

Scores

EPSS 0.0111
EPSS Percentile 62.5%

Details

CWE
CWE-79
Status published
Products (1)
cisco/secure_access_control_server 5.5\(0.1\)
Published May 16, 2015
Tracked Since Feb 18, 2026