Cross-Site Scripting Vulnerability in Cisco Secure Access Control Server
CVE-2015-6346

Currently unrated

Key Information:

Vendor

Cisco
Status
Secure Access Control Server
Vendor
CVE Published:
30 October 2015

What is CVE-2015-6346?

A cross-site scripting vulnerability exists in Cisco Secure Access Control Server (ACS) version 5.7(0.15), which enables remote attackers to inject arbitrary web scripts or HTML by crafting a malicious URL. This can lead to various security risks as the injected code may execute in the context of the user's browser, potentially compromising sensitive information or gaining unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO
http://www.securitytracker.com/id/1033969
vdb-entryx_refsource_SECTRACK

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.