CVE

Id
77843  
CVE No.
CVE-2015-0580  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in the ACS View reporting interface pages in Cisco Secure Access Control System (ACS) before 5.5 patch 7 allow remote authenticated administrators to execute arbitrary SQL commands via crafted HTTPS requests, aka Bug ID CSCuq79027.  
Phase
Assigned (20150107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
713199 77843 CVE-2015-0580 CISCO:20150211 Cisco Secure Access Control System SQL Injection Vulnerability  View
713200 77843 CVE-2015-0580 URL:http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150211-csacs  View
713201 77843 CVE-2015-0580 BID:72576  View
713202 77843 CVE-2015-0580 URL:http://www.securityfocus.com/bid/72576  View
713203 77843 CVE-2015-0580 SECTRACK:1031740  View
713204 77843 CVE-2015-0580 URL:http://www.securitytracker.com/id/1031740  View
713205 77843 CVE-2015-0580 XF:cisco-acs-cve20150580-sql-injection(100812)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6316 JVNDB-2015-001636 Cisco IOS および IOS XE の Neighbor Discovery プロトコルの実装におけるサービス運用妨害 (DoS) の脆弱性 Cisco IOS および IOS XE の Neighbor Discovery (ND) プロトコルの実装には、競合状態により、サービス運用妨害 (DoS) 状態にされる脆弱性が存在します。 CVE-2015-0632 77843 5.7 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001636.html  View