CVE-2015-0729: XSS

Published May 16, 2015

Updated

Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server Solution Engine (ACSE) 5.5(0.1) allows remote attackers to inject arbitrary web script or HTML via a file-inclusion attack, aka Bug ID CSCuu11005.

Affected Software

1 affected component

Cisco Secure Access Control Server=5.5\(0.1\)

Event History

May 16, 2015

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-0729?

CVE-2015-0729 has been classified as a medium severity Cross-Site Scripting (XSS) vulnerability.

How do I fix CVE-2015-0729?

To fix CVE-2015-0729, upgrade your Cisco Secure Access Control Server Solution Engine to a version that addresses this vulnerability.

What impact does CVE-2015-0729 have on affected systems?

CVE-2015-0729 allows remote attackers to inject arbitrary web scripts or HTML into the Cisco Secure Access Control Server.

Who is affected by CVE-2015-0729?

CVE-2015-0729 affects users of Cisco Secure Access Control Server version 5.5(0.1).

Is there a workaround for CVE-2015-0729?

There are no known workarounds for CVE-2015-0729; upgrading the software is the recommended approach.