CVE-2013-3380

no score yetEPSS 1.3%

The administrative web interface in the Access Control Server in Cisco Secure Access Control System (ACS) does not properly restrict the report view page, which allows remote authenticated users to obtain sensitive information via a direct request, aka Bug ID CSCue79279.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2013-06-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:secure_access_control_server_solution_engine

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3380
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-3380

Check your stack JSON